DNS 101

Damian Gerow damian at sentex.net
Fri Nov 29 23:34:48 UTC 2002


On Fri, 2002-11-29 at 18:07, Phillip Vandry wrote:
> > I'm looking for a bit of DNS help here...
> > 
> > We've been doing a bit of work that involves looking up the real
> > authoritative nameservers for domains that we believe we are
> > authoritative for, and have run into a spot of trouble when it comes to
> > looking up ca. sub-domains.
> 
> Damian,
> 
> I was running exactly that kind of script for a while when I wanted to
> clean up a nameserver (couldn't customers notify nameserver operators
> when they redelegate their zones somewhere else? No, that would be

:)  Maybe we should set a fine or something...

> too much to ask for.). I also had trouble with the ca. domains.
> Several of the nameservers pick up the NS records at the top of *my*
> zonefile instead of reporting what's in the "ca." zonefile. None
> of the GTLD servers do this. I guess they're configured for recusrion
> and fetch-glue and shouldn't be.

Just to let everyone know, this has all been clarified, and it was the
swap in responses that had me all confused.

BIND8 responded, in this case, with an answer, giving the /n/ name
servers, thus setting ANCOUNT to /n/.

BIND9 responds, again in this case, with the nameservers as glue data,
thus keeping the ANCOUNT at 0 (no official answers, right?).

Thanks to Kandra for shedding light on this, and Joe Abley for
explaining some of the more detailed items.  Much appreciated.

  - Damian



More information about the NANOG mailing list