Lump answers

[Mark_Andrews at iengines.com]

> Mark > A root server will forward any recursive queries asked of it for
> Mark > which it does not already have an answer.  This works even if the
> Mark > forwarder has to ask the root for information as the forwarder will
> Mark > make a non-recursive query to the root server.
> 
> Cricket > But internal root name servers, which are what Christine is
> Cricket > describing, only know about a small number of apex zones.
> Cricket > If you ask an internal root name server about a zone whose
> Cricket > ancestor doesn't appear in the root zone, you get NXDOMAIN.
> 
> 
> So according to Cricket's example of an internal root server for acmebw.com a
> nd a forwarder, recursive query for cnn.com will get a reply of NXDOMAIN from
>  the root server right away because the root server doesn't know any other zo
> ne except acmebw.com. And since it thinks it knows everything about the name 
> space, that answer is final. 
> 
> But according to Mark, recursive query for cnn.com will get forwarded to the 
> forwarder because it does not have a ready answer.  Forwarder issues iterativ
> e query back to root server, gets an NXDOMAIN, then passes that answer back t
> o root server's original query.  Same answer, but in a roundabout way.  Did I
>  understand you both correctly?  You are saying different things here.  If th
> e forwarder sits on the cusp of the DMZ, it will know and use the real roots,
>  why would it use the fake root to query for cnn.com to get the NXDOMAIN.  Ok
> , which is it?
> 
> CT
> 
> 
	Cricket and I were saying the same thing.  I said if it didn't
	know a answer.  NXDOMAIN is an answer.

	Mark
--
Mark Andrews, Internet Engines Inc. / Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at iengines.com