Maintained by: NLnet Labs

[Unbound-users] Surprising successful resolution

W.C.A. Wijngaards
Wed Jan 20 09:14:33 CET 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Florian,

This last packet is not deemed to be a lame-delegation-to-itself, but
instead a noerror-nodata answer.  Obviously if the server has somehow
records for the zone NS that it can share, it has records for the zone.
 It does not set the AA bit, yes.  Unbound is treating it as if it is an
open recursor - hence the weird delegation that it gives (like a
delegation from cache).  Therefore it is attempted as a last resort to
query that server.  Hence the resolution of this query.

Best regards,
   Wouter


On 01/19/2010 08:25 PM, Florian Weimer wrote:
> I believe this response should be a SERVFAIL instead:
> dns.gmd.de (129.26.8.82) is lame (it returns a delegation to itself),
> and the other servers don't respond at all.
> 
> It doesn't make a difference in practice, but I'm still surprised. 8-)
> _______________________________________________
> Unbound-users mailing list
> Unbound-users at unbound.net
> http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAktWu2kACgkQkDLqNwOhpPhaZwCfT5ACmdASkk9ryQSsgs/lwLY4
yvoAn0wiRWxVMGkBhR1FgrIAIBlVxsCG
=LXwJ
-----END PGP SIGNATURE-----