>It works that way, sometimes. > >If recursion is enabled on your server, it will query the other servers in >the NS records on behalf of the resolver and return what it finds. If >recursion is off, it will just return the NS records and the resolver is >expected to follow them (and some really dumb resolvers might not be able >to do that). > >If your first server can't talk to the other (delegated zone's) NS's (say >because of a firewall issue) you can get something that matches what you >seem to be getting.
Thanks John. >From the first server, I can talk to the delegated nameserver no problem. We thought it might be firewall/acl related, but digs confirm that they can talk directly without problem. They are, logically speaking, on the same switch, with no firewalls between. Todd. --------------------------------------------------------------------- This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful. _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
