Strange DNS PTR records

Charles Tryon charles.tryon at
Thu Jun 6 13:23:42 MDT 2013

More information:

On Thu, Jun 6, 2013 at 11:04 AM, Charles Tryon <charles.tryon at>wrote:

> OK, I've partially answered my own question, but now I have another...
> I found that I can remove the entire reverse lookup zone through the MS
> tool, without it throwing fits or the exist/doesn't exist catch 22.
> However, when I run my rebuild script to add the PTR records back in, I
> get the following:
> (these are the
> /usr/local/samba/bin/samba-tool dns zonecreate samba
> /usr/local/samba/bin/samba-tool dns add samba 25.0 PTR
> /usr/local/samba/bin/samba-tool dns add samba 26.0 PTR
> /usr/local/samba/bin/samba-tool dns add samba 100.2 PTR
> etc...
> Remember that I'm using a /19 subnet.  This creates folders for "0" and
> "2", and then creates PTR records like and
> I'm assuming my problem is in how I'm calling the samba-tool, but I'm not
> clear on the directions for when you are working with something other than
> a subnet.

The problem is definitely in how the zone is getting created by the
samba-tool dnz zonecreate command.  I deleted the entire reverse zone
again, and then used the Zone Create wizard on the Windows DNS admin tool
to create just the empty zone.  Since I only specified "10.4" for the
subnet (which still isn't strictly correct, since this usually means a /16
or net mask), it didn't try to create a /24 subnet, with
folders under that.  When I used exactly the same samba-tool commands to
create the individual PTR records, the were all created correctly (for
example,, and now work as expected.

So, it there an option on the samba-tool zonecreate command that allows you
to use a specific subnet mask?

Output from the samba-tool query:
<samba:dev>? samba-tool dns query samba @ ALL
  Name=, Records=2, Children=0
    SOA: serial=62, refresh=900, retry=600, expire=86400, minttl=3600, ns=, (flags=600000f0, serial=62,
    NS: (flags=600000f0, serial=1, ttl=3600)
  Name=0, Records=0, Children=34
  Name=1, Records=0, Children=18
  Name=2, Records=0, Children=9

> On Wed, Jun 5, 2013 at 4:18 PM, Charles Tryon <charles.tryon at>wrote:
>> Another question regarding DNS:
>> I have a test domain I provisioned quite a while ago (probably shortly
>> before the final 4.0.0 release, but I don't remember exactly when).  It is
>> currently set up to use BIND 9.9 for DNS.  Most things are running fine on
>> it (though admittedly it doesn't get pushed very hard).
>> When I look at the domain using the DNS manager from Windows Remote
>> Management Tools set (from a Win7 client), I the forward lookup zone looks
>> fine, but I see a bunch of strange PTR records.  Almost all the PTR records
>> have five octets rather than the normal four -- for example,,
>> or  In all cases, the third and fourth positions are the same.
>>  (We are using a /19 subnet.)  The really bizarre thing is that if I try to
>> delete the records, I get an error back that the records "do not exist."
>> Is this an example of the "zombie DNS records" which I've seen mentioned
>> here?
>>  - If it is, what is the best way to clean this up?
>>  - If I use the "samba_upgradedns" command, will that purge/rebuild/fix
>> the DNS database, or will it simply change the front end (BIND vs.
>> Internal) server which is looking at the same back end database?
>> (Re-provisioning this box from scratch isn't entirely out of the
>> question, since it is a test server, but it would be a big pain to
>> reconstruct the domain, especially the machine accounts.  :-( )
>> Thanks!
    Charles Tryon
  “Risks are not to be evaluated in terms of the probability of success,
but in terms of the value of the goal.”
                - Ralph D. Winter

More information about the samba-technical mailing list