[dns-operations] NS answer inconsistency between implementations for delegated zone

[Peter van Dijk]

Hi Tony, Rémi,

On Mar 16, 2012, at 14:54 , Tony Finch wrote:

> Remi Gacogne <listes+dns-operations at valombre.net> wrote:
>> 
>> I noticed a difference in the behavior of bind, powerdns (using bind or
>> MySQL backend) and nsd regarding the answer to an NS query for a
>> delegated zone. Powerdns is responding to the query by putting
>> corresponding NS RRs into the ANSWER section, whereas bind and nsd are
>> putting them into the AUTHORITY section.
>> 
>> I am not sure what the correct answer is, as I haven't found a clear
>> specification on this case yet.
> 
> BIND and NSD are correct. See RFC 2181 section 6.1.

Thanks for the pointer! It turns out we have this issue in specific backend configurations. I've added a test to our test suite and am fixing the backends responsible.

Kind regards,
Peter van Dijk