OPT bug clarification please

[Doug Barton]

In reviewing:

http://www.isc.org/products/BIND/bind-security.html and
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469

I think I understand what's happening with the OPT bug, but I want to be
sure. This bug affects a resolving name server when a client sends a query
for something that generates an NXDOMAIN response (plus other nastiness in
the OPT section), correct?

The thing I want to clarify is whether or not this bug can be triggered in
a name server that is authoritative only, and whether or not "fetch-glue
yes" will follow the same resolver path that triggers the bug.

Thanks,

Doug

-- 
   "We have known freedom's price. We have shown freedom's power.
      And in this great conflict, ...  we will see freedom's victory."
	- George W. Bush, President of the United States
          State of the Union, January 28, 2002

         Do YOU Yahoo!?