[dns-operations] Reporting glue as authoritive data -- Bug!
Mark Andrews
Mark_Andrews at isc.org
Tue Jan 29 22:47:23 UTC 2008
> * Edward Lewis wrote:
> > Documenting these responses would be the responsible thing to do. No
> > one has taken this on. I don't see the harm in legitimizing them,
> > whatever that means. Perhaps once we rid the network of broken
> > resolvers we don't need to see these responses. But since when has
> > the Internet relied on an attitude that every one has to march to the
> > same beat? Whatever happened to "be liberal in what you accept?"
>
> I have the problem in the other direction. The response of glue as
> legitimate answers is not accepted by my resolver (DNSSEC validation on).
> The reason to ask here is a report from a friend who's resolver assumed the
> answer to complete and therefore was unable to resolve his own domain.
>
> So I have to choose to make the new implementation bugward compatible or not.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.oarci.net
> http://lists.oarci.net/mailman/listinfo/dns-operations
Diversity in answers is bad for the resolver as they have
to deal with all the undocumented crud that gets sent at
them.
We already have to have a workaround to deal with this
"referral in answer". Yes, BIND 8 produced this crud
as well.
; <<>> DiG 9.3.4-P1 <<>> ns uu.net +norec @a.gtld-servers.net
; (2 servers found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30839
;; flags: qr; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4
;; QUESTION SECTION:
;uu.net. IN NS
;; ANSWER SECTION:
uu.net. 172800 IN NS auth00.ns.uu.net.
uu.net. 172800 IN NS auth200.ns.uu.net.
uu.net. 172800 IN NS auth210.ns.uu.net.
uu.net. 172800 IN NS auth60.ns.uu.net.
;; ADDITIONAL SECTION:
auth00.ns.uu.net. 172800 IN A 198.6.1.65
auth200.ns.uu.net. 172800 IN A 195.129.12.82
auth210.ns.uu.net. 172800 IN A 195.129.12.74
auth60.ns.uu.net. 172800 IN A 198.6.1.181
;; Query time: 283 msec
;; SERVER: 2001:503:a83e::2:30#53(2001:503:a83e::2:30)
;; WHEN: Wed Jan 30 09:37:03 2008
;; MSG SIZE rcvd: 177
I'm sure if I look hard enough I'll find a glue in answer
without glue in additional as well.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews at isc.org
More information about the dns-operations
mailing list