[dns-operations] Authoritative answer with NSCOUNT=0

Mark Andrews marka at isc.org
Tue Aug 18 21:39:00 UTC 2009


In message <3efd34cc0908180924t785ac07bk6c55d907cf0cbc61 at mail.gmail.com>, bert 
hubert writes:
> On Tue, Aug 18, 2009 at 1:55 PM, Anand Buddhdev<anandb at ripe.net> wrote:
> > Hello people,
> >
> > Yesterday I observed DNS responses which have the AA bit set, but the
> > authority section is empty:
> 
> PowerDNS does this. The authority section is completely optional for
> non-delegating answers, so I've not felt the need to fill it out over
> the past 10 years. Every few years someone notices, but it doesn't
> matter.
> 
> No one (no program, at least) reads that section either.

Named can also be configured to do this via minimal-responses.  This is
turned always on for DNSKEY responses.
 
> > Additionally, a query for the name servers for this zone returns glue in
> > the answer section instead of the additional section, while the
> > authority section is still empty:
> 
> That isn't us.

Nor us.

>    Bert
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the dns-operations mailing list