Re: RFC 6604 Clarification
Tony Finch <[email protected]> Wed, 1 Apr 2015 01:17:49 +0100
| Newsgroups | gmane.ietf.dnsext |
|---|---|
| Message-ID | <[email protected]> |
--===============7314694996451893822== Content-Type: multipart/alternative; boundary=Apple-Mail-96DB877E-70BD-4A5C-AB43-EA1713D1B7D9 Content-Transfer-Encoding: 7bit --Apple-Mail-96DB877E-70BD-4A5C-AB43-EA1713D1B7D9 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable > On 31 Mar 2015, at 23:38, Brian Dickson <[email protected]> wr= ote: >=20 > Sending the query to the previous auth server would be the wrong thing > to do. Even if such a query were received, the correct behavior is > NOERRROR, NODATA, with AA unset (set to zero). If you send a query to an authoritative-only server for a name for which it i= sn't authoritative, you should get a referral if the qname is a subdomain of= one of the server's zones, or a referral to the root (traditional), or REFU= SED. A referral is a bit more than just NOERROR NODATA AA=3D0 :-) Tony. --=20 f.anthony.n.finch <[email protected]> http://dotat.at --Apple-Mail-96DB877E-70BD-4A5C-AB43-EA1713D1B7D9 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D= utf-8"></head><body dir=3D"auto"><div><br></div><div><div><font color=3D"#00= 0000"><span style=3D"background-color: rgba(255, 255, 255, 0);">On 31 Mar 20= 15, at 23:38, Brian Dickson <<a href=3D"mailto:brian.peter.dickson@gmail.= com">[email protected]</a>> wrote:<br></span></font></div><bl= ockquote type=3D"cite"><font color=3D"#000000"><span style=3D"background-col= or: rgba(255, 255, 255, 0);"><br>Sending the query to the previous auth serv= er would be the wrong thing<br>to do. Even if such a query were received, th= e correct behavior is<br>NOERRROR, NODATA, with AA unset (set to zero).</spa= n></font></blockquote><div><br></div><div>If you send a query to an authorit= ative-only server for a name for which it isn't authoritative, you should ge= t a referral if the qname is a subdomain of one of the server's zones, or a r= eferral to the root (traditional), or REFUSED. A referral is a bit more than= just NOERROR NODATA AA=3D0 :-)</div><br>Tony.<div>-- </div><div>f.anth= ony.n.finch <<a href=3D"mailto:[email protected]">[email protected]</a>> &= nbsp;<a href=3D"http://dotat.at">http://dotat.at</a></div></div><div><br></d= iv></body></html>= --Apple-Mail-96DB877E-70BD-4A5C-AB43-EA1713D1B7D9-- --===============7314694996451893822== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ dnsext mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsext --===============7314694996451893822==--