about AUTHORITY SECTION

Torinthiel torinthiel at data.pl
Fri Mar 4 15:32:16 UTC 2011



Dnia 2011-03-04 23:07 terry napisał(a):


>> Look at RA and RD.  If the server recurses, you will get a answer.
>> If the server does not recurse, you will get a referral.  Then there
>> are the really old broken servers which get this wrong.
>>
>
>Hi Mark,
>
>Please see this for details:
>
>$ dig nsbeta.info ns @ns34.domaincontrol.com
>
>; <<>> DiG 9.4.2-P2.1 <<>> nsbeta.info ns @ns34.domaincontrol.com
>;; global options:  printcmd
>;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41454
>;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
>;; WARNING: recursion requested but not available
>
>;; QUESTION SECTION:
>;nsbeta.info.                   IN      NS
>
>;; ANSWER SECTION:
>nsbeta.info.            3600    IN      NS      ns34.domaincontrol.com.
>nsbeta.info.            3600    IN      NS      ns33.domaincontrol.com.
>
>
>There isn't the "ra" flag in the response, why the nameserver has been
>also answering with the "ANSWER SECTION"? I think it should answer
>with the "AUTHORITY SECTION".

But in this case, you're asking the authotrative server. Authorative server 
answers in answer section, as it knows the answer. Authorative section is 
for 'I don't know, ask ...'
The rule above goes for servers which are not authorative for a given zone.
Torinthiel


More information about the bind-users mailing list