On Mon, Jul 05, 2010 at 10:36:24PM -0500,
 Stan Barber <s...@academ.com> wrote 
 a message of 71 lines which said:

>  root-servers list present
>  [TEST root-servers list present]: answer refused from server: (NS )
> 
> DNS-OARC suggests in
> https://www.dns-oarc.net/oarc/articles/upward-referrals-considered-harmful 
> that REFUSED is a reasonable response.

The algorithm followed by Zonecheck is "if the server claims to be
recursive, it should be recursive". If it is not, this test is not
performed. In most cases, the proper solution is to disable
recursion. Otherwise, if it is not possible, yes, indeed, the recent
developments following the ISPRIME attack creates a problem.


_______________________________________________
zonecheck-tests mailing list
zonecheck-tests@nongnu.org
http://lists.nongnu.org/mailman/listinfo/zonecheck-tests

Reply via email to