Hi list
Using BIND-9.14.1 as a resolver and qname-minimization set to "relaxed":
The following A-record resp. CNAME could not be resolved, when
qname-minimization is enabled (strict or relaxed):
www.gracenote.com
With qname-minimization enabled, BIND tries to get the NS record for
"glb.gracenote.com" (after BIND received the CNAME
"web.glb.gracenote.com") which results in:
$ dig @bind-9.14.1 +noall +answer ns glb.gracenote.com
glb.gracenote.com. 0 IN NS
sc-gtm-1a.globix-sc.gracenote.com.
Then BIND tries to get the ip address for the mentioned NS
(sc-gtm-1a.globix-sc.gracenote.com.) above, which results in NXDOMAIN:
$ dig @bind-9.14.1 +noall +answer +comment
sc-gtm-1a.globix-sc.gracenote.com.
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17096
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 9b42859a64d8ace1d701a0565cd94f43afdf5dc2a0368d96 (good)
From the client-perspective, the whole query results in SERVFAIL:
$ dig @bind-9.14.1 +noall +comment www.gracenote.com
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 47277
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: ffb32844e0c268e28df22c8a5cd9528e2dfff5e5f2f857cf (good)
Question:
Is there a simple way, where I can configure a zone-wide exception for
"qname-minimization" in a (pseudo)-way like this:
zone "gracenote.com." { qname-minimization off; };
What's the best way to "enable" resolution for the mentioned zone
without disabling qname-minimization?
Many thanks for any hints.
Kind regards,
Tom
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
