Hi Niall,
Assumption:
Possibly a wrong configured dnsdist [1] cache [2] in front of the
authoritative name server. If you miss the "dontAge" switch, that's
exactly the effect you'll have.
Winfried
[1] https://dnsdist.org/
[2]
https://dnsdist.org/reference/config.html?highlight=dontAge#newPacketCache
Am 07.01.2020 um 13:20 schrieb Niall O'Reilly:
Hi.
I've had my attention drawn to some surprising behaviour by
certain authoritative name servers. I'm not sure how best
to categorize this behaviour, and wonder how some of you
might view it.
What's surprising is that an authoritative name server
shows both a decremented TTL value (as if it were answering
from cache) and the AA flag.
I'm not sure which of the following labels is the best fit
for this behaviour:
* normal and expected (but so far outside my experience),
* strange but harmless,
* downright wrong.
Thanks in advance to whomever is minded to reply.
Thanks especially to Mats Dufberg who, diligently
investigating what I had mistakenly guessed was a problem
in zonemaster, took time to identify, and make me aware of,
what was causing occasional trouble reports.
Niall
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations