about AUTHORITY SECTION
Torinthiel
torinthiel at data.pl
Fri Mar 4 15:32:16 UTC 2011
Dnia 2011-03-04 23:07 terry napisał(a):
>> Look at RA and RD. If the server recurses, you will get a answer.
>> If the server does not recurse, you will get a referral. Then there
>> are the really old broken servers which get this wrong.
>>
>
>Hi Mark,
>
>Please see this for details:
>
>$ dig nsbeta.info ns @ns34.domaincontrol.com
>
>; <<>> DiG 9.4.2-P2.1 <<>> nsbeta.info ns @ns34.domaincontrol.com
>;; global options: printcmd
>;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41454
>;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
>;; WARNING: recursion requested but not available
>
>;; QUESTION SECTION:
>;nsbeta.info. IN NS
>
>;; ANSWER SECTION:
>nsbeta.info. 3600 IN NS ns34.domaincontrol.com.
>nsbeta.info. 3600 IN NS ns33.domaincontrol.com.
>
>
>There isn't the "ra" flag in the response, why the nameserver has been
>also answering with the "ANSWER SECTION"? I think it should answer
>with the "AUTHORITY SECTION".
But in this case, you're asking the authotrative server. Authorative server
answers in answer section, as it knows the answer. Authorative section is
for 'I don't know, ask ...'
The rule above goes for servers which are not authorative for a given zone.
Torinthiel
More information about the bind-users
mailing list