On Thu, Aug 6, 2015 at 4:16 AM, Lawrence K. Chen, P.Eng. <lkc...@ksu.edu>
wrote:
> So, in running some tests....I found that "dig +trace kstatesports.com"
> would get to ns-1.ksu.edu show couple NSEC3 records and stop.
>
$ dig +short kstatesports.com ns
ns-2.ksu.edu.
ns-3.ksu.edu.
ns-1.ksu.edu.
Because the kstatesports.com name servers are in the edu zone, they are
considered "out of bailiwick". A resolver must resolve those names in
order to learn the addresses of the servers it must communicate with for
kstatesports.com queries. Thus, kstatesports.com depends on ns-{1,2,3}.
ksu.edu resolving (and validating) properly.
Cheers,
Casey
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
