DNS format error

Yang Yu yang.yu.list at gmail.com
Tue Jul 28 18:06:59 UTC 2015

On Wed, Jul 29, 2015 at 2:17 AM, Lightner, Jeff
<JLightner at dsservices.com> wrote:
> http://www.vip.icann.org/DS?
Your email client made it a hyperlink, not me. That's the response for
DS record.

I configured bind to forward queries to

dig www.vip.icann.org ds @ returns SERVFAIL (NOERROR with +cd),
but and returns NOERROR

the query error log can be replicated with "dig www.vip.icann.org ds"
This sounds like a DNSSEC validation issue, but why would I get DNS
format error in the log

still not sure why the browser tried to get ds record for
www.vip.icann.org in first place (I am unaware of any subdomains in
www.vip.icann.org), probably DNS prefetching?

More information about the bind-users mailing list