nxdomain

[Mark Andrews]

In message <CAMD-=VKA_dftLRqtJMs=EGMEPZHU82q06+p_J8RmbgzXvVGjGg at mail.gmail.com>
, Nick Edwards writes:
> The typos was more of how I came about my request, forget the typo as
> such, it the actual answer,  to use a more common well known name, if
> I type
> 
> ~$ host www.undernet.org ns1
> Using domain server:
> Name: ns1
> 
> Host www.undernet.org not found: 3(NXDOMAIN)
> 
> Above should be, and I'm darn sure used to be, REFUSED -  not NXDOMAIN
> 
> perhaps I should also include my options in my original post, that was
> remiss of me
> 
> acl trust contains localhost and the servers actual IP addresses,
> nowhere does it permit the IP range I tried from
> 
> options {
>         directory "/var/named";
>         allow-query { trust; };
>         allow-transfer { localhost; };
>         blackhole { bogon; };
>         recursive-clients 2000;
>         clients-per-query 40;
>         tcp-clients 100;
>         recursion no;
>         additional-from-cache no;
>         transfer-format many-answers;
>         masterfile-format text;
>         interface-interval 0;
>         dnssec-enable yes;
>         dnssec-validation yes;
> };

Given www.undernet.org exists on the Internet (so you wouldn't be
getting NXDOMAIN if it was recursing to the Internet) and you havn't
shown the entire configuration we can't tell if it is a lack of
understanding about your configuration or a bug.

> On 8/28/13, Matus UHLAR - fantomas <uhlar at fantomas.sk> wrote:
> > On 28.08.13 23:13, Nick Edwards wrote:
> >>In just testing a few things with our authoritative server, I made a
> >>typo, and, much to my surprise the server responds NXDOMAIN to
> >>requests from unauthed requesters, this used to return  REFUSED, when
> >>did this error change?
> >>
> >>(bind 9.9.3-P2)
> >
> > what typo?
> > --
> > Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> > Warning: I wish NOT to receive e-mail advertising to this address.
> > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> > I'm not interested in your website anymore.
> > If you need cookies, bake them yourself.
> > _______________________________________________
> > Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> > unsubscribe from this list
> >
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
> >
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>  from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org