Anyway to disable dns_zone_nscheck in 9.8.0?

Mark Andrews marka at isc.org
Fri Apr 8 05:49:54 UTC 2011


In message <BANLkTi=H1onrtxDTdFMpGKz7sLRgLyt3Gg at mail.gmail.com>, Rodney Hives w
rites:
> The dns_zone_nscheck is a real pain for domains that do not have valid A
> records (for their NS records).  Is there anyway to disable this check?
> I started noticing this problem in 9.7xs.  But at this point I just want to
> remove it as it is causing many problems for previous configured name
> servers.
> 
> There seems to value in the master.h for DNS_MASTER_CHECKNS which is similar
> to the other checks (DNS_MASTER_CHECKMX, DNS_MASTER_CHECKMXFAIL, etc.) that
> you can turn off in the options of named.conf.  But I do not see any option
> to remove the dns_zone_nscheck.
> 
> Has anyone removed this function safely?  If so, how?
> 
> Thank you!
> -Rodney Hives

Please explain the operating conditions under which when you think
this is a sensible thing to do?

A nameserver without address records is pointless.
A nameserver pointing to a CNAME/DNAME causes resolution problems.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the bind-users mailing list