I was wondering why NSD returns SERVFAIL for recursive queries, normally it is REFUSED ? NSD: ;; ->>HEADER<<- opcode: QUERY, status: *SERVFAIL*, id: 39603 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; WARNING: recursion requested but not available BIND: ;; ->>HEADER<<- opcode: QUERY, status: *REFUSED*, id: 4023 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; WARNING: recursion requested but not available Is it configurable ? At least I could not find any options. Thanks, Arun -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20110717/f7cf7cad/attachment.htm>
Stephane Bortzmeyer
2011-Jul-19 07:12 UTC
[nsd-users] NSD returns SERVFAIL instead of REFUSED
On Sun, Jul 17, 2011 at 10:34:56AM +0300, Arun N S <ns.arunns at gmail.com> wrote a message of 55 lines which said:> I was wondering why NSD returns SERVFAIL for recursive queries, > normally it is REFUSED ?AFAIK, no RFC explicitely says what a name server should return when it does not accept out-of-zone queries.