FORMERR resolving AAAA/IN records

[Mark Andrews]

In message <20090326141903.19179175A0 at britaine.cis.anl.gov>, b19141 at anl.gov writ
es:
> Oliver Henriot <Oliver.Henriot at imag.fr> wrote:
> 
> dnsserver% !! AAAA
> dig auniarael.com @216.69.185.38 AAAA
> 
> ; <<>> DiG 8.3 <<>> auniarael.com @216.69.185.38 AAAA 
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
> ;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      auniarael.com, type = AAAA, class = IN
> 
> ;; AUTHORITY SECTION:
> .                       1D IN SOA       cpns01.secureserver.net. dns.jomax.net
> . (
>                                         20080922        ; serial
>                                         8H              ; refresh
>                                         2H              ; retry
>                                         1W              ; expiry
>                                         1D )            ; minimum
> 
> auniarael.com.          1H IN NS        cpns01.secureserver.net.
> auniarael.com.          1H IN NS        cpns02.secureserver.net.
> 
> ;; Total query time: 62 msec
> ;; FROM: dnsserver.anl.gov to SERVER: 216.69.185.38  216.69.185.38
> ;; WHEN: Thu Mar 26 09:06:02 2009
> ;; MSG SIZE  sent: 31  rcvd: 157

	Note this answer is internally self inconsistant.  AA=1
	which indicates the answer is authoritative yet the authority
	section contains SOA and NS RRsets with different owners
	with the SOA being higher in the namespace than the NS
	RRset.

	Even if AA=0 it would still be self inconsistant and the
	relationship between the SOA and NS RRsets is impossible
	in a well formed response.

	Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org