diff --git a/CHANGES b/CHANGES
index e65fcf0824..f6d4adff08 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
+ list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
+ [RT #31336]
+
3394. [bug] Adjust 'sucessfully validated after lower casing
signer' log level and category. [RT #31414]
diff --git a/bin/named/server.c b/bin/named/server.c
index 1d7984dec6..9a8c2831b1 100644
--- a/bin/named/server.c
+++ b/bin/named/server.c
@@ -252,6 +252,72 @@ const char *empty_zones[] = {
"31.172.IN-ADDR.ARPA",
"168.192.IN-ADDR.ARPA",
+ /* RFC 6598 */
+ "64.100.IN-ADDR.ARPA",
+ "65.100.IN-ADDR.ARPA",
+ "66.100.IN-ADDR.ARPA",
+ "67.100.IN-ADDR.ARPA",
+ "68.100.IN-ADDR.ARPA",
+ "69.100.IN-ADDR.ARPA",
+ "70.100.IN-ADDR.ARPA",
+ "71.100.IN-ADDR.ARPA",
+ "72.100.IN-ADDR.ARPA",
+ "73.100.IN-ADDR.ARPA",
+ "74.100.IN-ADDR.ARPA",
+ "75.100.IN-ADDR.ARPA",
+ "76.100.IN-ADDR.ARPA",
+ "77.100.IN-ADDR.ARPA",
+ "78.100.IN-ADDR.ARPA",
+ "79.100.IN-ADDR.ARPA",
+ "80.100.IN-ADDR.ARPA",
+ "81.100.IN-ADDR.ARPA",
+ "82.100.IN-ADDR.ARPA",
+ "83.100.IN-ADDR.ARPA",
+ "84.100.IN-ADDR.ARPA",
+ "85.100.IN-ADDR.ARPA",
+ "86.100.IN-ADDR.ARPA",
+ "87.100.IN-ADDR.ARPA",
+ "88.100.IN-ADDR.ARPA",
+ "89.100.IN-ADDR.ARPA",
+ "90.100.IN-ADDR.ARPA",
+ "91.100.IN-ADDR.ARPA",
+ "92.100.IN-ADDR.ARPA",
+ "93.100.IN-ADDR.ARPA",
+ "94.100.IN-ADDR.ARPA",
+ "95.100.IN-ADDR.ARPA",
+ "96.100.IN-ADDR.ARPA",
+ "97.100.IN-ADDR.ARPA",
+ "98.100.IN-ADDR.ARPA",
+ "99.100.IN-ADDR.ARPA",
+ "100.100.IN-ADDR.ARPA",
+ "101.100.IN-ADDR.ARPA",
+ "102.100.IN-ADDR.ARPA",
+ "103.100.IN-ADDR.ARPA",
+ "104.100.IN-ADDR.ARPA",
+ "105.100.IN-ADDR.ARPA",
+ "106.100.IN-ADDR.ARPA",
+ "107.100.IN-ADDR.ARPA",
+ "108.100.IN-ADDR.ARPA",
+ "109.100.IN-ADDR.ARPA",
+ "110.100.IN-ADDR.ARPA",
+ "111.100.IN-ADDR.ARPA",
+ "112.100.IN-ADDR.ARPA",
+ "113.100.IN-ADDR.ARPA",
+ "114.100.IN-ADDR.ARPA",
+ "115.100.IN-ADDR.ARPA",
+ "116.100.IN-ADDR.ARPA",
+ "117.100.IN-ADDR.ARPA",
+ "118.100.IN-ADDR.ARPA",
+ "119.100.IN-ADDR.ARPA",
+ "120.100.IN-ADDR.ARPA",
+ "121.100.IN-ADDR.ARPA",
+ "122.100.IN-ADDR.ARPA",
+ "123.100.IN-ADDR.ARPA",
+ "124.100.IN-ADDR.ARPA",
+ "125.100.IN-ADDR.ARPA",
+ "126.100.IN-ADDR.ARPA",
+ "127.100.IN-ADDR.ARPA",
+
/* RFC 5735 and RFC 5737 */
"0.IN-ADDR.ARPA", /* THIS NETWORK */
"127.IN-ADDR.ARPA", /* LOOPBACK */
diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index eae919fed5..87696da0ce 100644
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -9183,7 +9183,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
servers. The official servers which cover these namespaces
return NXDOMAIN responses to these queries. In particular,
these cover the reverse namespaces for addresses from
- RFC 1918, RFC 4193, and RFC 5737. They also include the
+ RFC 1918, RFC 4193, RFC 5737 and RFC 6598. They also include the
reverse namespace for IPv6 local address (locally assigned),
IPv6 link local addresses, the IPv6 loopback address and the
IPv6 unknown address.
