nxdomain

[Nick Edwards]

The typos was more of how I came about my request, forget the typo as
such, it the actual answer,  to use a more common well known name, if
I type

~$ host www.undernet.org ns1
Using domain server:
Name: ns1

Host www.undernet.org not found: 3(NXDOMAIN)

Above should be, and I'm darn sure used to be, REFUSED -  not NXDOMAIN

perhaps I should also include my options in my original post, that was
remiss of me

acl trust contains localhost and the servers actual IP addresses,
nowhere does it permit the IP range I tried from

options {
        directory "/var/named";
        allow-query { trust; };
        allow-transfer { localhost; };
        blackhole { bogon; };
        recursive-clients 2000;
        clients-per-query 40;
        tcp-clients 100;
        recursion no;
        additional-from-cache no;
        transfer-format many-answers;
        masterfile-format text;
        interface-interval 0;
        dnssec-enable yes;
        dnssec-validation yes;
};




On 8/28/13, Matus UHLAR - fantomas <uhlar at fantomas.sk> wrote:
> On 28.08.13 23:13, Nick Edwards wrote:
>>In just testing a few things with our authoritative server, I made a
>>typo, and, much to my surprise the server responds NXDOMAIN to
>>requests from unauthed requesters, this used to return  REFUSED, when
>>did this error change?
>>
>>(bind 9.9.3-P2)
>
> what typo?
> --
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> I'm not interested in your website anymore.
> If you need cookies, bake them yourself.
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>