BIND 9.12.3-P1: No additional section

Tom tomtux007 at gmail.com
Wed Jan 16 06:02:05 UTC 2019


Authoritative servers:

A direct query to a BIND-9.12.3-P1 authoritative server for "mydomain.net":

$ dig +norec -4 @ns3.example.com www.mydomain.net

; <<>> DiG 9.11.3-1ubuntu1.3-Ubuntu <<>> +norec -4 @ns3.example.com 
www.mydomain.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36984
;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 847bc109e7f71243dd664e215c3ec4c412619cff362fd7fc (good)
;; QUESTION SECTION:
;www.mydomain.net.			IN	A

;; ANSWER SECTION:
www.mydomain.net.		3600	IN	A	44.44.44.44

;; AUTHORITY SECTION:
mydomain.net.		3600	IN	NS	ns3.example.com.
mydomain.net.		3600	IN	NS	ns2.example.com.
mydomain.net.		3600	IN	NS	ns1.example.com.





The same direct query here to a BIND-9.11.x authoritative server (also a 
slave like the BIND-9.12.3-P1) for "mydomain.net":

$ dig +norec -4 @ns1.example.com www.mydomain.net

; <<>> DiG 9.11.3-1ubuntu1.3-Ubuntu <<>> +norec -4 @ns1.example.com 
www.mydomain.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24450
;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 7

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 975a61dc07fe107fc5acdc2d5c3ec54df206b954894a2c4f (good)
;; QUESTION SECTION:
;www.mydomain.net.			IN	A

;; ANSWER SECTION:
www.mydomain.net.		3600	IN	A	44.44.44.44

;; AUTHORITY SECTION:
mydomain.net.		3600	IN	NS	ns2.example.com.
mydomain.net.		3600	IN	NS	ns1.example.com.
mydomain.net.		3600	IN	NS	ns3.example.com.

;; ADDITIONAL SECTION:
ns1.example.com.		7200	IN	A	1.1.1.1
ns2.example.com.		7200	IN	A	2.2.2.2
ns3.example.com.		7200	IN	A	3.3.3.3
ns1.example.com.		7200	IN	AAAA	2001:db8::1
ns2.example.com.		7200	IN	AAAA	2001:db8::2
ns3.example.com.		7200	IN	AAAA	2001:db8::3


In both authoritative configurations I've set "minimal-responses no;", 
but on 9.12.3-P1, no additional section comes back.

Thank you.

Kind regards,
Tom

On 15.01.19 19:15, Evan Hunt wrote:
> On Tue, Jan 15, 2019 at 02:40:51PM +0100, Tom wrote:
>> After migrating from 9.11.x to 9.12.3-P1, I recognized, that BIND is
>> giving no "additional sections" back, although "minimal-responses" is
>> set to "no". I think this is correct and does not affect the
>> authoritative behavior. But I don't understand, why this happens when
>> "minimal-responses no;" is configured.
> 
> Authoritative or recursive?  Can you give a specific example
> of a query that isn't getting an additional section and should?
> 


More information about the bind-users mailing list