Paul Vixie <p...@redbarn.org> wrote: > Ray Bellis wrote: > > > > Won't that cause the resolver to cycle through every root server letter > > hoping for one that doesn't give that answer? > > yes. that's what REFUSED is taken to mean, and also, why we never use it for > data-dependent conditions. only the initiator's identity matters in the > consideration of whether to transmit REFUSED or not.
That's not entirely true - if you are asking an authoritative-only server then you get REFUSED or not depending on whether the QNAME is in an authoritative zone. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ - I xn--zr8h punycode Malin, Hebrides: North 7 to severe gale 9, decreasing 5 or 6 later. High becoming rough or very rough. Wintry showers. Mainly good. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop