Why is Bind 9 refusing these delegations?

Mark_Andrews at isc.org Mark_Andrews at isc.org
Mon Jan 27 04:41:46 UTC 2003


> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Mark_Andrews at isc.org wrote:
> >
> > 	Bind 9 will give *different* answers to recursive and
> > 	non-recursive queries.  The non-recursive answer will come
> > 	from its zone data.  The recursive answer will come from
> > 	the server for b.a.
> >
> > 	The first question is "tell me the nameservers for b.a or
> > 	how to find them".  The second question is "tell me the
> > 	nameservers for b.a".
> >
> > 	If named serves any of the parents to b.a and not b.a, it
> > 	will answer the first with a referal (how to find them).
> > 	The second it will follow its referal and get the answer
> > 	from the other server even if it disagrees with the referal
> > 	(there are no NS records).
> >
> > 	BIND 8 didn't have the data structures to do this so you
> > 	always got the answer from the zone data even if it disagreed
> > 	with what the child zone said.
> 
> Is that the quick way of saying that "dig ns b.a" gives no name
> server records because the zone file for "b.a" has no NS records
> in it? ;-)

	It may be because of that.

	When you are testing a authoritative server (or the
	authoritative zones) use non-recursive queries.

	Mark

> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQE+NJ9SGFXfHI9FVgYRAteDAKDF8fMXSHMVlopnpYcUjx00ieueTgCdFt0p
> oAUE6I6p5aasBtlnjF12zSc=
> =g0sq
> -----END PGP SIGNATURE-----
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org


More information about the bind-users mailing list