[Apnic-announce] Recent security update and reverse DNS lookup failures

To: apnic-announce at apnic dot net
Subject: [Apnic-announce] Recent security update and reverse DNS lookup failures
From: Sanjaya <sanjaya at apnic dot net>
Date: Fri, 28 Oct 2005 15:30:10 +1000
Cc:
List-archive: <http://www.apnic.net/mailing-lists/apnic-announce>
List-help: <mailto:apnic-announce-request@lists.apnic.net?subject=help>
List-id: apnic-announce.lists.apnic.net
List-post: <mailto:apnic-announce@lists.apnic.net>
List-subscribe: <http://mailman.apnic.net/mailman/listinfo/apnic-announce>, <mailto:apnic-announce-request@lists.apnic.net?subject=subscribe>
List-unsubscribe: <http://mailman.apnic.net/mailman/listinfo/apnic-announce>, <mailto:apnic-announce-request@lists.apnic.net?subject=unsubscribe>
Reply-to: apnic-talk@apnic.net
User-agent: Mozilla Thunderbird 1.0.7 (Windows/20050923)


APNIC performed a security update on an APNIC server at 10:30 am (UTC
+10) on Saturday 22 October 2005.

Unfortunately, this resulted in errors in APNIC's shared zone reverse
delegation data. Other reverse delegation data was not affected.


Details of reverse DNS failures
--------------------------------

  - Reverse DNS lookups to some networks in Japan and Korea failed to
    resolve on Sunday 23 October 2005 from approximately 2:30am to
    10:30pm (UTC +10).

  _ Reverse DNS for ERX ranges from the APNIC region maintained in
    ARIN reverse DNS zones failed to resolve from 2:30am (UTC +10)
    Sunday 23 October 2005 to 1:00am (UTC +10) Monday 24 October 2005.


Causes of the failures
----------------------

  - The security update on Saturday caused some errors in APNIC's shared
    zone reverse delegation data.

  - This resulted in some reverse DNS records accidentally being
    undelegated.

We apologise for the inconvenience these reverse DNS failure may have
caused you.

We have fixed the problem and are putting new systems and procedures in
place to prevent this from happening again.


More information
----------------

Recent and upcoming maintenance windows are listed at:

    http://www.apnic.net/info/maintenance/

For more information on shared zone reverse delegation data, see
section 3.4.1 of "Operational policies for National Internet Registries
 in the APNIC region":

     http://www.apnic.net/docs/policy/operational-policies-nirs.html#3.4.1

Regards
Sanjaya
-- 
______________________________________________________________________
Technical Services Manager                         <sanjaya at apnic dot net>
APNIC                                               ph +61 7 3858 3100
http://www.apnic.net                                fx +61 7 3858 3199
______________________________________________________________________