named resolution problem

[Hauke Lampe]

On 05.10.2011 12:58, Roberto Bosticardo wrote:

> If you ask a resolver/cache server running named the resolution of name
> "www.myspace.fr" it returns (SERVFAIL), if you ask the same to a
> dnscache server it correctly resolves to the ip address.

BIND doesn't like NS records resolving to CNAMEs:

The domain is delegated to two servers:
myspace.fr.		60	IN	NS	ns1.myspace.com.
myspace.fr.		60	IN	NS	ns2.myspace.com.

Resolving the server names reveals CNAMEs:
ns1.myspace.com.	60	IN	CNAME	DNS11.COTDNS.net.
ns2.myspace.com.	60	IN	CNAME	DNS12.COTDNS.net.

That is a configuation error at myspace.com and BIND returns SERVFAIL.
Unbound and dnscache are more forgiving in this case.


Hauke.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20111005/98459a80/attachment.bin>