nsd users - Aug 2008 - nsd does not fallback to axfr when ixfr doesn't work

Moin!

I've tested this on Linux with NSD 3.1.1. In that setup NSD is acting  
as a slave to an ANS server. And normally IXFR works fine, but in  
cases where ANS doesn't want to do an IXFR (e.g after a zone resign)  
it answers with an SERVFAIL. I am not sure what the RFC says, but I  
would expect NSD to fall back to axfr, but it does not do this and you  
have to remove the file to start an axfr manually.

Can you please fix this, as otherwise NSD requires constant monitoring.

TIA and so long
-Ralf
---
Ralf Weber
e: nsd-users at fl1ger.de

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ralf Weber wrote:
> I've tested this on Linux with NSD 3.1.1. In that setup NSD is acting
as
> a slave to an ANS server. And normally IXFR works fine, but in cases
> where ANS doesn't want to do an IXFR (e.g after a zone resign) it
> answers with an SERVFAIL. I am not sure what the RFC says, but I would
> expect NSD to fall back to axfr, but it does not do this and you have to
> remove the file to start an axfr manually.
According to the IXFR spec, it is allowed to return the full AXFR reply
in return to the IXFR query.  So, the RFC says that the ANS server could
have replied instead of servfail...

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAki1eIkACgkQkDLqNwOhpPgnQwCffCCMpcIuKcv9U8ZpPzw2tit8
yAEAnAhIqTKFFhBqLU27mjT0UCPPmf6x
=mnx+
-----END PGP SIGNATURE-----

Moin!

On Aug 27, 2008, at 17:53 , W.C.A. Wijngaards wrote:
> According to the IXFR spec, it is allowed to return the full AXFR  
> reply
> in return to the IXFR query.  So, the RFC says that the ANS server  
> could
> have replied instead of servfail...
Ok will open a ticket with Nominum and see what they say.

So long
-Ralf
---
Ralf Weber
e: nsd-users at fl1ger.de