bsfin...@anl.gov wrote: > There are problems accessing this domain from the Internet, and I cannot > determine what the problem is. I have no trouble from Argonne, as the > domain is slaved on all of my servers. I do not see any problem with > the delegations, but I may be missing something. When I go to
I get SERVFAIL responses from BIND resolvers while Unbound returns an answer. I think CNAMEs in your delegation could be the cause: | IllinoisAcceleratorInstitute.org. 86400 IN NS dns1.aps.anl.gov. | IllinoisAcceleratorInstitute.org. 86400 IN NS dns2.aps.anl.gov. | dns1.aps.anl.gov. 86400 IN CNAME t1dns1.aps.anl.gov. | dns2.aps.anl.gov. 86400 IN CNAME t1dns2.aps.anl.gov. There was a thread about those, just a few days ago on another list: https://lists.dns-oarc.net/pipermail/dns-operations/2009-June/004126.html |> Does anyone have any knowledge of how well currently deployed DNS |> caches handle NS records pointing to names with CNAME records? | | named fails them deliberately because they cannot work | at the theoretical level for all delegation. You need | to change the additional section processing rules for | them to work. Hauke.
signature.asc
Description: OpenPGP digital signature
_______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
