Clarification on bind response

[Mark Andrews]

In message <AANLkTinRCDO9EeTOzJB4xsxCp309jAeDTza7wxfehAs4 at mail.gmail.com>, rams writes:
> Hi,
> 
> I have set up data as follows in bind.
> Zone: rameshops5526old.com
> 
> maint.rameshops5526old.com. 300 IN      CNAME
> maint.global.rameshops5526old.com.
> rameshops5526old.com.   21600   IN      NS      dns5.rameshops5526old.com.
> rameshops5526old.com.   21600   IN      NS      dns2.rameshops5526old.com.
> rameshops5526old.com.   21600   IN      NS      dns1.rameshops5526old.com.
> rameshops5526old.com.   21600   IN      NS      dns6.rameshops5526old.com.
> rameshops5526old.com.   21600   IN      NS      dns4.rameshops5526old.com.
> rameshops5526old.com.   21600   IN      NS      dns3.rameshops5526old.com.
> global.rameshops5526old.com. 300 IN     NS      j.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      a.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      l.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      d.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      b.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      e.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      c.ns.nsatc.net.
> 
> Queried against bind and get the reposne as follows
> 
> [root at stulcqacustbind2 recursive_enabled]# dig @10.31.145.194
> maint.rameshops5526old.com.
> ; <<>> DiG 9.6.1-P3 <<>> @10.31.145.194 maint.rameshops5526old.com.
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16855
> ;; flags: qr *aa* rd; QUERY: 1, ANSWER: 1, AUTHORITY: 7, ADDITIONAL: 0
> ;; WARNING: recursion requested but not available
> ;; QUESTION SECTION:
> ;maint.rameshops5526old.com.    IN      A
> ;; ANSWER SECTION:
> maint.rameshops5526old.com. 300 IN      CNAME
> maint.global.rameshops5526old.com.
> ;; AUTHORITY SECTION:
> global.rameshops5526old.com. 300 IN     NS      e.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      l.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      a.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      j.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      c.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      d.ns.nsatc.net.
> global.rameshops5526old.com. 300 IN     NS      b.ns.nsatc.net.
> ;; Query time: 2 msec
> ;; SERVER: 10.31.145.194#53(10.31.145.194)
> ;; WHEN: Tue Aug 24 06:26:31 2010
> ;; MSG SIZE  rcvd: 195
> Here AA flag is returning is it correct? because domain "
> global.rameshops5526old.com. " delegated so we should not return AA flag
> right? Please clarify me.
> 
> Thanks & Regards,
> Ramesh

"aa" indicates that the server is authoritative for the CNAME record.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org