@@ -9214,6 +9214,70 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
30.172.IN-ADDR.ARPA
31.172.IN-ADDR.ARPA
168.192.IN-ADDR.ARPA
+ 64.100.IN-ADDR.ARPA
+ 65.100.IN-ADDR.ARPA
+ 66.100.IN-ADDR.ARPA
+ 67.100.IN-ADDR.ARPA
+ 68.100.IN-ADDR.ARPA
+ 69.100.IN-ADDR.ARPA
+ 70.100.IN-ADDR.ARPA
+ 71.100.IN-ADDR.ARPA
+ 72.100.IN-ADDR.ARPA
+ 73.100.IN-ADDR.ARPA
+ 74.100.IN-ADDR.ARPA
+ 75.100.IN-ADDR.ARPA
+ 76.100.IN-ADDR.ARPA
+ 77.100.IN-ADDR.ARPA
+ 78.100.IN-ADDR.ARPA
+ 79.100.IN-ADDR.ARPA
+ 80.100.IN-ADDR.ARPA
+ 81.100.IN-ADDR.ARPA
+ 82.100.IN-ADDR.ARPA
+ 83.100.IN-ADDR.ARPA
+ 84.100.IN-ADDR.ARPA
+ 85.100.IN-ADDR.ARPA
+ 86.100.IN-ADDR.ARPA
+ 87.100.IN-ADDR.ARPA
+ 88.100.IN-ADDR.ARPA
+ 89.100.IN-ADDR.ARPA
+ 90.100.IN-ADDR.ARPA
+ 91.100.IN-ADDR.ARPA
+ 92.100.IN-ADDR.ARPA
+ 93.100.IN-ADDR.ARPA
+ 94.100.IN-ADDR.ARPA
+ 95.100.IN-ADDR.ARPA
+ 96.100.IN-ADDR.ARPA
+ 97.100.IN-ADDR.ARPA
+ 98.100.IN-ADDR.ARPA
+ 99.100.IN-ADDR.ARPA
+ 100.100.IN-ADDR.ARPA
+ 101.100.IN-ADDR.ARPA
+ 102.100.IN-ADDR.ARPA
+ 103.100.IN-ADDR.ARPA
+ 104.100.IN-ADDR.ARPA
+ 105.100.IN-ADDR.ARPA
+ 106.100.IN-ADDR.ARPA
+ 107.100.IN-ADDR.ARPA
+ 108.100.IN-ADDR.ARPA
+ 109.100.IN-ADDR.ARPA
+ 110.100.IN-ADDR.ARPA
+ 111.100.IN-ADDR.ARPA
+ 112.100.IN-ADDR.ARPA
+ 113.100.IN-ADDR.ARPA
+ 114.100.IN-ADDR.ARPA
+ 115.100.IN-ADDR.ARPA
+ 116.100.IN-ADDR.ARPA
+ 117.100.IN-ADDR.ARPA
+ 118.100.IN-ADDR.ARPA
+ 119.100.IN-ADDR.ARPA
+ 120.100.IN-ADDR.ARPA
+ 121.100.IN-ADDR.ARPA
+ 122.100.IN-ADDR.ARPA
+ 123.100.IN-ADDR.ARPA
+ 124.100.IN-ADDR.ARPA
+ 125.100.IN-ADDR.ARPA
+ 126.100.IN-ADDR.ARPA
+ 127.100.IN-ADDR.ARPA
0.IN-ADDR.ARPA
127.IN-ADDR.ARPA
254.169.IN-ADDR.ARPA