On 2012-04-04 5:05 PM, Tony Finch wrote: > Joe Abley <joe.ab...@icann.org> wrote: >> On 2012-04-04, at 11:31, Tony Finch wrote: >> >>> I think BIND treats NXDOMAIN replies with the wrong authority as a >>> FORMERR. Domainers are returning positive replies which BIND does not >>> subject to a SOA sanity check. >> [real test] >> All other nameservers gave a prompt NXDOMAIN. > Thanks for checking that. I obviously mis-remembered the exact way in > which BIND is pedantic. Sorry.
bind has a lot of non-pedantic behaviour available as options, but rarely as the default. if it's important to be able to pass through an incoherent nxdomain then please say why? _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop