Well the first thing is that dig +trace is making queries from the machine it is running on and not the name server unless they are one and the same. The @ns2.service.uci.edu is only used to lookup the root nameservers. Dig +trace is also not performing DNSSEC validation on the answers.
Dig on a CNAME chain requires the entire lookup chain to complete unless you ask for ANY or CNAME both of which don’t follow the CNAME target as per STD 13. Named also logs errors it detects. Have you looked at the logs? -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
