Delegation question

CharlesH hoch at exemplary.invalid
Tue Oct 14 19:21:07 UTC 2003


When I do the following "dig dns.navipath.net" on a server without the
"delegation only patch" I get:

% dig any dns.navipath.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32435
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;dns.navipath.net.              IN      ANY

;; ANSWER SECTION:
dns.navipath.net.       96226   IN      A       216.67.14.5

;; AUTHORITY SECTION:
net.                    172686  IN      NS      j.gtld-servers.net.
net.                    172686  IN      NS      k.gtld-servers.net.
net.                    172686  IN      NS      l.gtld-servers.net.
net.                    172686  IN      NS      m.gtld-servers.net.
net.                    172686  IN      NS      a.gtld-servers.net.
net.                    172686  IN      NS      b.gtld-servers.net.
net.                    172686  IN      NS      c.gtld-servers.net.
net.                    172686  IN      NS      d.gtld-servers.net.
net.                    172686  IN      NS      e.gtld-servers.net.
net.                    172686  IN      NS      f.gtld-servers.net.
net.                    172686  IN      NS      g.gtld-servers.net.
net.                    172686  IN      NS      h.gtld-servers.net.
net.                    172686  IN      NS      i.gtld-servers.net.

Against a server running the delegation-only patch, it (as expected)
returns NXDOMAIN and logs a "delegation only enforced" message.
What exactly is going on with "dns.navipath.net"? In other words, what
does it mean that I am getting an A record, but no NS records for that
domain? This is not the infamous "sitefinder" wildcard.


More information about the bind-users mailing list