format error: CNAME response for DNSKEY RR

Tony Finch dot at dotat.at
Wed Oct 3 17:03:03 UTC 2012


Why does named complain in this manner? I noticed this when wondering
about validating stub resolvers which might query for DNSKEY and DS
records without knowing where zone cuts are in order to reduce latency.

03-Oct-2012 17:44:47.571 resolver: notice:
	DNS format error from 212.72.49.3#53
	resolving www.bbc.co.uk/DNSKEY
	for client 127.0.0.1#48638:
	CNAME response for DNSKEY RR

; <<>> DiG 9.9.2-vjs197.15rc1 <<>> +dnssec dnskey www.bbc.co.uk.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 15670
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.bbc.co.uk.                 IN      DNSKEY

;; Query time: 21 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Oct  3 17:44:47 2012
;; MSG SIZE  rcvd: 42

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first.
Rough, becoming slight or moderate. Showers, rain at first. Moderate or good,
occasionally poor at first.



More information about the bind-users mailing list