<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Testo normale Carattere";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
mso-fareast-language:EN-US;}
span.TestonormaleCarattere
{mso-style-name:"Testo normale Carattere";
mso-style-priority:99;
mso-style-link:"Testo normale";
font-family:Consolas;
mso-fareast-language:EN-US;}
span.StileMessaggioDiPostaElettronica19
{mso-style-type:personal;
font-family:"Courier New";
color:windowtext;}
p.testonormale, li.testonormale, div.testonormale
{mso-style-name:"testo normale";
mso-style-link:"testo normale carattere";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
span.testonormalecarattere0
{mso-style-name:"testo normale carattere";
mso-style-priority:99;
mso-style-link:"testo normale";
font-family:"Courier New";}
span.StileMessaggioDiPostaElettronica22
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 2.0cm 2.0cm 2.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=IT link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Hello all.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Maybe I didn’t understand the problem but in my installation of BIND 9.10 WINDOWS I can’t replicate the error:<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>C:\>dig swupdl.adobe.com @10.39.128.11<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>; <<>> DiG 9.10-P1 <<>> swupdl.adobe.com @10.39.128.11<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; global options: +cmd<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; Got answer:<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43143<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 8, ADDITIONAL: 9<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; OPT PSEUDOSECTION:<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>; EDNS: version: 0, flags:; udp: 4096<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; QUESTION SECTION:<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;swupdl.adobe.com. IN A<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; ANSWER SECTION:<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>swupdl.adobe.com. </span><span style='color:#1F497D'>10761 IN CNAME swupdl.wip4.adobe.com.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>swupdl.wip4.adobe.com. 561 IN CNAME swupdl.adobe.com.edgesuite.net.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>swupdl.adobe.com.edgesuite.net. 21561 IN CNAME a1577.d.akamai.net.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>a1577.d.akamai.net. 20 IN A 95.101.34.43<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>a1577.d.akamai.net. 20 IN A 95.101.34.51<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>-------------------------------------------------------------------------------------------------<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>C:\>dig www.acer.it @10.39.128.11<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>; <<>> DiG 9.10-P1 <<>> www.acer.it @10.39.128.11<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; global options: +cmd<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; Got answer:<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49188<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 8, ADDITIONAL: 9<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; OPT PSEUDOSECTION:<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>; EDNS: version: 0, flags:; udp: 4096<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>;; QUESTION SECTION:<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>;www.acer.it. IN A<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>;; ANSWER SECTION:<o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'>www.acer.it. </span><span style='color:#1F497D'>275 IN CNAME public-akamai.gtm.acer.com.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>public-akamai.gtm.acer.com. 6 IN CNAME www.acer.com.edgesuite.net.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>www.acer.com.edgesuite.net. 21576 IN CNAME a492.b.akamai.net.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>a492.b.akamai.net. 20 IN A 2.228.46.113<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>a492.b.akamai.net. 20 IN A 2.228.46.122<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Regards.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Stefano Chiesa<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Segoe UI","sans-serif";mso-fareast-language:IT'>Da:</span></b><span style='font-size:10.0pt;font-family:"Segoe UI","sans-serif";mso-fareast-language:IT'> bind-users-bounces@lists.isc.org [mailto:bind-users-bounces@lists.isc.org] <b>Per conto di </b>IDS Submit<br><b>Inviato:</b> mercoledì 22 ottobre 2014 12:30<br><b>A:</b> bind-users@isc.org<br><b>Oggetto:</b> Again question about edns (like swupdl.adobe.com)<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Good morning, </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>with <a href="http://www.acer.it">www.acer.it</a> I have the same problem as swupdl.adobe.com </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";background:yellow;mso-highlight:yellow'>NXDOMAIN</span><span style='font-size:10.0pt;font-family:"Courier New"'> with bind 9.10 but <span style='background:lime;mso-highlight:lime'>NOERROR</span> with Google DNS </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>I have read the Mark Andrews reply on july 4 2014: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>------------------------------------------------------------------ </span><o:p></o:p></p><p class=MsoPlainText>It looks like nameserver vendors are not doing even rudimentry checks like those above. DiG has thos options so that we could perform checks like these. <o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>Until Adobe fix their broken servers you can use a server clause to disable sending SIT requests to them. Obviously this does not scale. <o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText> server <address> { request-sit no; }; <o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>Mark <o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>------------------------------------------------------------------ </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>But this doesn’t solve the problem on others domains … </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>… should be possible enable “request-sit no” for all domains and not manually add it? </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Because I think there are lot of domains with this problem </span><span style='font-size:10.0pt;font-family:Wingdings'>L</span><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>------------------------------------------------------------------ </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>\Server\Bind\bin\<span style='background:yellow;mso-highlight:yellow'>dig.exe @81.174.15.142 <a href="http://www.acer.it">www.acer.it</a></span> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>; <<>> DiG 9.10.1 <<>> @81.174.15.142 <a href="http://www.acer.it">www.acer.it</a> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>; (1 server found) </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; global options: +cmd </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; Got answer: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; ->>HEADER<<- opcode: QUERY, status: <span style='background:yellow;mso-highlight:yellow'>NXDOMAIN</span>, id: 42228 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; OPT PSEUDOSECTION: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>; EDNS: version: 0, flags:; udp: 4096 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; QUESTION SECTION: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;www.acer.it. IN A </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; ANSWER SECTION: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><a href="http://www.acer.it">www.acer.it</a>. 300 IN CNAME public-akamai.gtm.acer.com. </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; AUTHORITY SECTION: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>gtm.acer.com. 60 IN SOA gtm1.acer.com. hostmaster.gtm1.acer.com. 482 10800 3600 604800 60 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; Query time: 572 msec </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; SERVER: 81.174.15.142#53(81.174.15.142) </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; WHEN: Wed Oct 22 12:13:12 ora legale Europa occidentale 2014 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; MSG SIZE rcvd: 132 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>------------------------------------------------------------------ </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>------------------------------------------------------------------ </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>\Server\Bind\bin\<span style='background:lime;mso-highlight:lime'>dig.exe @8.8.8.8 <a href="http://www.acer.it">www.acer.it</a></span> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>; <<>> DiG 9.10.1 <<>> @8.8.8.8 <a href="http://www.acer.it">www.acer.it</a> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>; (1 server found) </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; global options: +cmd </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; Got answer: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; ->>HEADER<<- opcode: QUERY, status: <span style='background:lime;mso-highlight:lime'>NOERROR</span>, id: 34510 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; OPT PSEUDOSECTION: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>; EDNS: version: 0, flags:; udp: 512 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; QUESTION SECTION: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;www.acer.it. IN A </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; ANSWER SECTION: </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><a href="http://www.acer.it">www.acer.it</a>. 281 IN CNAME public-akamai.gtm.acer.com. </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>public-akamai.gtm.acer.com. 11 IN CNAME <a href="http://www.acer.com.edgesuite.net">www.acer.com.edgesuite.net</a>. </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><a href="http://www.acer.com.edgesuite.net">www.acer.com.edgesuite.net</a>. 12306 IN CNAME a492.b.akamai.net. </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>a492.b.akamai.net. 19 IN A 88.149.196.137 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>a492.b.akamai.net. 19 IN A 88.149.196.145 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; Query time: 60 msec </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; SERVER: 8.8.8.8#53(8.8.8.8) </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; WHEN: Wed Oct 22 12:14:02 ora legale Europa occidentale 2014 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>;; MSG SIZE rcvd: 180 </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>------------------------------------------------------------------ </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Thanks in advance and best regards </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Staff IDS </span><o:p></o:p></p></div></body></html>