[dns-operations] Cname errors?

Mark Andrews marka at isc.org
Tue Sep 29 16:01:05 UTC 2015


In message <20150929153012.GA6883 at panix.com>, Brett Frankenberger writes:
> On Tue, Sep 29, 2015 at 01:21:18PM +1000, Mark Andrews wrote:
> > 
> > In message <CAPnMbcyNGXjP8fuH1eWfQKaz9YafAbVK1ZdMTidzMqKbo+1AeQ at mail.gmail.com>
> > , Andrew Boling writes:
> > > 
> > > Pardon - I'm tired and I misread that as a log message from an
> > > authoritative server. Your log messages are an indicator of the behavior I
> > > was mentioning.
> > > 
> > > A quick glance through the BIND ARM doesn't yield any results on disabling
> > > the nameserver skipping behavior. Even if you were to instruct your server
> > > to relax this policy, it wouldn't stop the rest of the internet from
> > > rejecting those nameservers when the glue expires. The operators need to
> > > fix the zone.
> > 
> > You can't disable the skipping, only the logging.  You also can't
> > make NS pointing to CNAME records work in the general case.  Because
> > of this named refuses to follow CNAME records.
> 
> For clarity, the new behavior (or new default, as the case may be) with
> the upgrade is the logging, and the regusal to follow is not new?

BIND 8 logged this.  The log message just got missed in the BIND 9
re-write.
 
>      -- Brett
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the dns-operations mailing list