Re: BIND started replying to queries for .com with .COM

2016-04-01 Thread Phil Mayers
On 01/04/16 11:52, Niall O'Reilly wrote: If you are going to pick a single authority for a particular label, it should be the zone that determines whether that label exists or not. That seems no less arbitrary a rule of thumb than one which would give priority to the zone which contains

Re: BIND started replying to queries for .com with .COM

2016-04-01 Thread Niall O'Reilly
On 1 Apr 2016, at 11:08, Tony Finch wrote: > Robert Edmonds wrote: >> Tony Finch wrote: >>> Phil Mayers wrote: What is considered the source of the ownername for, say, "com."? >>> >>> It should be the root zone master file. >> >> Why not the com zone master file? > > If you are going

Re: BIND started replying to queries for .com with .COM

2016-04-01 Thread Tony Finch
Robert Edmonds wrote: > Tony Finch wrote: > > Phil Mayers wrote: > > > > > > What is considered the source of the ownername for, say, "com."? > > > > It should be the root zone master file. > > Why not the com zone master file? If you are going to pick a single authority for a particular label,

Re: BIND started replying to queries for .com with .COM

2016-03-31 Thread Daniel Stirnimann
gt; To: Mike Bernhardt > Cc: bind-us...@isc.org > Subject: Re: BIND started replying to queries for .com with .COM > > > Your monitoring probe is broken. > > STD 13 says that that the DNS is case preserving. The problem is that lots > of servers aren't case p

Re: BIND started replying to queries for .com with .COM

2016-03-31 Thread Robert Edmonds
Tony Finch wrote: > Phil Mayers wrote: > > > > What is considered the source of the ownername for, say, "com."? > > It should be the root zone master file. Why not the com zone master file? -- Robert Edmonds ___ Please visit https://lists.isc.org/mai

RE: BIND started replying to queries for .com with .COM

2016-03-30 Thread Mike Bernhardt
ailto:ma...@isc.org] Sent: Tuesday, March 29, 2016 5:19 PM To: Mike Bernhardt Cc: bind-us...@isc.org Subject: Re: BIND started replying to queries for .com with .COM Your monitoring probe is broken. STD 13 says that that the DNS is case preserving. The problem is that lots of servers aren't ca

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Phil Mayers
On 30/03/2016 13:15, Tony Finch wrote: Phil Mayers wrote: On 30/03/16 10:50, Tony Finch wrote: Yes, we encountered that problem recently :-) You can revert to the old behaviour using no-case-compress { any; }; +1 super confusing when we first ran into it (Exim dnslookup.c, by any c

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Phil Mayers
On 30/03/2016 13:32, Mark Andrews wrote: That said anything matching ownernames should be doing this case insensitively. Absolutely. In our case it was something a little more subtle - the app (Exim) was actually looking for case-changed replies and altering its input to match, which under c

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Phil Mayers
On 30/03/2016 13:23, Tony Finch wrote: Phil Mayers wrote: What is considered the source of the ownername for, say, "com."? It should be the root zone master file. Doh, of course - brainfade, it should be the root. I am mildly surprised that the root and TLD/2LD servers aren't doing the r

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Mark Andrews
In message <56fbbe83.6080...@imperial.ac.uk>, Phil Mayers writes: > On 30/03/2016 12:25, Mark Andrews wrote: > > > The recent change was to record and return the learnt case of > > ownernames (to the RRset level) rather than use whatever was used > > to build the red-black tree names. > > What i

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Tony Finch
Phil Mayers wrote: > > What is considered the source of the ownername for, say, "com."? It should be the root zone master file. However authoritative server implementations differ in whether they echo the query case or preserve the master case. e.g. a.root-servers.net (running Verisign ATLAS) ec

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Tony Finch
Phil Mayers wrote: > On 30/03/16 10:50, Tony Finch wrote: > > > > Yes, we encountered that problem recently :-) You can revert to the old > > behaviour using > > > > no-case-compress { any; }; > > +1 super confusing when we first ran into it (Exim dnslookup.c, by any > chance? ;o) Actually N

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Phil Mayers
On 30/03/2016 12:25, Mark Andrews wrote: The recent change was to record and return the learnt case of ownernames (to the RRset level) rather than use whatever was used to build the red-black tree names. What is considered the source of the ownername for, say, "com."? One thing I saw when I w

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Mark Andrews
In message <56fbb385.5070...@imperial.ac.uk>, Phil Mayers writes: > On 30/03/16 01:19, Mark Andrews wrote: > > > > Your monitoring probe is broken. > > > > STD 13 says that that the DNS is case preserving. The problem is > > that lots of servers aren't case preserving instead they echo back > > t

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Phil Mayers
On 30/03/16 01:19, Mark Andrews wrote: Your monitoring probe is broken. STD 13 says that that the DNS is case preserving. The problem is that lots of servers aren't case preserving instead they echo back the query case in the owner names of records returned which named then records. Can I be

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Phil Mayers
On 30/03/16 10:50, Tony Finch wrote: Yes, we encountered that problem recently :-) You can revert to the old behaviour using no-case-compress { any; }; +1 super confusing when we first ran into it (Exim dnslookup.c, by any chance? ;o) In detail, since I spent ages figuring this ou

Re: BIND started replying to queries for .com with .COM

2016-03-30 Thread Tony Finch
Mike Bernhardt wrote: > I rebooted one of our BIND VMs this morning. It's running BIND 9.10.3-P3. We > noticed that queries for domains with domain.com were answered with > domain.COM with the .COM in capital letters. Other high-levels like .org > were not changed. It caused a monitoring probe to

Re: BIND started replying to queries for .com with .COM

2016-03-29 Thread Mark Andrews
Your monitoring probe is broken. STD 13 says that that the DNS is case preserving. The problem is that lots of servers aren't case preserving instead they echo back the query case in the owner names of records returned which named then records. In message <030101d18a06$fa21c8d0$ee655a70$@bart.g