[dns-operations] Any dreamhost DNS admins?

[Paul Vixie]

Mark Andrews wrote on 2019-02-19 20:52:
...
>>> If the final name doesn’t exist then NXDOMAIN is fine.
>>
>> Agreed.  This is quite correct when the CNAME target is in the same zone.
> 
> Or if the server can determine it from another zone it serves or if it
> recursed to construct the answer.
even assuming a mixed mode server that's both authoritative and 
recursive, nothing it had to recurse for or could recurse for should 
have an impact on answers to questions with RD=0. so the answer to 
out-of-zone cname chains that end outside the zones this server is 
authoritative for should be dictated by the last zone's status, so, 
either NOERROR, REFUSED, or SERVFAIL, but never NXDOMAIN.

-- 
P Vixie