CNAME Issue - Whether to use CNAME-data or Response-Flag

Doug Barton dougb at dougbarton.us
Fri Apr 9 20:45:18 UTC 2010


On 04/09/10 13:28, David Forrest wrote:
> 
> Doug: I think it is a server error that is being reported because
> the status is NXDOMAIN instead of the expected NOERROR.

Well that's all you really had to say. :)  I admit that I didn't catch
the NXDOMAIN bit when I looked at the dig output, I was focused on the
ANSWER and ADDITIONAL sections.

I'll leave it up to the protocol experts to answer your question, but my
followup question is, what bad thing are you seeing happen because of
this? From your original post it seems like some resolvers are not doing
what BIND 9.6.2-P1 is doing, namely chasing the CNAME to come up with an
answer to the A query. Is that your concern?

> Could you dig it again @primary-dns.co.uk with +norec and see if your
> output then shows NOERROR?

Doesn't matter, recursion is not available on the authoritative server
anyway.


Doug

-- 

	... and that's just a little bit of history repeating.
			-- Propellerheads

	Improve the effectiveness of your Internet presence with
	a domain name makeover!    http://SupersetSolutions.com/




More information about the bind-users mailing list