Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Add PTR and NS Records to DNS Resolver possible?

    Scheduled Pinned Locked Moved DHCP and DNS
    99 Posts 14 Posters 31.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      "pc-printer-discovery IN NS  print-server-host"

      That is the NS you point to for that domain..

      But your PTR query is for this domain
      "pc-printer-discovery**.XXX.com.**"

      That is not the same, so that NS record does not point you to the printserverhost..

      Dude its very difficult to work with out the actual FQDN.. If you want more help from me your going to need to actual post what your putting in, not the template..

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      1 Reply Last reply Reply Quote 0
      • P
        posto587
        last edited by

        The DNS suffix from pfSense is: lew.wohnheim

        The FQDN from pfSense is: gate.lew.wohnheim

        The papercut support says, I need to add these DNS delegations:

        An A record pointing to your server running Mobility Print my-print-server IN A 10.1.1.4
        A delegated subzone for pc-printer-discovery that points to the A record pc-printer-discovery IN NS my-print-server
        Two Pointer (PTR) records in root DNS that connect the server to the subzone b._dns-sd._udp IN PTR pc-printer-discovery
        lb._dns-sd._udp IN PTR pc-printer-discovery

        So when adding the entries:

        b._dns-sd._udp      IN PTR pc-printer-discovery
        lb._dns-sd._udp      IN PTR pc-printer-discovery
        pc-printer-discovery IN NS  mobility
        mobility    IN A  10.100.15.34

        the following lookup isn't working:

        nslookup -query=ptr _ipps._tcp.pc-printer-discovery.lew.wohnheim.

        Even when I'm adding these entries:

        b._dns-sd._udp.lew.wohnheim      IN PTR pc-printer-discovery
        lb._dns-sd._udp.lew.wohnheim      IN PTR pc-printer-discovery
        pc-printer-discovery.lew.wohnheim IN NS  mobility
        mobility.lew.wohnheim    IN A  10.100.15.34

        the lookup isn't working.

        Is this the right syntax for unbound? How do I add a delegated subzone?

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          that is the correct syntax I showed doing a query for those entries..

          "pc-printer-discovery.lew.wohnheim IN NS  mobility"

          This is not VALID… mobility is not a valid FQDN..  What is suppose to be the NS?  10.100.15.34?  For what domain?

          "pc-printer-discovery IN NS  print-server-host"

          Then it would be

          pc-printer-discovery IN NS  mobility.lew.wohnheim
          mobility.lew.wohnheim    IN A  10.100.15.34

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

          1 Reply Last reply Reply Quote 0
          • K
            kolpinkb
            last edited by

            So, I was interested in the product too.  I have it half working, meaning that two of the DNS requirements are met and only the PTR records remain to be configured.  However, apparently those are only needed for iOS and MacOS and not Android.  Yet, when I tried to discover the printer on Android nothing shows up.  The following entries I added to Unbound Resolver's custom options field:

            server:
            local-zone: "example.com." transparent
            local-data: "mobility-print-host.example.com. A 192.168.71.3"
            local-data: "pc-printer-discovery.example.com. NS mobility-print-host."

            I'm not sure how important the periods are at the end of each subdomain.  Whether its "mobility-print-host." or "mobility-print-host" seems to work just fine in Mobility Print's eyes.

            Working on the PTR records now and will update if I get anywhere.

            ![papercut ng mobility print dns.png](/public/imported_attachments/1/papercut ng mobility print dns.png)
            ![papercut ng mobility print dns.png_thumb](/public/imported_attachments/1/papercut ng mobility print dns.png_thumb)

            1 Reply Last reply Reply Quote 0
            • T
              trentuk
              last edited by

              Hi all,

              I'm trying to get Mobility Print working with DNS Resolver too but without success, here are my custom options, all seem to be correct & present when doing a lookup from a client but I still can't see any printers in the Mobility Print app on Android or from any Apple iOS/OSX devices.

