bad answers from BIND9 ?

Doug Barton DougB at DougBarton.net
Fri Dec 13 08:32:35 UTC 2002


On Thu, 12 Dec 2002, Doug Barton wrote:

>
> On Fri, 13 Dec 2002, Simon Waters wrote:
>
> > So why do the root servers give different answers, as they don't
> > allow recursion?
> >
> > $ dig  +short +norec @a.root-servers.net pl ns
>
> > $ dig  +short +norec @f.root-servers.net pl ns
>
> I get the same answer to both queries.

My mistake, I was actually using bind 8's dig.

F root is reporting version 9.2.2rc1, which puts the response to an NS
query for a zone it's not authoritative for in the authority section. You
can see the difference if you query it for . (the root zone) without the
+short option. This is actually the correct behavior, since the root
servers aren't authoritative for the TLD zones. BIND 8 got this wrong,
BIND 9 fixes that mistake.

Sorry for the confusion,

Doug

-- 
   "We have known freedom's price. We have shown freedom's power.
      And in this great conflict, ...  we will see freedom's victory."
	- George W. Bush, President of the United States
          State of the Union, January 28, 2002

         Do YOU Yahoo!?



More information about the bind-users mailing list