rafael.molina at inter.com.ve
Fri Feb 3 01:54:10 UTC 2012
Thanks for your support,
Ok, I'm going to upgrade my dns server as soon as posible.
While, where can I configure "aa=0" to accept non "aa" answers ?.
I have some customers affected rigth now.
Thanks in advanced,
Rafael J. Molina Q.
El 02/02/2012 08:46 p.m., Mark Andrews escribió:
> The servers for avondirecto.com.ve are returning non-authoritative answers.
> ;<<>> DiG 9.7.3-P3<<>> www.avondirecto.com.ve @ns1.impsat.com.ve +norec
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15414
> ;; flags: qr; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUESTION SECTION:
> ;www.avondirecto.com.ve. IN A
> ;; ANSWER SECTION:
> www.avondirecto.com.ve. 86400 IN A 220.127.116.11
> ;; Query time: 312 msec
> ;; SERVER: 18.104.22.168#53(22.214.171.124)
> ;; WHEN: Fri Feb 3 12:07:06 2012
> ;; MSG SIZE rcvd: 56
> When we fixed named stop accepting glue promoted to answer from
> parent zones we tightend up the acceptance criteria to not accept
> non "aa" answers (9.7.0). This got relaxed in 9.7.1 to accept non
> "aa" answers. "aa=0" can be used to skip lame servers however when
> all the servers are broken you get SERVFAIL.
More information about the bind-workers