On 2012-04-04 5:05 PM, Tony Finch wrote:
> Joe Abley <joe.ab...@icann.org> wrote:
>> On 2012-04-04, at 11:31, Tony Finch wrote:
>>
>>> I think BIND treats NXDOMAIN replies with the wrong authority as a
>>> FORMERR. Domainers are returning positive replies which BIND does not
>>> subject to a SOA sanity check.
>> [real test]
>> All other nameservers gave a prompt NXDOMAIN.
> Thanks for checking that. I obviously mis-remembered the exact way in
> which BIND is pedantic. Sorry.

bind has a lot of non-pedantic behaviour available as options, but
rarely as the default. if it's important to be able to pass through an
incoherent nxdomain then please say why?

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to