2011/3/4 Mark Andrews <ma...@isc.org>:
>
> In message <AANLkTi=9B07Q=flysn6s-0scossneuxms0qgy9h+o...@mail.gmail.com>, 
> terr
> y writes:
>> Hello,
>>
>> When I delegate a subdomain in a zone example.com, the config in
>> named.conf is like:
>>
>> test.example.com.  3600  IN NS  ns1.another.com.
>> test.example.com.  3600  IN NS  ns2.another.com.
>>
>> Then I dig to the auth-server of the example zone:
>>
>> dig test.example.com ns @ns1.example.com
>>
>> I found some servers return the ANSWER SECTION, but some servers
>> return the AUTHORITY SECTION.
>>
>> For example:
>>
>> ;; ANSWER SECTION:
>> test.example.com.       3600    IN      NS      ns2.another.com.
>> test.example.com.       3600    IN      NS      ns1.another.com.
>>
>> And:
>>
>> ;; AUTHORITY SECTION:
>> test.example.com.       3600    IN      NS      ns2.another.com.
>> test.example.com.       3600    IN      NS      ns1.another.com.
>>
>>
>> I'm confused, shall name server answer with ANSWER or AUTHORITY for this case
>> ?
>
> Look at RA and RD.  If the server recurses, you will get a answer.
> If the server does not recurse, you will get a referral.  Then there
> are the really old broken servers which get this wrong.
>

Hi Mark,

Please see this for details:

$ dig nsbeta.info ns @ns34.domaincontrol.com

; <<>> DiG 9.4.2-P2.1 <<>> nsbeta.info ns @ns34.domaincontrol.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41454
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;nsbeta.info.                   IN      NS

;; ANSWER SECTION:
nsbeta.info.            3600    IN      NS      ns34.domaincontrol.com.
nsbeta.info.            3600    IN      NS      ns33.domaincontrol.com.

;; Query time: 183 msec
;; SERVER: 208.109.255.17#53(208.109.255.17)
;; WHEN: Fri Mar  4 22:59:39 2011
;; MSG SIZE  rcvd: 123


There isn't the "ra" flag in the response, why the nameserver has been
also answering with the "ANSWER SECTION"? I think it should answer
with the "AUTHORITY SECTION".

Thanks again.
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to