No authority for serving glue records.
Pawel Rogocz
pawel at rogocz.com
Wed Jan 29 18:52:09 UTC 2003
Hi,
I have a qustion about bind behavior when it encounters glue records
outside of authority of the currently queried server.
Let's say I am trying to resolve time.com
so at some point I am talking to one of the authoritative servers
for .com, as I follow the delegation from root servers:
$ dig time.com @H.GTLD-SERVERS.NET
;; AUTHORITY SECTION:
time.com. 172800 IN NS NS.PATHFINDER.com.
time.com. 172800 IN NS NS2.PATHFINDER.com.
time.com. 172800 IN NS NS3.TIMEINC.NET.
time.com. 172800 IN NS NS4.TIMEINC.NET.
;; ADDITIONAL SECTION:
NS.PATHFINDER.com. 172800 IN A 209.251.208.19
NS2.PATHFINDER.com. 172800 IN A 209.251.208.20
NS3.TIMEINC.NET. 172800 IN A 205.188.238.92
NS4.TIMEINC.NET. 172800 IN A 205.188.238.156
so the server gives me four glue records, but it has no authority for
two of them at they are outside .com.
What the next step is going to be ?
Putting the original query on hold and try to resolve names from .net,
or it will go ahead and try to use one of the two "good ones" possibly
ignoring the other two ? What if the servers in .com are not reachable,
will ever try to use the .net servers ?
Pawel
--
More information about the bind-users
mailing list