Answers from subzone even when superzone has a delegation elsewhere

[Mark Andrews]

Additionally this behaviour is specified in RFC1034 so every nameserver should do this.

-- 
Mark Andrews

> On 14 Feb 2024, at 02:24, Friesen, Don CITZ:EX via bind-users <bind-users at lists.isc.org> wrote:
> 
> Andy,
>   The existence of 8.f.0.f.1.f.1.0.8.a.b.0.1.0.0.2.ip6.arpa as an authoritative zone on the server has higher relevance than the delegation inside another zone.  The answer comes from the authoritative zone, no need to follow the delegation.
> 
> Don Friesen
> 
> -----Original Message-----
> From: bind-users <bind-users-bounces at lists.isc.org> On Behalf Of Andy Smith
> Sent: Tuesday, February 13, 2024 6:46 AM
> To: bind-users at lists.isc.org
> Subject: Re: Answers from subzone even when superzone has a delegation elsewhere
> 
> [You don't often get email from andy at strugglers.net. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
> 
> [EXTERNAL] This email came from an external source. Only open attachments or links that you are expecting from a known sender.
> 
> 
> Hi Don,
> 
> Yes.
> 
> If you want actual names to look at, these zones are both present on the same servers:
> 
>        1.f.1.0.8.a.b.0.1.0.0.2.ip6.arpa 8.f.0.f.1.f.1.0.8.a.b.0.1.0.0.2.ip6.arpa
> 
> However, the presence of 8.f.0.f.1.f.1.0.8.a.b.0.1.0.0.2.ip6.arpa is a mistake and in the mean time someone has changed the delegation inside 1.f.1.0.8.a.b.0.1.0.0.2.ip6.arpa to be:
> 
> 8.f.0.f NS      ns-auto.bitfolk.com.
> 
> A query for, say:
> 
> 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.f.0.f.1.f.1.0.8.a.b.0.1.0.0.2.ip6.arpa. IN PTR
> 
> is answered NXDOMAIN because it does not exist inside the 8.f.0.f.1.f.1.0.8.a.b.0.1.0.0.2.ip6.arpa zone file, instead of following that delegation to ns-auto.bitfolk.com.
> 
> Thanks,
> Andy
> 
>> On Tue, Feb 13, 2024 at 02:31:32PM +0000, Friesen, Don CITZ:EX via bind-users wrote:
>> Andy,  You do also have the A record glue for elsewhere.example.com in the example.com zone, right?  Just checking.
>> 
>> Don Friesen
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users