qname minimization: me too :(
Peter
pmc at citylink.dinoex.sub.org
Tue Jun 25 15:29:13 UTC 2024
On Tue, Jun 25, 2024 at 04:41:54PM +0200, Stephane Bortzmeyer wrote:
! On Tue, Jun 25, 2024 at 04:22:40PM +0200,
! Peter <pmc at citylink.dinoex.sub.org> wrote
! a message of 16 lines which said:
!
! > Jun 25 16:18:31 <local0.info> conr named[4725]: lame-servers:
! > info: success resolving 'bar.foo.isc.org/A' after disabling
! > qname minimization due to 'ncache nxdomain'
!
! I do not see how this is possible ("success resolving") since the name
! does not exist and all ISC name servers reply it does not exist.
!
! And all the resolvers I tried (through RIPE Atlas) say the same. No
! "success resolving".
!
! Strange...
Good, now we're getting on the same page. :)
I think I understand it now (more or less):
Let's assume the nameserver for isc.org. is configured correctly. Then
this message concerning qname-minimization cannot be substantial, it
likely rather is, as Mark Andrews said, a "false positive".
Second, what do we mean by "success resolving"? Do we mean we got the
desired answer? Do we mean we got a correct proof of nonexistance? Or
do we just mean we did not end up in timeout/SERVFAIL?
I don't know exactly, and I don't bother anymore. I spent my time
searching my own configurations for an error (or just an
imperfectness) due to this same message - and probably there is none.
cheerio,
PMc
More information about the bind-users
mailing list