Servfail When Resolving certain domains
England, Robert (Robert)
england at northamerica.exchange.agere.com
Tue Dec 11 20:06:41 UTC 2001
> -----Original Message-----
> From: Mark.Andrews at isc.org [mailto:Mark.Andrews at isc.org]
> Sent: Tuesday, December 11, 2001 1:49 PM
> To: England, Robert (Robert)
> Cc: comp-protocols-dns-bind at moderators.isc.org
> Subject: Re: Servfail When Resolving certain domains
>
>
> > That is why if understand why a zone forward work and a standard config.
> > does not then I can with confidence tell them why there is a problem.
>
> Because the standard config is expecting to be talking to servers
> that are authoritative.
If it does not will it just return a SERFAIL message?
> When you are using a forward zone the
> server is *not* expecting to be talking to a authoritative server
> but rather a caching server and caching servers don't set 'aa'
> whereas authoritative servers do.
This does seem to be the case, but I was not sure that the name server HAD
to receive an authoritative answer all the time, in order to be able to
resolve a name. I see non authoritative answers allot, are you telling me
that there are that many DNS server out there not configured correctly?
> The servers in question are
> not setting 'aa' in the answers (indicating that they detected
> a error on load) and named is rejecting their answers as bad.
>
Is their a way for the name server to accept a non authoritative answer with
a standard configuration that uses the db.cache file?
> Mark
> --
> Mark Andrews, Internet Software Consortium
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at isc.org
Thanks for the help!!
-Bob
More information about the bind-users
mailing list