Multiple Queries in One Packet

[Kevin Darcy]

There is currently no standard way to make multiple queries in a single
packet (whatever happened to EDNS1?). But I'm not convinced that you're
interpreting the tcpdump output correctly. I think it more likely that the
"ANY" refers to the query *class*, not the query *type*. BIND 8 doesn't
handle CLASS=ANY queries very well when you configure it to deny queries by
default (which I assume you are since otherwise why would you need an
"allow-query { any; };" in your zone statement?).


- Kevin

rainer.ginsberg at de.bosch.com wrote:

> Hello,
>
> is it allowed to send multiple queries in one packet, like asking for
> MX and ANY records for some data?
>
> Our BIND 8 nameserver receives queries of this type and there exists
> a MX record for the data. Strange enough, BIND answers with "Query
> refused" although the respective zone has an "allow-query { any; }"
> in its definition.
>
> This is the tcpdump output that I captured:
> client.40348 > gwa2.fe.bosch.de.domain: 28833 MX ANY? at.bosch.com. (30)
> gwa2.fe.bosch.de.domain > client.40348: 28833 Refused 0/0/0 (30)
>
> Thanks in advance for your replies,
> Rainer
>
> --
> Rainer Ginsberg
> Robert Bosch GmbH
> QI/INF4, IT Security
> Phone: +49-711-811-31263