[dns-operations] NXDOMAIN vs NOERROR/no answers for non-existant records

Matthew Richardson matthew-l at itconsult.co.uk
Mon Apr 6 10:30:30 UTC 2020


Thanks - I also had thought the NODATA response was wrong, but wanted a
second opinion...

However, is this going to cause any practical problems?

There are many domains being responded to in this way, and I do not think
any use DNSSEC.

Best wishes,
Matthew

 ------
>From: Stephane Bortzmeyer <bortzmeyer at nic.fr>
>To: Matthew Richardson <matthew-l at itconsult.co.uk>
>Cc: dns-operations at dns-oarc.net
>Date: Fri, 3 Apr 2020 14:18:45 +0200
>Subject: Re: NXDOMAIN vs NOERROR/no answers for non-existant  records

>On Fri, Apr 03, 2020 at 12:31:38PM +0100,
> Matthew Richardson <matthew-l at itconsult.co.uk> wrote 
> a message of 75 lines which said:
>
>> where mtgmon.itconsult.net & monitor.itconsult.net are delegated to
>> different authoratitives.
>
>IMHO, the authoritative name servers for monitor.itconsult.net are
>correct and those for mtgmon.itconsult.net are wrong (sending NODATA
>instead of NXDOMAIN, even for ANY queries.)



More information about the dns-operations mailing list