              –-------------------------------------------------------------------------------------
              server:
              local-data: "b._dns-sd._udp IN PTR pc-printer-discovery"
              local-data: "lb._dns-sd._udp IN PTR pc-printer-discovery"
              local-data: "_ipps._tcp IN PTR pc-printer-discovery"
              local-data: "pc-printer-discovery IN NS lipa-printers.mydomain.removed"
              local-data: "lipa-printers.mydomain.removed IN A 10.2.1.5"

              Just to be clear, I've removed my actual domain and replaced with 'mydomain.removed'

              Any thoughts, suggestions, offers of moral support gratefully received!  ;)

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                "'mydomain.removed' "

                What is the domain.. Did you set this zone as transparent?  Can not help you people your going to obfuscate and ask why it doesn't work.. My guess is the domain actually resolve on public and its looking for something you didn't put in so it gets back NX..

                If all the stuff you put responds when you query unbound.. How is unbound not doing what you told it to do?

                b._dns-sd._udp IN PTR pc-printer-discovery
                    lb._dns-sd._udp IN PTR pc-printer-discovery
                    pc-printer-discovery IN NS print-server-host
                    print-server-host IN A XXX.XXX.XXX.XXX

                I don't see any . periods on the end of your entries..

                What I would suggest is connect them for the setting up in unbound.  Keep in mind unbound is not really meant to be an authoritative dns..

                This is suppose to be a delegated domain.. So what domain are you using local? yourdomain.com? what??

                Says right on their site
                "The name of the search domain(s) for your devices (eg. Android phone, Chromebook)"

                So what FQDN are you using for pc-printer-discovery ???  Its suppose to be pc-printer-discovery.yourdomain.tld and your client is suppose to be using a search suffix to find that record!!!

                delegatedzone.png
                delegatedzone.png_thumb
                fqdn.png
                fqdn.png_thumb

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  
                  local-data: "b._dns-sd._udp IN PTR pc-printer-discovery"
                  local-data: "lb._dns-sd._udp IN PTR pc-printer-discovery"
                  local-data: "_ipps._tcp IN PTR pc-printer-discovery"
                  
                  

                  Dafuq?!

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    Exactly!!!

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      @OP: Here's some valid example of PTR:

                      
                      local-data-ptr: "192.0.2.1 foo.example.com"
                      local-data-ptr: "2001:db8:a:b:c::1 foo.example.com"
                      
                      
                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        Nope they want PTR setup for b._dns-sd._udp

                        I have downloaded the damn product they have a 40 day trial… I have to go out for my morning walk.. And then work.. But will try and get it setup today so I can screen shot exactly how to get it working with the domain your using as your search domain.. And that their papercut ng interface shows it all green, etc.  And you can print from some mobile client..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          AFAICT this shit wants/needs mDNS/Zeroconf and messing with Unbound will do zero useful work there. Perhaps look at Avahi instead.

                          Junk.

                          1 Reply Last reply Reply Quote 0
                          • K
                            kolpinkb
                            last edited by

                            You can do either DNS records or mDNS.  I tried the mDNS discovery option in PaperCut NG Mobility print and my printer does show up in their Android app but I can an internal server error.  Also, I found the avahi daemon to crash intermittently with default settings.

                            Would much prefer to get the DNS PTR records working.

                            1 Reply Last reply Reply Quote 0
                            • T
                              trentuk
                              last edited by

                              Thanks for offering to have a look at this johnpoz, very much appreciated!

                              This site is using split DNS, by this I mean they're using the same domain internally as externally, thus you're probably correct that something is missing from the DNS config in pfSense and the Mobility Print client is then looking at the public DNS to find it and then receives NX.

                              I've asked the IT Director if I can post the domain name here but they would prefer not to, therefore could we use 'yourdomain.ltd' whilst discussing the configuration?

