<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:΢ÈíÑźÚ
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I'm soory. not DLG, but DLZ.<br> <BR><div>> Date: Thu, 19 Dec 2013 03:07:44 +0000<br>> Subject: Re: missing ¡®additional section¡¯<br>> From: sjcarr@gmail.com<br>> To: houguanghua@hotmail.com<br>> CC: bind-users@lists.isc.org<br>> <br>> On 19 December 2013 00:48, houguanghua <houguanghua@hotmail.com> wrote:<br>> > If DLG isn't enabled (bind9+view + zone file , no DB is used), the<br>> > additional section is right. Maybe it's a bug of Bind DLG.<br>> <br>> What is DLG?<br>> <br>> > What I wanted is as follows :<br>> > $ dig @10.3.103.177 www.ctyun.cn<br>> > ; <<>> DiG 9.6-ESV-R10-P1 <<>> @10.3.103.177 www.ctyun.cn<br>> ><br>> > ; (1 server found)<br>> > ;; global options: +cmd<br>> > ;; Got answer:<br>> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30600<br>> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2<br>> > ;; WARNING: recursion requested but not available<br>> > ;; QUESTION SECTION:<br>> > ;www.ctyun.cn. IN A<br>> > ;; ANSWER SECTION:<br>> > www.ctyun.cn. 3600 IN A 211.162.106.2<br>> > www.ctyun.cn. 3600 IN A 211.162.106.1<br>> > ;; AUTHORITY SECTION:<br>> > ctyun.cn. 3600 IN NS ns1.ctyun.cn.<br>> > ctyun.cn. 3600 IN NS ns2.ctyun.cn.<br>> > ;; ADDITIONAL SECTION:<br>> > ns1.ctyun.cn. 3600 IN A 211.16.106.251<br>> > ns2.ctyun.cn. 3600 IN A 211.16.106.252<br>> ><br>> > ;; Query time: 137 msec<br>> > ;; SERVER: 10.3.103.177#53(10.3.103.177)<br>> > ;; WHEN: Thu Dec 19 08:43:58<br>> > ;; MSG SIZE rcvd: 130<br>> <br>> That might be what you want, but that's not what you asked for, you<br>> asked for the www.ctyun.cn A record. If you want the NS records<br>> explicitly ask for them. Additional is just that, it's additional<br>> data, if the name server that you have queried against has them in<br>> it's cache then it may/may not return them (depending on your config).<br>> My personal preference here is if you are an authoritative server then<br>> you should be returning only what was asked for (config option<br>> minimal-responses = yes), if you are a caching server then chuck<br>> everything back at the client that you have (minimal-responses = no,<br>> the options additional-from-cache and additional-from-auth should<br>> already be set to yes by default and bind will then decide when it's<br>> appropriate to send back additional data).<br>> <br>> In your first dig, recursion was enabled, but it didn't need to do a<br>> recursive request as it is authoritative for the ctyun.cn zone. In<br>> your second dig, recursion is disabled, but it is still authoritative<br>> for the ctyun.cn zone so I'm not sure why it would return the<br>> additional records, it doesn't need to as it's simply additional data.<br>> <br>> Without seeing the bind config it's difficult to diagnose from just a dig query.<br>> <br>> Steve<br></div> </div></body>
</html>