Bind's handling of lame nameservers

2014-12-16 Thread John Wobus
How do BIND caching servers handle received responses with no aa flag? We're running BIND 9.9.6-P1 and I received a report of a query that our server sometimes answered as expected and sometimes didn't. The offending name is not one we are authoritative for. I checked the offending name and

Re: Bind's handling of lame nameservers

2014-12-16 Thread Mark Andrews
We tried to check aa for just this reason but there are to many broken authoritative servers which just don't set aa=1 on all the servers for the zone that we had to back the code change out. I would just use a server clause to mark nameserver as bogus. Mark -- Mark Andrews, ISC 1 Seymour St.,

Re: Bind's handling of lame nameservers

2014-12-16 Thread John Wobus
On Dec 16, 2014, at 4:26 PM, Mark Andrews wrote: We tried to check aa for just this reason but there are to many broken authoritative servers which just don't set aa=1 on all the servers for the zone that we had to back the code change out. I would just use a server clause to mark nameserver as