DNS "A" query for a single dot

Chris Thompson cet1 at hermes.cam.ac.uk
Tue Mar 11 12:23:23 UTC 2008


On Mar 11 2008, Barry Margolin wrote:

>In article <fr4vdl$2c7l$1 at sf1.isc.org>, Mark <anonymoususr at gmail.com> 
>wrote:
>
>> Hello ,
>> 
>> Does anybody knows what an "A" query for a dot (".") means?
>
>"." is the root domain.
>
>> Is it part of DNS and serve a special purpose?
>> Is it a bug on the client making the query?
>> Is it an indicative of a bot/worm making queries?
>> 
>> I am parsing the DNS packet using the name server library (function
>> ns_initparse) and some  DNS packets have questions for "."
>
>I think there are a number of domains that have MX records pointing to 
>the root, as a convention to prevent mail from being sent to the domain.

Positive incentive for some Evil Root Zone Administrator to set up
an A record and trap all that e-mail, isn't it? No wildcard needed!

I also seem to recall lookups for (IN,A,".") being used by monitoring
software to test whether nameservers are up or not. Not the best choice, 
I thought.

-- 
Chris Thompson
Email: cet1 at cam.ac.uk


More information about the bind-users mailing list