about AUTHORITY SECTION
terry
terry at list.dnsbed.com
Fri Mar 4 15:07:32 UTC 2011
2011/3/4 Mark Andrews <marka at isc.org>:
>
> In message <AANLkTi=9B07Q=FLysN6s-0scOSsNeuxMS0qgY9h+OKM5 at mail.gmail.com>, terr
> y writes:
>> Hello,
>>
>> When I delegate a subdomain in a zone example.com, the config in
>> named.conf is like:
>>
>> test.example.com. 3600 IN NS ns1.another.com.
>> test.example.com. 3600 IN NS ns2.another.com.
>>
>> Then I dig to the auth-server of the example zone:
>>
>> dig test.example.com ns @ns1.example.com
>>
>> I found some servers return the ANSWER SECTION, but some servers
>> return the AUTHORITY SECTION.
>>
>> For example:
>>
>> ;; ANSWER SECTION:
>> test.example.com. 3600 IN NS ns2.another.com.
>> test.example.com. 3600 IN NS ns1.another.com.
>>
>> And:
>>
>> ;; AUTHORITY SECTION:
>> test.example.com. 3600 IN NS ns2.another.com.
>> test.example.com. 3600 IN NS ns1.another.com.
>>
>>
>> I'm confused, shall name server answer with ANSWER or AUTHORITY for this case
>> ?
>
> Look at RA and RD. If the server recurses, you will get a answer.
> If the server does not recurse, you will get a referral. Then there
> are the really old broken servers which get this wrong.
>
Hi Mark,
Please see this for details:
$ dig nsbeta.info ns @ns34.domaincontrol.com
; <<>> DiG 9.4.2-P2.1 <<>> nsbeta.info ns @ns34.domaincontrol.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41454
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;nsbeta.info. IN NS
;; ANSWER SECTION:
nsbeta.info. 3600 IN NS ns34.domaincontrol.com.
nsbeta.info. 3600 IN NS ns33.domaincontrol.com.
;; Query time: 183 msec
;; SERVER: 208.109.255.17#53(208.109.255.17)
;; WHEN: Fri Mar 4 22:59:39 2011
;; MSG SIZE rcvd: 123
There isn't the "ra" flag in the response, why the nameserver has been
also answering with the "ANSWER SECTION"? I think it should answer
with the "AUTHORITY SECTION".
Thanks again.
More information about the bind-users
mailing list