                              pfSense version: 2.3.4-RELEASE-p1

                              System - General Setup - Domain: yourdomain.ltd

                              DNS Resolver - System Domain Local Zone Type: Transparent

                              Client DNS Suffix is: yourdomain.ltd

                              Given the above information, would you suggest something along the following lines in DNS Resolver - Custom Options:

                              b._dns-sd._udp.yourdomain.ltd. IN PTR pc-printer-discovery.yourdomain.ltd.
                              lb._dns-sd._udp.yourdomain.ltd. IN PTR pc-printer-discovery.yourdomain.ltd.
                              pc-printer-discovery.yourdomain.ltd. IN NS print-server-host.yourdomain.ltd.
                              print-server-host.yourdomain.ltd. IN A XXX.XXX.XXX.XXX

                              Many thanks in advance …

                              1 Reply Last reply Reply Quote 0
                              • DerelictD
                                Derelict LAYER 8 Netgate
                                last edited by

                                I think OP really wants to configure SRV records for that, not PTR records.

                                I would say the confusion knob is turned up to 11.

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  I have downloaded the software, and yeah something is not right that is for sure with their instructions.

                                  Sorry to say I will most likely not get back this for a few days.. I got new internet at home 500/50 and it consuming my interest ;)

                                  What I noticed was didn't even see the client doing a dns query for the PTR.. I think the current mdns that was on the segment was confusing it, etc.  I will have to turn off the mdns on the printer, etc.  And need to run the mobility client on different machine than the papercut ng, etc.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    trentuk
                                    last edited by

                                    Hello Derelict,

                                    @Derelict:

                                    I think OP really wants to configure SRV records for that, not PTR records.

                                    I would say the confusion knob is turned up to 11.

                                    The software vendor specify a requirement for the following records:

                                    ;–-------------- Mobility Print records --------------

                                    b._dns-sd._udp      IN PTR pc-printer-discovery
                                    lb._dns-sd._udp      IN PTR pc-printer-discovery
                                    pc-printer-discovery IN NS  print-server-host
                                    print-server-host    IN A  XXX.XXX.XXX.XXX

                                    ;--------------- End of Mobility Print records ---------

                                    https://www.papercut.com/products/ng/mobility-print/manual/how-to-setup/step-2-configuration/discover-your-printers-using-dns/

                                    Which is possibly the cause of the confusion knob being turned past its recommended level  ;)

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      trentuk
                                      last edited by

                                      Hello johnpoz,

                                      No problem, glad I'm not the only one struggling with this  ???

                                      Enjoy the new connection, hopefully see you back here once you've downloaded the entire internet at blisteringly fast speeds ;)

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kolpinkb
                                        last edited by

                                        Thanks again johnpoz,

                                        This configuration has many of us perplexed.

                                        Have fun with the new 500/50 connection.  I'm sure the increased upload is the best part.

                                        1 Reply Last reply Reply Quote 0
                                        • DerelictD
                                          Derelict LAYER 8 Netgate
                                          last edited by

                                          The software vendor specify a requirement for the following records:

                                          ;–-------------- Mobility Print records --------------

                                          b._dns-sd._udp      IN PTR pc-printer-discovery
                                          lb._dns-sd._udp      IN PTR pc-printer-discovery
                                          pc-printer-discovery IN NS  print-server-host
                                          print-server-host    IN A  XXX.XXX.XXX.XXX

                                          ;--------------- End of Mobility Print records ---------

                                          The software vendor's confusion knob is turned up to at least 12. That makes no sense at all. PTR records do not have names on both sides. They are used to lookup a name when all you have is an address, like 198.51.100.101.

                                          Chattanooga, Tennessee, USA
                                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                          1 Reply Last reply Reply Quote 0
                                          • luckman212L
                                            luckman212 LAYER 8
                                            last edited by

                                            They look like SRV records…. at least the left-hand side.... maybe you can "sniff" the correct format from a working setup using some form of dns-sd -Z

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.