Query on ignoring additional section returned in replies

[Reindl Harald]

Am 18.11.2015 um 12:34 schrieb Mark Andrews:
>
> In message <5b818b25da9e40ebbff0e3d6dfec12ed at PVSVREXC06.AD.TMRES.MY>, Elias Ahm
> ed Kamal writes:
>> Even with a broken delegation its like always resolvable with Google DNS or=
>>   even Open DNS. Are there any BIND specific workarounds?
>
> The other nameservers will also fail with the right query sequence.
>
> Just because something resolves, it doesn't mean that there is not a
> error.  It is just good luck that Google's server resolve.
>
> It's so broken that http://dnscheck.ripe.net can't even start checking
> the delegation.
>
>     Delegation
>     Begin testing delegation for wip.fis.com.my.
>     Name servers listed at parent: wan1.fis.com.my,wan2.fis.com.my,wan3.fis.com.my,wan4.fis.com.my
>     Failed to find name servers of wip.fis.com.my/IN.
>     No name servers found at child.
>     Not enough nameserver information was found to test the zone wip.fis.com.my, but an IP address lookup succeeded in spite of that.
>     Done testing delegation for wip.fis.com.my.
>
> This is a case of Garbage-In - Garbage Out (lookup failure)

http://www.intodns.com/wip.fis.com.my

when a result looks like below it needs to be fixed and "Are there any 
BIND specific workarounds?" is the wrong question becaus even if - the 
domain owner is not in the position to place workarounds somewhere else

Error Missing nameservers reported by parent 	FAIL: The following 
nameservers are listed at your nameservers as nameservers for your 
domain, but are not listed at the parent nameservers (see RFC2181 
5.4.1). You need to make sure that these nameservers are working.If they 
are not working ok, you may have problems!
ns1.wip.fis.com.my

Error 	Missing nameservers reported by your nameservers 	ERROR: One or 
more of the nameservers listed at the parent servers are not listed as 
NS records at your nameservers. The problem NS records are:
wan2.fis.com.my
wan4.fis.com.my
wan1.fis.com.my
wan3.fis.com.my
This is listed as an ERROR because there are some cases where nasty 
problems can occur (if the TTLs vary from the NS records at the root 
servers and the NS records point to your own domain, for example).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20151118/e1992fe5/attachment.bin>