CNAME Issue - Whether to use CNAME-data or Response-Flag

[Steven Wilmot]

From: marka at isc.org [mailto:marka at isc.org] 
Sent: 09 April 2010 11:15 PM
To: Doug Barton
Cc: David Forrest; Steven Wilmot; bind-users at lists.isc.org
Subject: Re: CNAME Issue - Whether to use CNAME-data or Response-Flag 

>>> I would be asking operators of primary-dns.co.uk why they are actively
cache poisioning. 
>>> They have not been delegated aaisp.net.uk so they should not be serving
aaisp.net.uk.

>>> Mark

This is where my knowledge of DNS-configuration and RFCs starts to reach its
limits, and I welcome your thoughts

But I can certainly help provide a bit of background information.

See: http://aaisp.net.uk/kb-broadband-serverlist.html
And: http://aaisp.net.uk/support.html

AAISP are a UK-based ISP, and pride themselves on being technically-friendly
and I'm sure that if your are able to help identify a problem in their
confirguration, they would welcome your input.

>From what I understand, they run both an "authoratitive DNS server" (for
domains that they host) and also a "customer-facing caching-resolver" ...
They also fully support IPv6 and have done some extra DNS-server coding to
integrate with an internal clustered mail-system...

I believe that one of their two systems runs {Unbound DNS -
http://www.unbound.net/) and the other runs Bind, but I'm not certain of
this.

---

I also just noticed the following (not sure if this is any help to you) 

C:\>nslookup -q=ns wilmot.me.uk
  Non-authoritative answer:
  wilmot.me.uk    nameserver = primary-dns.co.uk
  wilmot.me.uk    nameserver = secondary-dns.co.uk

C:\>nslookup -q=ns aaisp.net.uk
  aaisp.net.uk    nameserver = auth.primary-dns.co.uk
  aaisp.net.uk    nameserver = auth.secondary-dns.co.uk

---

Steven