<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word" xmlns:m =
"http://schemas.microsoft.com/office/2004/12/omml"><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.21294" name=GENERATOR>
<STYLE>@font-face {
font-family: Wingdings;
}
@font-face {
font-family: Cambria Math;
}
@font-face {
font-family: Calibri;
}
@font-face {
font-family: Tahoma;
}
@page WordSection1 {size: 612.0pt 792.0pt; margin: 72.0pt 72.0pt 72.0pt 72.0pt; }
P.MsoNormal {
FONT-SIZE: 11pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Calibri","sans-serif"
}
LI.MsoNormal {
FONT-SIZE: 11pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Calibri","sans-serif"
}
DIV.MsoNormal {
FONT-SIZE: 11pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Calibri","sans-serif"
}
A:link {
COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99
}
P.MsoAcetate {
FONT-SIZE: 8pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Tahoma","sans-serif"; mso-style-priority: 99; mso-style-link: "Balloon Text Char"
}
LI.MsoAcetate {
FONT-SIZE: 8pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Tahoma","sans-serif"; mso-style-priority: 99; mso-style-link: "Balloon Text Char"
}
DIV.MsoAcetate {
FONT-SIZE: 8pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Tahoma","sans-serif"; mso-style-priority: 99; mso-style-link: "Balloon Text Char"
}
P.MsoListParagraph {
FONT-SIZE: 11pt; MARGIN: 0cm 0cm 0pt 36pt; FONT-FAMILY: "Calibri","sans-serif"; mso-style-priority: 34
}
LI.MsoListParagraph {
FONT-SIZE: 11pt; MARGIN: 0cm 0cm 0pt 36pt; FONT-FAMILY: "Calibri","sans-serif"; mso-style-priority: 34
}
DIV.MsoListParagraph {
FONT-SIZE: 11pt; MARGIN: 0cm 0cm 0pt 36pt; FONT-FAMILY: "Calibri","sans-serif"; mso-style-priority: 34
}
SPAN.EmailStyle17 {
COLOR: windowtext; FONT-FAMILY: "Calibri","sans-serif"; mso-style-type: personal-compose
}
SPAN.BalloonTextChar {
FONT-FAMILY: "Tahoma","sans-serif"; mso-style-priority: 99; mso-style-link: "Balloon Text"; mso-style-name: "Balloon Text Char"
}
.MsoChpDefault {
mso-style-type: export-only
}
DIV.WordSection1 {
page: WordSection1
}
OL {
MARGIN-BOTTOM: 0cm
}
UL {
MARGIN-BOTTOM: 0cm
}
</STYLE>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></HEAD>
<BODY lang=DE-CH vLink=purple link=blue>
<DIV dir=ltr align=left><SPAN class=887062915-07032011><FONT face=Arial
color=#0000ff size=2>AFAIK, there is no way to make BIND do that... Your example
of google is sort of unique though. Google writes their own DNS (see their FAQ
<A href="http://code.google.com/speed/public-dns/faq.html"><FONT
face="Times New Roman"
size=3>http://code.google.com/speed/public-dns/faq.html</FONT></A>), so they are
a niche product. </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=887062915-07032011><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=887062915-07032011><FONT face=Arial
color=#0000ff size=2>I've seen instances where any DNS server type I query
(BIND, DJB, Microsoft, etc) all return a SERVFAIL, but google returns a
response. They have a very interesting DNS server which seems much more
"forgiving" than other DNS servers. This may have other implications (security)
implicatoins which have yet to be seen - on the other hand, they may have
simply written a great product.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=887062915-07032011><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B>
bind-users-bounces+gord.taylor=rbc.com@lists.isc.org
[mailto:bind-users-bounces+gord.taylor=rbc.com@lists.isc.org] <B>On Behalf Of
</B>Diezig Adrian<BR><B>Sent:</B> 2011, March, 07 6:36 AM<BR><B>To:</B>
bind-users@lists.isc.org<BR><B>Subject:</B> different behavior: A Records in DNS
answer, when query of type"any" (existing CNAME)<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV class=WordSection1>
<P class=MsoNormal><SPAN lang=EN-US>Hi,<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>I have a question concerning answers from
DNS servers, when I query a name with type “any” and the name is a
CNAME.<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>I have the following example (works also in
Internet) with an ISC BIND server (BIND 9.7.0-P1):<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>; <<>> DiG
9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> @newton.genesiscom.ch
dns.ipam.ch<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>; (1 server found)<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; global options:
printcmd<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; Got answer:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id: 25078<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; flags: qr aa rd; QUERY: 1, ANSWER: 2,
AUTHORITY: 0, ADDITIONAL: 0<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; QUESTION SECTION:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>;dns.ipam.ch.
IN A<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; ANSWER SECTION:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>dns.ipam.ch.
600 IN CNAME
www.ipam.ch.<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>www.ipam.ch.
