<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 30/04/2020 14:47, Giovanni Vecchi
via Pdns-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CADkrqGC4soFxw0uNGdKcaMU5hwwW2jE-xGkuPbXQa7c=YV0BMg@mail.gmail.com">
<div class="gmail_default" style="font-family:monospace,monospace">is
there a way to force pdns recursor to reply with NXDOMAIN
instead of SERVFAIL in case of REFUSED replies by auth?<br>
</div>
<div class="gmail_default" style="font-family:monospace,monospace"><br>
</div>
<div class="gmail_default" style="font-family:monospace,monospace">The
scenario is the following:</div>
<div class="gmail_default" style="font-family:monospace,monospace"><br>
</div>
<div class="gmail_default" style="font-family:monospace,monospace">-
auth zones: good.beer and its subdomains</div>
<div class="gmail_default" style="font-family:monospace,monospace">-
rec forward every *.good.beer query to auth</div>
<div class="gmail_default" style="font-family:monospace,monospace"><br>
</div>
<div class="gmail_default" style="font-family:monospace,monospace">In
case clients ask for a non existent good.beer subdomain, auth
will reply with REFUSED to rec and rec will reply with SERVFAIL
to client.</div>
</blockquote>
<p>What are you running for the auth server?</p>
<p>If the auth server is authoritative for good.beer, why isn't it
responding with NXDOMAIN for a non-existent subdomain?<br>
</p>
</body>
</html>