Sorry, there is no clear description of the problem I describe the question again
Any parameters of the dig command should not be in sequence, such as below dig 1.1.1.1.in-addr.arpa PTR +trace +nodnssec VS dig 1.1.1.1.in-addr.arpa PTR +nodnssec +trace The output of these two commands after execution cannot achieve the same effect Mark Andrews <ma...@isc.org> 于2021年10月25日周一 下午12:44写道： > Works fine for me. > > % bin/dig/dig 1.1.1.1.in-addr.arpa +trace > > ; <<>> DiG 9.14.8 <<>> 1.1.1.1.in-addr.arpa +trace > ;; global options: +cmd > . 331767 IN NS f.root-servers.net. > . 331767 IN NS j.root-servers.net. > . 331767 IN NS k.root-servers.net. > . 331767 IN NS l.root-servers.net. > . 331767 IN NS i.root-servers.net. > . 331767 IN NS e.root-servers.net. > . 331767 IN NS h.root-servers.net. > . 331767 IN NS b.root-servers.net. > . 331767 IN NS m.root-servers.net. > . 331767 IN NS g.root-servers.net. > . 331767 IN NS c.root-servers.net. > . 331767 IN NS d.root-servers.net. > . 331767 IN NS a.root-servers.net. > . 331767 IN RRSIG NS 8 0 518400 > 20211104170000 20211022160000 14748 . > FERgiY720i+bYmHhXGQ2OU7NOoSM8Mhg/OedgoJrJ3Zs17/IJwUnEOkd > EPq98F8ar7Epc9/H0p0ZxQflKrL40q/+6S/KLoR5ecoem7Vp3JN4HMI7 > U7z9gobvmBS2f7vekrFp60AXtihCcAypaWRhyl2IZUK7u11tNbN95It+ > D/7IZLa3mFrVgMmeNRdd4uoOWzHxBZ4OusHNlnJ/rvE2smIS9RwEUbDW > iu9/psMZpfEBY5XOLg9ubKog/jma+T6OEINEdH0mzGtv4WoYAStd17Ax > mKHsf1N9PW8rNW+c63Y36VQYXhF+ikhPG3i1Q/a9tJVbN31u5EUtz2yV eUklXw== > ;; Received 1137 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms > > in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa. > in-addr.arpa. 86400 IN DS 47054 8 2 > 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2 > in-addr.arpa. 86400 IN DS 53696 8 2 > 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF > in-addr.arpa. 86400 IN DS 63982 8 2 > AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73 > in-addr.arpa. 86400 IN RRSIG DS 8 2 86400 > 20211107000000 20211024230000 52399 arpa. > cW2ERU/EJzAVftlJSuGmnhXMKaLWDpaP5ZKyw69/x0r5u7wSuksZ9Din > Y/dQi2ggf31k4nFBjLuBPU/FVCqoCc2VmF8RW4L4hIvo1OkcH5j0qMBI > UcnSU8XmRbp7zE0wZfzUaNVX0VHKYr6Z0dMWuhSeB7V4moJ3L6pz0Zj+ > H6zdAaepqE0GRN/DhzuscMEL755BMypHSauBhIuf/J33p1dr4LRfe/mf > 0J0SGB9Cxj555h504vXoCmwf96qwWNTyGzakwVTRVRvtMbIsg+8nJHJ4 > pcPHq3kOtrTYdY38z4BtJV0klaJIL2JYNUqFQkOeZRWsNLymz6gnfnBb Pr2oVA== > ;; Received 861 bytes from 2001:500:1::53#53(h.root-servers.net) in 308 ms > > 1.in-addr.arpa. 86400 IN NS ns2.apnic.net. > 1.in-addr.arpa. 86400 IN NS ns3.lacnic.net. > 1.in-addr.arpa. 86400 IN NS apnic.authdns.ripe.net. > 1.in-addr.arpa. 86400 IN NS rirns.arin.net. > 1.in-addr.arpa. 86400 IN NS apnic1.dnsnode.net. > 1.in-addr.arpa. 86400 IN DS 23004 13 2 > 3582737862817D55F8F7473BC58E620CFD4A0E1EF88F05C42C963113 3E32E894 > 1.in-addr.arpa. 86400 IN RRSIG DS 8 3 86400 > 20211107150454 20211017145555 51651 in-addr.arpa. > FwkrCN7wo52nR6w5E6oyxrxOYWW+gzGK2EaWf0UgCELSKuZLqNFqnlLY > +NWtott7UzXJmSl1OxmO74o13+mKJcgbYaTdbCQCeGgda68hxooP+LQ3 > AxEXnKYwyI803nOG9LVxIt03ln8S9r3bOje0i+AvZMjX5D+nO2fbW6K6 rVw= > ;; Received 408 bytes from 2001:500:87::87#53(b.in-addr-servers.arpa) in > 348 ms > > 1.1.1.in-addr.arpa. 86400 IN NS ns7.cloudflare.com. > 1.1.1.in-addr.arpa. 86400 IN NS ns3.cloudflare.com. > 