what should bind do after receiving a SERVFAIL

[Mark Andrews]

	The header does not match the number of records actually
	in the dns message.  The additional section actually has
	11 records where the header says there are 13 records.  You
	will note that there are no A records for l.root-servers.net
	and m.root-servers.net.

	Dig, being a diagnotic tool, attempts to display everything
	it can.  You can disable this with +nobesteffort.

	When you set "tc" you also have to adjust the counts in the
	header to match what you transmit.  The authoritative servers
	have not done this.  The answer is malformed.

	Mark

% dig www.deltapoint.be +norec @ns3.combell.net +ignore
;; Warning: Message parser reports malformed message packet.

; <<>> DiG 9.3.4-P1 <<>> www.deltapoint.be +norec @ns3.combell.net +ignore
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32973
;; flags: qr aa tc; QUERY: 1, ANSWER: 2, AUTHORITY: 13, ADDITIONAL: 13

;; QUESTION SECTION:
;www.deltapoint.be.             IN      A

;; ANSWER SECTION:
www.deltapoint.be.      3600    IN      CNAME   virtualhosting.brightsites.be.
virtualhosting.brightsites.be. 3600 IN  CNAME   virtualhosting.newlink.cz.

;; AUTHORITY SECTION:
.                       518400  IN      NS      a.root-servers.net.
.                       518400  IN      NS      b.root-servers.net.
.                       518400  IN      NS      c.root-servers.net.
.                       518400  IN      NS      d.root-servers.net.
.                       518400  IN      NS      e.root-servers.net.
.                       518400  IN      NS      f.root-servers.net.
.                       518400  IN      NS      g.root-servers.net.
.                       518400  IN      NS      h.root-servers.net.
.                       518400  IN      NS      i.root-servers.net.
.                       518400  IN      NS      j.root-servers.net.
.                       518400  IN      NS      k.root-servers.net.
.                       518400  IN      NS      l.root-servers.net.
.                       518400  IN      NS      m.root-servers.net.

;; ADDITIONAL SECTION:
a.root-servers.net.     3600000 IN      A       198.41.0.4
b.root-servers.net.     3600000 IN      A       192.228.79.201
c.root-servers.net.     3600000 IN      A       192.33.4.12
d.root-servers.net.     3600000 IN      A       128.8.10.90
e.root-servers.net.     3600000 IN      A       192.203.230.10
f.root-servers.net.     3600000 IN      A       192.5.5.241
g.root-servers.net.     3600000 IN      A       192.112.36.4
h.root-servers.net.     3600000 IN      A       128.63.2.53
i.root-servers.net.     3600000 IN      A       192.36.148.17
j.root-servers.net.     3600000 IN      A       192.58.128.30
k.root-servers.net.     3600000 IN      A       193.0.14.129

;; Query time: 343 msec
;; SERVER: 193.111.95.9#53(193.111.95.9)
;; WHEN: Wed Jun 18 09:29:25 2008
;; MSG SIZE  rcvd: 512

% 

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org