<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 8/24/2010 8:18 AM, rams wrote:
<blockquote
cite="mid:AANLkTikyw-=gXwHrCsOT5JSLiie9ZLSHNKGJd1Da2qqe@mail.gmail.com"
type="cite"><br>
<div class="gmail_quote">
<div>Hi </div>
<div> </div>
<div>When we have data as follows queried domain "<a
moz-do-not-send="true" href="http://maint.rameshops5526old.com/"
target="_blank">maint.rameshops5526old.com</a>." against bind and my
own resolver. Bind and my resolver response are same but only
mismatching with flags. bind is returning AA flag but my resolver is
not returning AA flag. in this case wihcih is correct bind or my
resolver?</div>
<div class="im">
<div> </div>
<div>Zone: <a moz-do-not-send="true"
href="http://rameshops5526old.com/" target="_blank">rameshops5526old.com</a><br>
<br>
<a moz-do-not-send="true" href="http://maint.rameshops5526old.com/"
target="_blank">maint.rameshops5526old.com</a>. 300 IN CNAME<br>
<a moz-do-not-send="true"
href="http://maint.global.rameshops5526old.com/" target="_blank">maint.global.rameshops5526old.com</a>.<br>
<a moz-do-not-send="true" href="http://rameshops5526old.com/"
target="_blank">rameshops5526old.com</a>. 21600 IN NS <a
moz-do-not-send="true" href="http://dns5.rameshops5526old.com/"
target="_blank">dns5.rameshops5526old.com</a>.<br>
<a moz-do-not-send="true" href="http://rameshops5526old.com/"
target="_blank">rameshops5526old.com</a>. 21600 IN NS <a
moz-do-not-send="true" href="http://dns2.rameshops5526old.com/"
target="_blank">dns2.rameshops5526old.com</a>.<br>
<a moz-do-not-send="true" href="http://rameshops5526old.com/"
target="_blank">rameshops5526old.com</a>. 21600 IN NS <a
moz-do-not-send="true" href="http://dns1.rameshops5526old.com/"
target="_blank">dns1.rameshops5526old.com</a>.<br>
<a moz-do-not-send="true" href="http://rameshops5526old.com/"
target="_blank">rameshops5526old.com</a>. 21600 IN NS <a
moz-do-not-send="true" href="http://dns6.rameshops5526old.com/"
target="_blank">dns6.rameshops5526old.com</a>.<br>
<a moz-do-not-send="true" href="http://rameshops5526old.com/"
target="_blank">rameshops5526old.com</a>. 21600 IN NS <a
moz-do-not-send="true" href="http://dns4.rameshops5526old.com/"
target="_blank">dns4.rameshops5526old.com</a>.<br>
<a moz-do-not-send="true" href="http://rameshops5526old.com/"
target="_blank">rameshops5526old.com</a>. 21600 IN NS <a
moz-do-not-send="true" href="http://dns3.rameshops5526old.com/"
target="_blank">dns3.rameshops5526old.com</a>.<br>
<a moz-do-not-send="true" href="http://global.rameshops5526old.com/"
target="_blank">global.rameshops5526old.com</a>. 300 IN NS <a
moz-do-not-send="true" href="http://j.ns.nsatc.net/" target="_blank">j.ns.nsatc.net</a>.<br>
<a moz-do-not-send="true" href="http://global.rameshops5526old.com/"
target="_blank">global.rameshops5526old.com</a>. 300 IN NS <a
moz-do-not-send="true" href="http://a.ns.nsatc.net/" target="_blank">a.ns.nsatc.net</a>.<br>
<a moz-do-not-send="true" href="http://global.rameshops5526old.com/"
target="_blank">global.rameshops5526old.com</a>. 300 IN NS <a
moz-do-not-send="true" href="http://l.ns.nsatc.net/" target="_blank">l.ns.nsatc.net</a>.<br>
<a moz-do-not-send="true" href="http://global.rameshops5526old.com/"
target="_blank">global.rameshops5526old.com</a>. 300 IN NS <a
moz-do-not-send="true" href="http://d.ns.nsatc.net/" target="_blank">d.ns.nsatc.net</a>.<br>
<a moz-do-not-send="true" href="http://global.rameshops5526old.com/"
target="_blank">global.rameshops5526old.com</a>. 300 IN NS <a
moz-do-not-send="true" href="http://b.ns.nsatc.net/" target="_blank">b.ns.nsatc.net</a>.<br>
<a moz-do-not-send="true" href="http://global.rameshops5526old.com/"
target="_blank">global.rameshops5526old.com</a>. 300 IN NS <a
moz-do-not-send="true" href="http://e.ns.nsatc.net/" target="_blank">e.ns.nsatc.net</a>.<br>
<a moz-do-not-send="true" href="http://global.rameshops5526old.com/"
target="_blank">global.rameshops5526old.com</a>. 300 IN NS <a
moz-do-not-send="true" href="http://c.ns.nsatc.net/" target="_blank">c.ns.nsatc.net</a>.<br>
</div>
<div><br>
<br>
</div>
</div>
</div>
</blockquote>
AA is set on BIND's response because the CNAME is coming directly from
authoritative data.<br>
<br>
AA is not set on your resolver's response because the answer *isn't*
coming directly from authoritative data.<br>
<br>
Why is this an issue? A stub resolver or an application generally
doesn't -- and shouldn't -- care -- or usually doesn't even *know* --
about the setting of the AA flag.<br>
<br>
- Kevin<br>
<br>
<br>
<br>
</body>
</html>