600 IN
A 81.18.25.238<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; Query time: 1 msec<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; SERVER:
10.10.3.13#53(10.10.3.13)<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; WHEN: Mon Mar 7 11:52:38
2011<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; MSG SIZE rcvd:
63<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>As you can see, we have a CNAME dns.ipam.ch
that points to www.ipam.ch.<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>www.ipam.ch is an A-Record to
81.18.25.238.<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>When I do the following query (type=any to
dns.ipam.ch), only the CNAME itself will be in the answer section (the A-Record
not):<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>; <<>> DiG
9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> @newton.genesiscom.ch
dns.ipam.ch any<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>; (1 server found)<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; global options:
printcmd<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; Got answer:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id: 46532<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; flags: qr aa rd; QUERY: 1, ANSWER: 1,
AUTHORITY: 0, ADDITIONAL: 0<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; QUESTION SECTION:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>;dns.ipam.ch.
IN ANY<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; ANSWER SECTION:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>dns.ipam.ch.
600 IN CNAME
www.ipam.ch.<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; Query time: 1 msec<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; SERVER:
10.10.3.13#53(10.10.3.13)<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; WHEN: Mon Mar 7 11:53:21
2011<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; MSG SIZE rcvd:
47<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>When I do a comparable query (also with
type=any) to another DNS Server (eg. google.com)….<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>; <<>> DiG 9.3.2
<<>> @ns1.google.com. www.google.com. any<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>; (1 server found)<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; global options:
printcmd<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; Got answer:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id: 1636<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; flags: qr aa rd; QUERY: 1, ANSWER: 6,
AUTHORITY: 0, ADDITIONAL: 0<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; QUESTION SECTION:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>;www.google.com.
IN ANY<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; ANSWER SECTION:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>www.google.com.
604800 IN CNAME
www.l.google.com.<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>www.l.google.com.
300 IN
A 74.125.232.114<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>www.l.google.com.
300 IN
A 74.125.232.115<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>www.l.google.com.
300 IN
A 74.125.232.116<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>www.l.google.com.
300 IN
A 74.125.232.113<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US>www.l.google.com.
300 IN
A 74.125.232.112<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; Query time: 46 msec<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; SERVER:
216.239.32.10#53(216.239.32.10)<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; WHEN: Mon Mar 07 09:44:32
2011<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>;; MSG SIZE rcvd:
132<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>… I will get also the associated A Records.
<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>Does anybody have an idea, why the behavior
is different? Can I configure this on my DNS Server (ISC
BIND)?<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>FYI:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>dig @ns1.hp.com. www.hp.com.
any<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>and<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>dig @ns1.yahoo.com. www.yahoo.com
any<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>will also answer without any A-Records (like
me).<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>I have the following
questions:<o:p></o:p></SPAN></P>
<P class=MsoListParagraph style="TEXT-INDENT: -18pt; mso-list: l0 level1 lfo1"><![if !supportLists]><SPAN
lang=EN-US><SPAN style="mso-list: Ignore">-<SPAN
style="FONT: 7pt 'Times New Roman'">
</SPAN></SPAN></SPAN><![endif]><SPAN lang=EN-US>which one is correct
(RFC)?<o:p></o:p></SPAN></P>
<P class=MsoListParagraph style="TEXT-INDENT: -18pt; mso-list: l0 level1 lfo1"><![if !supportLists]><SPAN
lang=EN-US><SPAN style="mso-list: Ignore">-<SPAN
style="FONT: 7pt 'Times New Roman'">
</SPAN></SPAN></SPAN><![endif]><SPAN lang=EN-US>is it configurable in ISC
BIND?<o:p></o:p></SPAN></P>
<P class=MsoListParagraph style="TEXT-INDENT: -18pt; mso-list: l0 level1 lfo1"><![if !supportLists]><SPAN
lang=EN-US><SPAN style="mso-list: Ignore">-<SPAN
style="FONT: 7pt 'Times New Roman'">
</SPAN></SPAN></SPAN><![endif]><SPAN lang=EN-US>does the behavior depends on
different BIND version?<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>I know that it is not very common to do
queries with type any. The problem we have is the
following:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>A Device/Application in our network is doing
always queries from type “any”. <o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>From our side it’s not possible to change
the type, because it’s hard-coded in the software.<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>Kind regards<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US>Adrian<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN lang=EN-US><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN
lang=EN-US><o:p> </o:p></SPAN></P></DIV><font face="monospace">_______________________________________________________________________<br>
<br>
This e-mail may be privileged and/or confidential, and the sender does not waive<br>
any related rights and obligations. Any distribution, use or copying of this e-mail or the information<br>
it contains by other than an intended recipient is unauthorized.<br>
If you received this e-mail in error, please advise me (by return e-mail or otherwise) immediately.<br>
<br>
Ce courriel peut contenir des renseignements protégés et confidentiels.<br>
Lexpéditeur ne renonce pas aux droits et obligations qui sy rapportent.<br>
Toute diffusion, utilisation ou copie de ce courriel ou des renseignements quil contient<br>
par une personne autre que le destinataire désigné est interdite.<br>
Si vous recevez ce courriel par erreur, veuillez men aviser immédiatement, <br>
par retour de courriel ou par un autre moyen.</font></BODY></HTML>