99g3opuj99svu7j0634fc9ib4os7hqim.1.in-addr.arpa. 3600 IN NSEC3 1 0 5 > 70A93501FFC3E41D 99PTB70MBGKHRHBLB8TLUG7DII191IOA NS > 99g3opuj99svu7j0634fc9ib4os7hqim.1.in-addr.arpa. 3600 IN RRSIG NSEC3 13 4 > 3600 20211105031842 20211021014842 2679 1.in-addr.arpa. > PrGfRRQwXHSY237HPzTEAepc5ylC2v99BOEGlzfwIAN6lbYEapX2AoqL > YzlBnk4PyfftZS+xURjjkS+kxzLWcA== > ;; Received 333 bytes from 203.119.95.53#53(ns2.apnic.net) in 29 ms > > 1.1.1.in-addr.arpa. 3600 IN SOA alec.ns.cloudflare.com. > dns.cloudflare.com. 2036583626 10000 2400 604800 3600 > ;; Received 111 bytes from 162.159.4.8#53(ns7.cloudflare.com) in 17 ms > > % bin/dig/dig 1.1.1.1.in-addr.arpa +trace +nodnssec > > ; <<>> DiG 9.14.8 <<>> 1.1.1.1.in-addr.arpa +trace +nodnssec > ;; global options: +cmd > . 331756 IN NS k.root-servers.net. > . 331756 IN NS i.root-servers.net. > . 331756 IN NS g.root-servers.net. > . 331756 IN NS j.root-servers.net. > . 331756 IN NS b.root-servers.net. > . 331756 IN NS c.root-servers.net. > . 331756 IN NS f.root-servers.net. > . 331756 IN NS d.root-servers.net. > . 331756 IN NS m.root-servers.net. > . 331756 IN NS e.root-servers.net. > . 331756 IN NS a.root-servers.net. > . 331756 IN NS l.root-servers.net. > . 331756 IN NS h.root-servers.net. > ;; Received 851 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms > > in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa. > ;; Received 425 bytes from 192.5.5.241#53(f.root-servers.net) in 13 ms > > 1.in-addr.arpa. 86400 IN NS ns2.apnic.net. > 1.in-addr.arpa. 86400 IN NS ns3.lacnic.net. > 1.in-addr.arpa. 86400 IN NS apnic.authdns.ripe.net. > 1.in-addr.arpa. 86400 IN NS rirns.arin.net. > 1.in-addr.arpa. 86400 IN NS apnic1.dnsnode.net. > ;; Received 188 bytes from 193.0.9.1#53(f.in-addr-servers.arpa) in 303 ms > > 1.1.1.in-addr.arpa. 86400 IN NS ns7.cloudflare.com. > 1.1.1.in-addr.arpa. 86400 IN NS ns3.cloudflare.com. > ;; Received 127 bytes from 2620:38:2000::53#53(rirns.arin.net) in 291 ms > > 1.1.1.in-addr.arpa. 3600 IN SOA alec.ns.cloudflare.com. > dns.cloudflare.com. 2036583626 10000 2400 604800 3600 > ;; Received 111 bytes from 2400:cb00:2049:1::a29f:408#53( > ns7.cloudflare.com) in 298 ms > > % > > If you add +qr +all you can see the outgoing queries don’t have DO set. > > % bin/dig/dig 1.1.1.1.in-addr.arpa +trace +nodnssec +qr +all > > ; <<>> DiG 9.14.8 <<>> 1.1.1.1.in-addr.arpa +trace +nodnssec +qr +all > ;; global options: +cmd > ;; Sending: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44117 > ;; flags: rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ; COOKIE: 5bf7fc1153027792 > ;; QUESTION SECTION: > ;. IN NS > > ;; QUERY SIZE: 40 > > ;; BADCOOKIE, retrying. > ;; Sending: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6212 > ;; flags: rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995 > ;; QUESTION SECTION: > ;. IN NS > > ;; QUERY SIZE: 56 > > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6212 > ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 27 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 1232 > ; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995 (good) > ;; QUESTION SECTION: > ;. IN NS > > ;; ANSWER SECTION: > . 331627 IN NS i.root-servers.net. > . 