[Unbound-users] Surprising successful resolution

W.C.A. Wijngaards wouter at NLnetLabs.nl
Wed Jan 20 08:14:33 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Florian,

This last packet is not deemed to be a lame-delegation-to-itself, but
instead a noerror-nodata answer.  Obviously if the server has somehow
records for the zone NS that it can share, it has records for the zone.
 It does not set the AA bit, yes.  Unbound is treating it as if it is an
open recursor - hence the weird delegation that it gives (like a
delegation from cache).  Therefore it is attempted as a last resort to
query that server.  Hence the resolution of this query.

Best regards,
   Wouter


On 01/19/2010 08:25 PM, Florian Weimer wrote:
> I believe this response should be a SERVFAIL instead:
> dns.gmd.de (129.26.8.82) is lame (it returns a delegation to itself),
> and the other servers don't respond at all.
> 
> It doesn't make a difference in practice, but I'm still surprised. 8-)
> _______________________________________________
> Unbound-users mailing list
> Unbound-users at unbound.net
> http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAktWu2kACgkQkDLqNwOhpPhaZwCfT5ACmdASkk9ryQSsgs/lwLY4
yvoAn0wiRWxVMGkBhR1FgrIAIBlVxsCG
=LXwJ
-----END PGP SIGNATURE-----



More information about the Unbound-users mailing list