<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">EDNS0 would be my first guess. It’s very hard to tell without debugging output from `named`.<br><br>But let me rephrase my response: If this is for an experiment or a school project I would be happy to help, but if the goal is to unleash yet another incomplete DNS server implementation then I would be happier if this activity ceased in the beginning. That’s why I asked about the design goals of the project, so we can recommend a proper solution instead of giving advice like “this bit needs to be 1 and not 0” that would break the DNS ecosystem in some other creative way.<div><br></div><div>DNS is hard to implement right, let’s not make this any harder by adding more weirdness into the wild.<br><br>Ondřej <br><div dir="ltr"><div>--</div>Ondřej Surý — ISC (He/Him)<div><br></div><div>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div><div dir="ltr"><br><blockquote type="cite">On 13. 9. 2021, at 14:42, Ondřej Surý <ondrej@isc.org> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><meta http-equiv="content-type" content="text/html; charset=utf-8"><a href="https://datatracker.ietf.org/doc/html/rfc6891">https://datatracker.ietf.org/doc/html/rfc6891</a><br><br><div dir="ltr"><div>--</div>Ondřej Surý — ISC (He/Him)<div><br></div><div>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div><div dir="ltr"><br><blockquote type="cite">On 13. 9. 2021, at 14:31, Petr Menšík <pemensik@redhat.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p>Hello Sonal,</p>
<p>are those queries done on internal network only? If global public
DNS root is used, how did bind9 found it should contact your
server? Is it configured via forward zone?</p>
<p>Public zone uses DNSSEC and bind9 does validate by default. I
think your problem is too short authority zone of SOA record used.</p>
<p>delv ns e164.arpa<br>
; fully validated<br>
e164.arpa. 43200 IN NS ns4.apnic.net.<br>
e164.arpa. 43200 IN NS ns3.afrinic.net.<br>
e164.arpa. 43200 IN NS ns3.lacnic.net.<br>
e164.arpa. 43200 IN NS rirns.arin.net.<br>
e164.arpa. 43200 IN NS pri.authdns.ripe.net.<br>
e164.arpa. 43200 IN RRSIG NS 13 2 172800
20210921103016 20210907090016 28754 e164.arpa.
hYukapDuiBGjbjWlmWLOqkjX4zsGkkF88BshSPiXZrC3/6mSmCGEOJDv
xdUstlg/CIdXrYIh4mYL1Tr2cAG2oQ==<br>
</p>
<p>Any validating server would refuse your response, because
ns.abc1.com is clearly not authoritative for in e164.arpa. But
result would be SERVFAIL, not FORMERR. I can only guess, because
we know nothing about queries. Nor error logged by bind9. We have
seen only image of wireshark instead of pcap file itself,
containing both queries and responses. Please include at least
some of these if you seek our help.<br>
</p>
<p>In general, I would recommend following Onřej's advice and choose
any existing implementations with a compatible license and
extending it if required. There are many details to make correct.</p>
<p>Best Regards,</p>
<p>Petr<br>
</p>
<div class="moz-cite-prefix">On 9/13/21 10:09 AM, Sonal Pahuja
wrote:<br>
</div>
<blockquote type="cite" cite="mid:MWHPR1001MB2141E9B750FB1111C7E9CA7BA8D99@MWHPR1001MB2141.namprd10.prod.outlook.com">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<div class="WordSection1">
<p class="MsoNormal"> </p>
<p class="MsoNormal">Hello All,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Currently we are facing below issue:-</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">We have built a response for NS query and
sending it to bind9. But however bind9 is rejecting and
getting server fail error<span>.</span></p>
<p class="MsoNormal">NAPTR and CNAME queries are working fine.</p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal">Wireshark of response built by our
application:</p>
<p class="MsoNormal"><span><img id="Picture_x0020_1" width="719" height="315" src="cid:part1.88B5F650.5F073DB0@redhat.com"></span><span></span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal">Above messages is getting received by
bind9, bind 9 is rejecting it and sending server fail message
to sender</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">In named.run getting below output:-</p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span>error (FORMERR) resolving</span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span><img id="Picture_x0020_2" width="633" height="267" src="cid:part2.ABDEFBBD.7DD38565@redhat.com"></span><span></span></p>
<p class="MsoNormal">Kindly let us know what can be issue here.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Regards</p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Please visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
ISC funds the development of this software with paid support subscriptions. Contact us at <a class="moz-txt-link-freetext" href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Petr Menšík
Software Engineer
Red Hat, <a class="moz-txt-link-freetext" href="http://www.redhat.com/">http://www.redhat.com/</a>
email: <a class="moz-txt-link-abbreviated" href="mailto:pemensik@redhat.com">pemensik@redhat.com</a>
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB</pre>
<span>_______________________________________________</span><br><span>Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list</span><br><span></span><br><span>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.</span><br><span></span><br><span></span><br><span>bind-users mailing list</span><br><span>bind-users@lists.isc.org</span><br><span>https://lists.isc.org/mailman/listinfo/bind-users</span><br></div></blockquote></div></blockquote></div></body></html>