Anand Buddhdev <ana...@ripe.net> wrote: > > A legitimate client, following a normal chain of referrals, has *no* > reason to query a server for zones it is not authoritative for.
That's true for cases like .sl and other domains whose delegations are set up correctly, but if a server is accidentally lame then it's helpful to return REFUSED so that resolvers don't have to wait for a timeout before trying other servers. A quick REFUSED will also avoid messing up the resolver's per-server statistics that might interfere with queries for authoritative zones. Tony. -- f.anthony.n.finch <d...@dotat.at> https://dotat.at/ Southwest Fitzroy: Southeasterly 5 to 7, becoming variable 2 to 4 at times in south. Moderate or rough, occasionally slight in south. Thundery showers, fog patches. Moderate, occasionally very poor. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users