331627 IN NS l.root-servers.net. > . 331627 IN NS c.root-servers.net. > . 331627 IN NS k.root-servers.net. > . 331627 IN NS h.root-servers.net. > . 331627 IN NS d.root-servers.net. > . 331627 IN NS a.root-servers.net. > . 331627 IN NS m.root-servers.net. > . 331627 IN NS f.root-servers.net. > . 331627 IN NS b.root-servers.net. > . 331627 IN NS e.root-servers.net. > . 331627 IN NS j.root-servers.net. > . 331627 IN NS g.root-servers.net. > > ;; ADDITIONAL SECTION: > g.root-servers.net. 603919 IN A 192.112.36.4 > k.root-servers.net. 603910 IN A 193.0.14.129 > i.root-servers.net. 603922 IN A 192.36.148.17 > m.root-servers.net. 603920 IN A 202.12.27.33 > e.root-servers.net. 603909 IN A 192.203.230.10 > b.root-servers.net. 603919 IN A 199.9.14.201 > c.root-servers.net. 603920 IN A 192.33.4.12 > f.root-servers.net. 603912 IN A 192.5.5.241 > d.root-servers.net. 603922 IN A 199.7.91.13 > h.root-servers.net. 603911 IN A 198.97.190.53 > j.root-servers.net. 603910 IN A 192.58.128.30 > a.root-servers.net. 603924 IN A 198.41.0.4 > l.root-servers.net. 603925 IN A 199.7.83.42 > g.root-servers.net. 603919 IN AAAA 2001:500:12::d0d > k.root-servers.net. 603910 IN AAAA 2001:7fd::1 > i.root-servers.net. 603924 IN AAAA 2001:7fe::53 > m.root-servers.net. 603920 IN AAAA 2001:dc3::35 > e.root-servers.net. 603909 IN AAAA 2001:500:a8::e > b.root-servers.net. 603917 IN AAAA 2001:500:200::b > c.root-servers.net. 603919 IN AAAA 2001:500:2::c > f.root-servers.net. 603912 IN AAAA 2001:500:2f::f > d.root-servers.net. 603922 IN AAAA 2001:500:2d::d > h.root-servers.net. 603911 IN AAAA 2001:500:1::53 > j.root-servers.net. 603910 IN AAAA 2001:503:c27::2:30 > a.root-servers.net. 603924 IN AAAA 2001:503:ba3e::2:30 > l.root-servers.net. 603925 IN AAAA 2001:500:9f::42 > > ;; Query time: 0 msec > ;; SERVER: 127.0.0.1#53(127.0.0.1) > ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021 > ;; MSG SIZE rcvd: 851 > > ;; Sending: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47020 > ;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995 > ;; QUESTION SECTION: > ;1.1.1.1.in-addr.arpa. IN A > > ;; QUERY SIZE: 77 > > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47020 > ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 13 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 1472 > ;; QUESTION SECTION: > ;1.1.1.1.in-addr.arpa. IN A > > ;; AUTHORITY SECTION: > in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa. > > ;; ADDITIONAL SECTION: > a.in-addr-servers.arpa. 172800 IN A 199.180.182.53 > b.in-addr-servers.arpa. 172800 IN A 199.253.183.183 > c.in-addr-servers.arpa. 172800 IN A 196.216.169.10 > d.in-addr-servers.arpa. 172800 IN A 200.10.60.53 > e.in-addr-servers.arpa. 172800 IN A 203.119.86.101 > f.in-addr-servers.arpa. 172800 IN A 193.0.9.1 > a.in-addr-servers.arpa. 172800 IN AAAA 2620:37:e000::53 > b.in-addr-servers.arpa. 172800 IN AAAA 2001:500:87::87 > c.in-addr-servers.arpa. 172800 IN AAAA 2001:43f8:110::10 > d.in-addr-servers.arpa. 172800 IN AAAA 2001:13c7:7010::53 > e.in-addr-servers.arpa. 172800 IN AAAA 2001:dd8:6::101 > f.in-addr-servers.arpa. 172800 IN AAAA 2001:67c:e0::1 > > ;; Query time: 13 msec > ;; SERVER: 192.58.128.30#53(192.58.128.30) > ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021 > ;; MSG SIZE rcvd: 425 > > ;; Sending: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36225 > ;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995 > ;; QUESTION SECTION: > ;1.1.1.1.in-addr.arpa. IN A > > ;; QUERY SIZE: 77 > > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36225 > ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 1232 > ; COOKIE: 5bf7fc1153027792010000006176356bc163b45143c14bd2 (good) > ;; QUESTION SECTION: > ;1.1.1.1.in-addr.arpa. IN A > > ;; AUTHORITY SECTION: > 1.in-addr.arpa. 86400 IN NS ns2.apnic.net. > 1.in-addr.arpa. 86400 IN NS rirns.arin.net. > 1.in-addr.arpa. 86400 IN NS ns3.lacnic.net. > 1.in-addr.arpa. 86400 IN NS apnic.authdns.ripe.net. > 1.in-addr.arpa. 86400 IN NS apnic1.dnsnode.net. > > ;; Query time: 26 msec > ;; SERVER: 203.119.86.101#53(203.119.86.101) > ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021 > ;; MSG SIZE rcvd: 242 > > ;; Sending: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35677 > ;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ; COOKIE: 5bf7fc1153027792010000006176356bc163b45143c14bd2 > ;; QUESTION SECTION: > ;1.1.1.1.in-addr.arpa. IN A > > ;; QUERY SIZE: 77 > > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35677 > ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 1232 > ; COOKIE: 5bf7fc1153027792010000006176356bd1232de50c54ecaa (good) > ;; QUESTION SECTION: > ;1.1.1.1.in-addr.arpa. IN A > > ;; AUTHORITY SECTION: > 1.1.1.in-addr.arpa. 86400 IN NS ns3.cloudflare.com. > 1.1.1.in-addr.arpa. 86400 IN NS ns7.cloudflare.com. > > ;; Query time: 235 msec > ;; SERVER: 199.253.249.53#53(199.253.249.53) > ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021 > ;; MSG SIZE rcvd: 127 > > ;; Sending: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6266 > ;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ; COOKIE: 5bf7fc1153027792010000006176356bd1232de50c54ecaa > ;; QUESTION SECTION: > ;1.1.1.1.in-addr.arpa. IN A > > ;; QUERY SIZE: 77 > > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6266 > ;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 1232 > ;; QUESTION SECTION: > ;1.1.1.1.in-addr.arpa. IN A > > ;; AUTHORITY SECTION: > 1.1.1.in-addr.arpa. 3600 IN SOA alec.ns.cloudflare.com. > dns.cloudflare.com. 2036583626 10000 2400 604800 3600 > > ;; Query time: 297 msec > ;; SERVER: 2400:cb00:2049:1::a29f:7e2#53(2400:cb00:2049:1::a29f:7e2) > ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021 > ;; MSG SIZE rcvd: 111 > > % > > > On 25 Oct 2021, at 13:52, Champion Xie <xiejiel...@gmail.com> wrote: > > > > dig version 9.14.8 > > > > Using the following command can not achieve the desired effect, dnssec > information will still be output > > dig 1.1.1.1.in-addr.arpa +trace +nodnssec > > > > Normally, the parameters should not be in sequence > > > > > > -- > > Best Regards!! > > champion_xie > > _______________________________________________ > > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > > > > bind-users mailing list > > bind-users@lists.isc.org > > https://lists.isc.org/mailman/listinfo/bind-users > > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org > > -- Best Regards!! champion_xie
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
