<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="">Hi there!</div><div class=""><br class=""></div><a href="https://doc.powerdns.com/recursor/settings.html#forward-zones" class="">https://doc.powerdns.com/recursor/settings.html#forward-zones</a> states:<div class=""><br class=""></div><div class=""><blockquote type="cite" class="">Forwarded queries have the ‘recursion desired’ bit set to 0, meaning that this setting is intended to forward queries to authoritative servers.</blockquote><br class=""></div><div class="">If I set it up this way, all the responses coming back to the recursor are having their AA bits stripped (set to 0) (presumably by this <a href="https://github.com/PowerDNS/pdns/blob/master/pdns/pdns_recursor.cc#L814" class="">code</a> when forwarded back to the client. Is this intentional? Would it make sense to leave the AA bit alone when forwarding back authoritative responses? If not, why not?</div><div class=""><br class=""></div><div class="">-Julian Mehnle</div><div class=""><br class=""></div></div></body></html>