Clarification on bind response

[Kevin Darcy]

On 8/24/2010 2:25 AM, rams wrote:
> Hi,
> I have set up data as follows in bind.
> Zone: rameshops5526old.com <http://rameshops5526old.com>
> maint.rameshops5526old.com <http://maint.rameshops5526old.com>. 300 
> IN      CNAME maint.global.rameshops5526old.com 
> <http://maint.global.rameshops5526old.com>.
> rameshops5526old.com <http://rameshops5526old.com>.   21600   IN      
> NS dns5.rameshops5526old.com <http://dns5.rameshops5526old.com>.
> rameshops5526old.com <http://rameshops5526old.com>.   21600   IN      
> NS dns2.rameshops5526old.com <http://dns2.rameshops5526old.com>.
> rameshops5526old.com <http://rameshops5526old.com>.   21600   IN      
> NS dns1.rameshops5526old.com <http://dns1.rameshops5526old.com>.
> rameshops5526old.com <http://rameshops5526old.com>.   21600   IN      
> NS dns6.rameshops5526old.com <http://dns6.rameshops5526old.com>.
> rameshops5526old.com <http://rameshops5526old.com>.   21600   IN      
> NS dns4.rameshops5526old.com <http://dns4.rameshops5526old.com>.
> rameshops5526old.com <http://rameshops5526old.com>.   21600   IN      
> NS dns3.rameshops5526old.com <http://dns3.rameshops5526old.com>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS j.ns.nsatc.net <http://j.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS a.ns.nsatc.net <http://a.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS l.ns.nsatc.net <http://l.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS d.ns.nsatc.net <http://d.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS b.ns.nsatc.net <http://b.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS e.ns.nsatc.net <http://e.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS c.ns.nsatc.net <http://c.ns.nsatc.net>.
> Queried against bind and get the reposne as follows
> [root at stulcqacustbind2 recursive_enabled]# dig @10.31.145.194 
> <http://10.31.145.194> maint.rameshops5526old.com 
> <http://maint.rameshops5526old.com>.
> ; <<>> DiG 9.6.1-P3 <<>> @10.31.145.194 <http://10.31.145.194> 
> maint.rameshops5526old.com <http://maint.rameshops5526old.com>.
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16855
> ;; flags: qr *aa* rd; QUERY: 1, ANSWER: 1, AUTHORITY: 7, ADDITIONAL: 0
> ;; WARNING: recursion requested but not available
> ;; QUESTION SECTION:
> ;maint.rameshops5526old.com <http://maint.rameshops5526old.com>.    
> IN      A
> ;; ANSWER SECTION:
> maint.rameshops5526old.com <http://maint.rameshops5526old.com>. 300 
> IN      CNAME maint.global.rameshops5526old.com 
> <http://maint.global.rameshops5526old.com>.
> ;; AUTHORITY SECTION:
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS e.ns.nsatc.net <http://e.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS l.ns.nsatc.net <http://l.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS a.ns.nsatc.net <http://a.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS j.ns.nsatc.net <http://j.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS c.ns.nsatc.net <http://c.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS d.ns.nsatc.net <http://d.ns.nsatc.net>.
> global.rameshops5526old.com <http://global.rameshops5526old.com>. 300 
> IN     NS b.ns.nsatc.net <http://b.ns.nsatc.net>.
> ;; Query time: 2 msec
> ;; SERVER: 10.31.145.194#53(10.31.145.194)
> ;; WHEN: Tue Aug 24 06:26:31 2010
> ;; MSG SIZE  rcvd: 195
> Here AA flag is returning is it correct? because domain 
> "global.rameshops5526old.com <http://global.rameshops5526old.com>. " 
> delegated so we should not return AA flag right? Please clarify me.
>
You're authoritative for the CNAME record that is contained in the 
Answer Section.

                                                                         
                                                             - Kevin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20100824/22943784/attachment.html>