[dns-operations] Why the record locates in com. zone?

刘明星:) liumingxing at cnnic.cn
Mon Sep 12 13:18:19 UTC 2011


      sorry, I did not give a explicit discription about my question. The question is that in my opinion the RR "ns3.wondns.com.  172800 IN A 113.105.171.124" should not be included in the 'com.' zone but in the wondns.com zone. 
      The zq681.com zone is authorized to the servers ns3.wondns.com zone and ns4.wondns.com. Well, at the time, one question is coming ---where should be the addresses of the two servers stored? Maybe in the com zone or maybe in the wondns.com zone. It is known that wondns.com zone is Authorized out to the two servers --ns1.wondns.com and ns2.wondns.com, so the  RR "ns3.wondns.com.  172800 IN A 113.105.171.124" should exist in the wondns.com zone instead of the com zone. However, I find that the RR exists in the com zone. I want to know whether the RR should exist in the com zone.

2011-09-12 



Mingxing



发件人: Carlos Martinez-Cagnazzo 
发送时间: 2011-09-09  22:53:59 
收件人: 刘明星:) 
抄送: dns-operations 
主题: Re: [dns-operations] Why the record locates in com. zone? 
 
I'm not sure I completely understand your question; but let me provide
a tentative answer.
It's my understanding that what you've found represents the main
purpose of the "additional" section in the DNS response message, an
optimization saving resolvers one step in the recursion process. So,
my answer to your question would be "yes", what bind 9.7.2 is doing is
correct.
If the NS-set in the root zone does not match the NS-set in the zone
itself, well, the problem is not with BIND but rather with the
configuration of the zone and it should be corrected at that level.
However, I might have misunderstood your question. Just let me know :-)
regards
Carlos
2011/9/9 刘明星:) <liumingxing at cnnic.cn>:
> hi, all
>
> I dig zq681.com @a.gtld-servers.net
> the result is the following:
> ;; QUESTION SECTION:
> ;zq681.com.   IN A
>
> ;; AUTHORITY SECTION:
> zq681.com.  172800 IN NS ns3.wondns.com.
> zq681.com.  172800 IN NS ns4.wondns.com.
>
> ;; ADDITIONAL SECTION:
> ns3.wondns.com.  172800 IN A 113.105.171.124
> ns3.wondns.com.  172800 IN A 208.98.33.250
> ns3.wondns.com.  172800 IN A 208.98.33.251
> ns4.wondns.com.  172800 IN A 113.105.171.78
> ns4.wondns.com.  172800 IN A 208.98.33.252
> ns4.wondns.com.  172800 IN A 208.98.33.253
> and I find that the bind9.7.2-p2 recursor just believe that the authoritave
> nameserver have the addresses listing in additional section in response, and
> thus
> directly request zq681.com to one of the address. I want to know whether it
> is wrong for the recursor to accept the addresses. If it is allowed, why is
> there the records like  "ns3.wondns.com.  172800 IN A 113.105.171.124" in
> com. zone and how to do this?
>
> 2011-09-09
> ________________________________
> Mingxing
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>
-- 
--
=========================
Carlos M. Martinez-Cagnazzo
http://www.labs.lacnic.net
=========================
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20110912/36500de5/attachment.html>


More information about the dns-operations mailing list