Delegation or PEBKAC problems?

Todd Snyder tsnyder at rim.com
Tue May 5 15:44:29 UTC 2009


>It works that way, sometimes.
>
>If recursion is enabled on your server, it will query the other servers
in 
>the NS records on behalf of the resolver and return what it finds.  If 
>recursion is off, it will just return the NS records and the resolver
is 
>expected to follow them (and some really dumb resolvers might not be
able
>to do that).
>
>If your first server can't talk to the other (delegated zone's) NS's
(say 
>because of a firewall issue) you can get something that matches what
you 
>seem to be getting.

Thanks John.

>From the first server, I can talk to the delegated nameserver no
problem.  We thought it might be firewall/acl related, but digs confirm
that they can talk directly without problem.  They are, logically
speaking, on the same switch, with no firewalls between.

Todd.


---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.



More information about the bind-users mailing list