[dns-operations] service.gov.scot erroneous NXDOMAIN from "scot" auth servers

[Viktor Dukhovni]

On Tue, Jun 20, 2023 at 02:44:34PM +0200, Stephane Bortzmeyer wrote:
> On Tue, Jun 20, 2023 at 01:36:10PM +0200,
>  CORE DNS Support Team <dnsmaster at corenic.org> wrote 
>  a message of 43 lines which said:
> 
> > since anycast9 is only responsible for scot and not for gov.scot, I
> > believe the desired answer is a delegation to the name servers of
> > gov.scot, and not, as you wrote, a "NODATA" response
> 
> No, Viktor is right, and a NODATA (the correct answer) is indeed what
> the servers return for other query types:

Well, a delegation is in some sense a NODATA response that happens to
have referral NS records (and no SOA) in the authority section.  So in
that sense both are correct, but a delegation is I think closer.

> % dig @anycast23.irondns.net. A service.gov.scot
> 
> ; <<>> DiG 9.18.12-1-Debian <<>> @anycast23.irondns.net. A service.gov.scot
> ; (2 servers found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30666
> ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;service.gov.scot.		IN	A
> 
> ;; AUTHORITY SECTION:
> gov.scot.		86400	IN	NS	ns0.ja.net.
> gov.scot.		86400	IN	NS	ns4.ja.net.
> gov.scot.		86400	IN	NS	ns2.ja.net.
> gov.scot.		86400	IN	NS	ns3.ja.net.

That's of course a delegation.

-- 
    Viktor.