non-recurce queries on 8.2.2 pl 5

[Peter.Pedersen at sas.dk]

Hi,

we have a DNS server running as strictly forward/cache on a firewall server
with the bind 8.2.2 pl 5.
The domain sas.star-allinace.net is defined with a primary and a secondary
server on our intranet.

When we make a non-recurce query to this DNS on a know host it come back
with no-answer.

Then we make a recurce query, and it answers correctly with the A-record.

Now we are able to make a non-recurce query and it answers correctly with
the A-record.

It there something we have missed with the new forward-zone statement in
bind 8.2.2 ??

Here is the output from nslookup:

> set norecurce
> set d2
> cphmsgt002a.sas.star-alliance.net.
Server:  cphfws05.sas.star-alliance.net
Address:  57.60.12.7

------------
SendRequest(), len 51
    HEADER:
        opcode = QUERY, id = 3, rcode = NOERROR
        header flags:  query
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        cphmsgt002a.sas.star-alliance.net, type = A, class = IN

------------
------------
Got answer (128 bytes):
    HEADER:
        opcode = QUERY, id = 3, rcode = NOERROR
        header flags:  response, recursion avail.
        questions = 1,  answers = 0,  authority records = 2,  additional = 0

    QUESTIONS:
        cphmsgt002a.sas.star-alliance.net, type = A, class = IN
    AUTHORITY RECORDS:
    ->  sas.star-alliance.net
        type = NS, class = IN, dlen = 21
        nameserver = cphdns01.net.sas.dk
        ttl = 84786 (23 hours 33 mins 6 secs)
    ->  sas.star-alliance.net
        type = NS, class = IN, dlen = 11
        nameserver = cphdns02.net.sas.dk
        ttl = 84786 (23 hours 33 mins 6 secs)

------------
*** No address (A) records available for cphmsgt002a.sas.star-alliance.net.
> set recurce
> cphmsgt002a.sas.star-alliance.net.
Server:  cphfws05.sas.star-alliance.net
Address:  57.60.12.7

------------
SendRequest(), len 51
    HEADER:
        opcode = QUERY, id = 4, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        cphmsgt002a.sas.star-alliance.net, type = A, class = IN

------------
------------
Got answer (176 bytes):
    HEADER:
        opcode = QUERY, id = 4, rcode = NOERROR
        header flags:  response, auth. answer, want recursion, recursion
avail.
        questions = 1,  answers = 1,  authority records = 2,  additional = 2

    QUESTIONS:
        cphmsgt002a.sas.star-alliance.net, type = A, class = IN
    ANSWERS:
    ->  cphmsgt002a.sas.star-alliance.net
        type = A, class = IN, dlen = 4
        internet address = 159.195.93.12
        ttl = 86400 (1 day)
    AUTHORITY RECORDS:
    ->  sas.star-alliance.net
        type = NS, class = IN, dlen = 21
        nameserver = cphdns01.net.sas.dk
        ttl = 86400 (1 day)
    ->  sas.star-alliance.net
        type = NS, class = IN, dlen = 11
        nameserver = cphdns02.net.sas.dk
        ttl = 86400 (1 day)
    ADDITIONAL RECORDS:
    ->  cphdns01.net.sas.dk
        type = A, class = IN, dlen = 4
        internet address = 159.195.66.66
        ttl = 0 (0 secs)
    ->  cphdns02.net.sas.dk
        type = A, class = IN, dlen = 4
        internet address = 159.195.77.77
        ttl = 0 (0 secs)

------------
Name:    cphmsgt002a.sas.star-alliance.net
Address:  159.195.93.12

> set norecurce
> cphmsgt002a.sas.star-alliance.net
Server:  cphfws05.sas.star-alliance.net
Address:  57.60.12.7

------------
SendRequest(), len 51
    HEADER:
        opcode = QUERY, id = 5, rcode = NOERROR
        header flags:  query
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        cphmsgt002a.sas.star-alliance.net, type = A, class = IN

------------
------------
Got answer (144 bytes):
    HEADER:
        opcode = QUERY, id = 5, rcode = NOERROR
        header flags:  response, recursion avail.
        questions = 1,  answers = 1,  authority records = 2,  additional = 0

    QUESTIONS:
        cphmsgt002a.sas.star-alliance.net, type = A, class = IN
    ANSWERS:
    ->  cphmsgt002a.sas.star-alliance.net
        type = A, class = IN, dlen = 4
        internet address = 159.195.93.12
        ttl = 86381 (23 hours 59 mins 41 secs)
    AUTHORITY RECORDS:
    ->  sas.star-alliance.net
        type = NS, class = IN, dlen = 21
        nameserver = cphdns01.net.sas.dk
        ttl = 84534 (23 hours 28 mins 54 secs)
    ->  sas.star-alliance.net
        type = NS, class = IN, dlen = 11
        nameserver = cphdns02.net.sas.dk
        ttl = 84534 (23 hours 28 mins 54 secs)

------------
Non-authoritative answer:
Name:    cphmsgt002a.sas.star-alliance.net
Address:  159.195.93.12


Thanks in advance

Peter Pedersen

E-mail: 		peter.pedersen at sas.dk
Phone:		+45 32 32 6138
Fax:		+45 32 32 6731
SAS-mail:	CPHXA/PED

Scandinavian Airlines Data Denmark A/S
Afd. CPHXA
Engvej 165, Postbox 1819
DK-2300  København S