bind-9.7.2 not forward CNAMEDed domain names

Florian Weimer fweimer at bfk.de
Tue Feb 22 09:58:12 UTC 2011


* Drunkard Zhang:

> 2011/2/22 Florian Weimer <fweimer at bfk.de>:
>> * Drunkard Zhang:
>>
>>> The upstream DNS server 211.161.192.1 did responsed correctly, by
>>> analysis via tcpdump.  But why bind didn't use THE RESPONSE, but
>>> resolves again from root-servers.
>>
>> Unfortunately, the information provided by 211.161.192.1 must be
>> discarded because that is server is not authoritative for cachecn.com.
>> From your resolver's perspective, it is a totally unrelated domain
>> name.
>>
> Thanks! So bind can accept second hand answer, but won't accept third
> hand (or more) answer?

It shouldn't accept the second CNAME, either.  Are you sure that it
does?  It's probably the same globally, so it's not visible from the
cache contents.

-- 
Florian Weimer                <fweimer at bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99



More information about the bind-users mailing list