Answers from subzone even when superzone has a delegation elsewhere

[Ondřej Surý]

Yes, that's normal and expected. The server would not know if the zone is delegated
to it or not, so it responds to queries for zones that are hosted (configured) on that server.

Ondřej
--
Ondřej Surý (He/Him)
ondrej at isc.org

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

> On 13. 2. 2024, at 15:23, Andy Smith <andy at strugglers.net> wrote:
> 
> Hi,
> 
> I'm running:
> 
> 9.16.44-Debian (Extended Support Version) <id:cd2b460>
> 
> If I have zones example.com and sub.example.com both loaded, but
> example.com contains a record:
> 
> sub.example.com. NS elsewhere.example.com.
> 
> (i.e. the subzone is delegated to some other server)
> 
> is it normal and expected that a query for foo.sub.example.com
> should be answered NXDOMAIN from the auth servers for example.com
> because the zone sub.example.com is also loaded there (and has no
> "foo" RR), rather than the delegation to elsewhere.example.com be
> followed?
> 
> If that is expected, is there configuration that can alter that
> behaviour, or is that RFC required behaviour that should not be
> altered?
> 
> Thanks,
> Andy
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users