BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT "Illegal"

Barry Margolin barmar at alum.mit.edu
Mon Jan 26 04:06:24 UTC 2009


In article <gli8nu$ja7$1 at sf1.isc.org>,
 Matthew Pounsett <matt at conundrum.com> wrote:

> In the example above, when I query for "IN A mx.xyz.com?" I do not get  
> an address record back (A, AAAA)..instead I get a CNAME record.   
> Requirements NOT met.

Then there's something wrong with your resolver, since they're supposed 
to follow CNAME records automatically, and return the requested record 
type from the canonical name.

There isn't even an option in the DNS spec to tell the resolver not to 
follow CNAMEs.  The only way to avoid it is to query for the CNAME 
explicitly.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***



More information about the bind-users mailing list