In message <alpine.lsu.2.00.1210031745360.4...@hermes-1.csi.cam.ac.uk>, Tony Fi nch writes: > Why does named complain in this manner? I noticed this when wondering > about validating stub resolvers which might query for DNSKEY and DS > records without knowing where zone cuts are in order to reduce latency. > > 03-Oct-2012 17:44:47.571 resolver: notice: > DNS format error from 212.72.49.3#53 > resolving www.bbc.co.uk/DNSKEY > for client 127.0.0.1#48638: > CNAME response for DNSKEY RR
It's fallout from the type code roll from KEY to DNSKEY. KEY can exist beside CNAME so the CNAME is not followed for KEY, the same is not supposed to be true for DNSKEY. I'll open a bug ticket for this. For reference see RFC 4035 Section 2.5 Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
