[dns-operations] 2600::a1 (ns1-auth.sprintlink.net)

[Mark Andrews]

In message <20170216202502.incu7ypwkkp3px7u at mycre.ws>, Robert Edmonds writes:
> Robert Edmonds wrote:
> > If I understand correctly, this message is printed when the answer comes
> > back with RD=1 and RA=0. dig +norec doesn't suppress the warning in all
> > cases, because an auth could still send that header bit pattern.
> 
> Not sure, but I think this would fix the corner case.

Not if the server is following STD13.  RD is supposed to be copied
from the request to the response.  It may stop the warning appearing
for those servers that set RD=1 when they should not but for them
we should put up a different warning.  "RD asserted when not
requested" or something similar.

Mark

> diff --git a/bin/dig/dig.c b/bin/dig/dig.c
> index 6e183d48f8..a827917237 100644
> --- a/bin/dig/dig.c
> +++ b/bin/dig/dig.c
> @@ -583,6 +583,7 @@ printmessage(dig_query_t *query, dns_message_t *msg, isc_
> boolean_t headers) {
>  			       msg->counts[DNS_SECTION_ADDITIONAL]);
>  
>  			if (msg != query->lookup->sendmsg &&
> +			    (query->lookup->recurse == ISC_TRUE) &&
>  			    (msg->flags & DNS_MESSAGEFLAG_RD) != 0 &&
>  			    (msg->flags & DNS_MESSAGEFLAG_RA) == 0)
>  				printf(";; WARNING: recursion requested "
> 
> -- 
> Robert Edmonds
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org