Re: [External] : Re: NS query on bind9

2021-09-15 Thread Petr Menšík
FAIL. > > Attached is the PCAP. > > Please share your views again on this. Thanks in advance! > > Regards, > Sonal > > > > -Original Message- > From: Mark Andrews [mailto:ma...@isc.org] > Sent: Wednesday, September 15, 2021 1:51 AM > To: Sonal Pah

Re: [External] : Re: NS query on bind9

2021-09-15 Thread Mark Andrews
ws [mailto:ma...@isc.org] > Sent: Wednesday, September 15, 2021 1:51 AM > To: Sonal Pahuja > Cc: bind-users@lists.isc.org > Subject: [External] : Re: NS query on bind9 > > Named is very picky about returned SOA records in negative responses. If it > has followed/seen a delegati

RE: [External] : Re: NS query on bind9

2021-09-15 Thread Sonal Pahuja
@lists.isc.org Subject: [External] : Re: NS query on bind9 Named is very picky about returned SOA records in negative responses. If it has followed/seen a delegation then the returned SOA record in the response needs to be at or below that point. I suspect that named has a cached NS RRset between e164

Re: NS query on bind9

2021-09-14 Thread Mark Andrews
Named is very picky about returned SOA records in negative responses. If it has followed/seen a delegation then the returned SOA record in the response needs to be at or below that point. I suspect that named has a cached NS RRset between e164.arpa and 4.0.4.5.2.4.1.4.2.0.2.4.e164.arpa which

Re: NS query on bind9

2021-09-13 Thread Ondřej Surý
EDNS0 would be my first guess. It’s very hard to tell without debugging output from `named`. But let me rephrase my response: If this is for an experiment or a school project I would be happy to help, but if the goal is to unleash yet another incomplete DNS server implementation then I would

Re: NS query on bind9

2021-09-13 Thread Ondřej Surý
https://datatracker.ietf.org/doc/html/rfc6891 -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 9. 2021, at 14:31, Petr Menšík wrote: > >  > Hello Sonal, > > are those

Re: NS query on bind9

2021-09-13 Thread Petr Menšík
Hello Sonal, are those queries done on internal network only? If global public DNS root is used, how did bind9 found it should contact your server? Is it configured via forward zone? Public zone uses DNSSEC and bind9 does validate by default. I think your problem is too short authority zone of

Re: NS query on bind9

2021-09-13 Thread Ondřej Surý
Hi Sonal, > On 13. 9. 2021, at 10:09, Sonal Pahuja wrote: > > Kindly let us know what can be issue here. DNS is hard. My recommendation would be to not write your own DNS server, but use an existing implementation that could be extended. Perhaps if you share your design goals, we could help

RE: NS query on bind9

2021-09-13 Thread Sonal Pahuja
Hello All, Currently we are facing below issue:- We have built a response for NS query and sending it to bind9. But however bind9 is rejecting and getting server fail error. NAPTR and CNAME queries are working fine. Wireshark of response built by our application:

NS query on bind9

2021-09-13 Thread Sonal Pahuja
Hello All, Currently we are facing below issue:- We have built a response for NS query and sending it to bind9. But however bind9 is rejecting and getting server fail error In named.run getting below output:- ___ Please visit