> -----Original Message----- > From: Mark Andrews [mailto:ma...@isc.org] > > Named does not check that a parent zone has NS records for a child > zone on the same server. Always add delegating NS records. > > As for ENT returning NXDOMAIN. Early versions of the specifications > of DNSSEC said there were no NAMES, rather than NAMES with RECORDS, > between names in a DNSSEC sorted zone. This changed the behaviour > of ENTs from NODATA to NXDOMAIN. Versions of named which supported > this specification of DNSSEC return NXDOMAIN rather than NODATA for > ENT. > > It took a while to get the IETF working group to update to > specification to restore ENT. > Mark,
Good point on NS records and thanks for the background on this. Guess it's always better to follow the spec rather than lean on a side effect with fingers crossed :) /John > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org > -- THESE ARE THE DROIDS TO WHOM I REFER: This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
