Why is Bind 9 refusing these delegations?
Mark_Andrews at isc.org
Mark_Andrews at isc.org
Mon Jan 27 04:41:46 UTC 2003
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Mark_Andrews at isc.org wrote:
> >
> > Bind 9 will give *different* answers to recursive and
> > non-recursive queries. The non-recursive answer will come
> > from its zone data. The recursive answer will come from
> > the server for b.a.
> >
> > The first question is "tell me the nameservers for b.a or
> > how to find them". The second question is "tell me the
> > nameservers for b.a".
> >
> > If named serves any of the parents to b.a and not b.a, it
> > will answer the first with a referal (how to find them).
> > The second it will follow its referal and get the answer
> > from the other server even if it disagrees with the referal
> > (there are no NS records).
> >
> > BIND 8 didn't have the data structures to do this so you
> > always got the answer from the zone data even if it disagreed
> > with what the child zone said.
>
> Is that the quick way of saying that "dig ns b.a" gives no name
> server records because the zone file for "b.a" has no NS records
> in it? ;-)
It may be because of that.
When you are testing a authoritative server (or the
authoritative zones) use non-recursive queries.
Mark
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQE+NJ9SGFXfHI9FVgYRAteDAKDF8fMXSHMVlopnpYcUjx00ieueTgCdFt0p
> oAUE6I6p5aasBtlnjF12zSc=
> =g0sq
> -----END PGP SIGNATURE-----
>
>
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at isc.org
More information about the bind-users
mailing list