queries for just a few domains fail (NXDOMAIN) for a bind 9.18 non-forwarding config ; forwarding does fix it. problem with 'my' config, or 'their' DNS ?

PGNet Dev pgnet.dev at gmail.com
Wed Oct 26 00:12:22 UTC 2022


hi,

> AWS are returning NXDOMAIN instead of NOERROR for empty non terminals. Do you have strict
> qname minimisation turned on?

yup, i do

	...
	qname-minimization strict;
	...

only because my i understood my reads of

	BIND to Add QNAME Minimization
	 https://www.isc.org/blogs/bind-to-add-qname-minimization/

&

	QNAME Minimization and Your Privacy
	 https://www.isc.org/blogs/qname-minimization-and-privacy/

to suggest that it's a GoodIdea(tm).




More information about the bind-users mailing list