Project

General

Profile

Actions
Copy link

Feature #130

closed

adjust DNSWL and other whitelists to new/additional IPs

Added by Florian Effenberger about 10 years ago. Updated almost 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Alexander Werner
Category:
-
Target version:
-
Start date:
Due date:
% Done:

0%

Tags:
URL:

Description

As we have changed IPs quite a lot these days, we should update our DNSWL record to reflect this
for unknown hostnames, just use vmXXX for A and PTR

Related issues

Related to Infrastructure - Feature #751: BugZilla migrationClosedRobinson Tryon2014-01-052015-01-19

Actions
Actions
Copy link
 #1

Updated by Alexander Werner about 10 years ago

  • Assignee set to Alexander Werner
Actions
Copy link
 #2

Updated by Florian Effenberger over 9 years ago

  • Due date set to 2014-11-28
  • Priority changed from Normal to High

As new machines begin to roll out, this should be handled soon
DNS reverse names will be listed and verified at DNSWL, so PTR and A records should be in place before

Actions
Copy link
 #3

Updated by Alexander Werner over 9 years ago

  • Due date changed from 2014-11-28 to 2014-12-01

As the migration will take until 29 November setting due date to 1st December as only then all new IPs will be in place.

Actions
Copy link
 #4

Updated by Florian Effenberger over 9 years ago

Seems to have troubles via a couple of DNS resolvers incl. Google and Hetzner

Proper IPs are https://[2a01:4f8:131:4e2::aabb] and https://88.198.55.172 but might not work via KDG

Actions
Copy link
 #5

Updated by Florian Effenberger over 9 years ago

  • Due date changed from 2014-12-01 to 2014-12-21

DNSWL has massive problems, filed with them to no avail, website is reachable only via a couple of ISPs/routes
What needs doing is:

  • setting PTR and A records properly before filing a change request with them
  • look up an existing TDF IP address at their site to get our handle there (DNSWL-something)
  • send them an e-mail (don't use the form) to or so (address is on the site), asking to
    • add our netblock
    • remove those hosts that have already vanished (like gru), but not all of them (pumbaa definitely needs to stay!)
  • IMHO you cannot file IPv6 addresses there, but that needs evaluating
Actions
Copy link
 #6

Updated by Florian Effenberger over 9 years ago

Just got a connection to their website
Best is to send an e-mail to with a subject of Suggested Change DNSWL Id 23093

Actions
Copy link
 #7

Updated by Florian Effenberger over 9 years ago

We should have this done before bilbo is migrated, otherwise we might see some real odd e-mail issues :-)

Actions
Copy link
 #8

Updated by Florian Effenberger over 9 years ago

  • Blocks Task #825: migration of bilbo to VM platform added
Actions
Copy link
 #9

Updated by Florian Effenberger over 9 years ago

The page seems to work via all ISPs again, so you can start adding the subnet now

Actions
Copy link
 #10

Updated by Florian Effenberger over 9 years ago

Plus you can (and then should) file IPv6 addresses there, just discovered

Actions
Copy link
 #11

Updated by Alexander Werner over 9 years ago

  • Due date changed from 2014-12-21 to 2015-01-30
Actions
Copy link
 #12

Updated by Florian Effenberger over 9 years ago

Actions
Copy link
 #13

Updated by Florian Effenberger over 9 years ago

  • Due date changed from 2015-01-30 to 2015-01-21
  • Priority changed from High to Urgent

Might make sense to have this before BugZilla gets migrated, as people might have their passwords mass-reset and thus mass-mailed

Actions
Copy link
 #14

Updated by Florian Effenberger about 9 years ago

  • Due date deleted (2015-01-21)
  • Priority changed from Urgent to Normal

Need to re-prioritize and re-schedule due to the recent infra story that needs our attention
Ticket will be updated with proper due date soon

Actions
Copy link
 #15

Updated by Florian Effenberger about 9 years ago

  • Status changed from New to In Progress
Actions
Copy link
 #16

Updated by Florian Effenberger about 9 years ago

Poked them whether we can have that block added without PTR records; not sure, but maybe they are open to that ;-)

Actions
Copy link
 #17

Updated by Florian Effenberger almost 9 years ago

They are not, sadly, just got a reply...

Actions
Copy link
 #18

Updated by Florian Effenberger almost 9 years ago

  • Description updated (diff)
Actions
Copy link
 #19

Updated by Alexander Werner almost 9 years ago

All PTR records are now correctly set up, getting a list of usable IPs and sending them to DNSWL...

Actions
Copy link
 #20

Updated by Alexander Werner almost 9 years ago 

To: admins@dnswl.org
Subject: Suggested Change DNSWL Id 23093

Dear Admins,

due to a changed hoster we would like to suggest the following changes to our DNSWL entries:
- Removal of all IPs in the 78.46.154.96/27 subnet
- Removal of 176.9.46.15/32
- Removal of 176.9.46.182/32
- Removal of 2a01:4f8:150:6201::2/128
- Removal of 2a01:4f8:150:62a2::2/128
- Addition of 89.238.64.204/32
- Addition of 89.238.67.210/32
- Addition of all IPs in the 89.238.68.128/25 subnet
Actions
Copy link
 #21

Updated by Alexander Werner almost 9 years ago

  • Status changed from In Progress to Feedback

Mailed them, now waiting for feedback from DNSWL.

Actions
Copy link
 #22

Updated by Florian Effenberger almost 9 years ago

This needs fixing still:

All now correct except vm152.documentfoundation.org which resolves to an address ending 8 not 2.
Actions
Copy link
 #23

Updated by Alexander Werner almost 9 years ago

  • Status changed from Feedback to Closed

Fixed vm152.documentfoundation.org A record.

Actions
Copy link
 #24

Updated by Florian Effenberger over 8 years ago

  • Blocks deleted (Task #825: migration of bilbo to VM platform)
Actions
Copy link

Also available in: Atom PDF