<div dir="ltr"><div class="gmail_default" style="font-family:monospace,monospace">Hi Brian,</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">I wrote that because I'm experiencing this issue right now.</div><div class="gmail_default" style="font-family:monospace,monospace">I think I understood what's going on: only subdomain zones were created but not tld.</div><div class="gmail_default" style="font-family:monospace,monospace">For instance:</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">- good.beer does not exists</div><div class="gmail_default" style="font-family:monospace,monospace">- foo.good.beer exists</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 30 Apr 2020 at 17:10, Brian Candler <<a href="mailto:b.candler@pobox.com">b.candler@pobox.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 30/04/2020 15:55, Giovanni Vecchi via Pdns-users wrote:<br>
> auth is 4.3.0 and it reply with REFUSED for unknown zones because of <br>
> that: <a href="https://blog.powerdns.com/2015/03/02/from-noerror-to-refused/" rel="noreferrer" target="_blank">https://blog.powerdns.com/2015/03/02/from-noerror-to-refused/</a><br>
<br>
Have you tested it?  An unknown zone is not the same as a subdomain of a <br>
configured zone.<br>
<br>
Think of it this way:<br>
<br>
www.good.beer   => return A record 192.0.2.1<br>
<br>
foo.good.beer   => return NXDOMAIN (of course)<br>
<br>
bar.foo.good.beer  => it's the same thing; return NXDOMAIN<br>
<br>
I've just confirmed this with pdns-server 4.3.0<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><pre style="font-family:"Courier New",Courier,monospace,arial,sans-serif;margin-top:0px;margin-bottom:0px;white-space:pre-wrap;color:rgb(0,0,0);font-size:14px"><table border="0" cellspacing="0" cellpadding="0" style="font-family:"Times New Roman";width:420px"><tbody><tr valign="top"><td><table border="0" cellspacing="0" cellpadding="0"><tbody><tr valign="top"><td style="text-align:initial;vertical-align:top;padding:0px 8px"><a href="http://www.certego.net/" target="_blank"><img width="96" height="96" src="http://www.certego.net/email/certego.png" alt="" style="border-radius: 0px;"></a></td><td style="text-align:initial;vertical-align:top;padding:4px 0px"><div style="padding-top:2px;color:rgb(0,172,237);font-weight:bold;font-stretch:normal;font-size:18px;line-height:normal;font-family:sans-serif;letter-spacing:1px">Giovanni Vecchi</div><div style="padding-top:2px;color:rgb(32,32,32);font-weight:bold;font-stretch:normal;line-height:normal;font-family:sans-serif">Infrastructure Lead Engineer, Certego</div><div style="padding-top:4px"><a href="tel:+39-059-7353333" style="color:rgb(84,84,84);font-stretch:normal;font-size:12px;line-height:normal;font-family:sans-serif" target="_blank">+39-059-7353333</a><span style="color:rgb(0,172,237);font-stretch:normal;font-size:12px;line-height:normal;font-family:sans-serif"></span></div><div style="padding-top:6px"><a href="http://www.linkedin.com/company/certego" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/linkedin.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://twitter.com/Certego_IRT" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/twitter.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://github.com/certego" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/github.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://www.youtube.com/CERTEGOsrl" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/youtube.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://plus.google.com/117641917176532015312" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/googleplus.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a></div></td></tr></tbody></table></td></tr></tbody></table><div style="font-stretch:normal;font-size:8px;line-height:normal;font-family:sans-serif;white-space:normal;width:420px;text-align:justify;vertical-align:top;padding:8px 0px;color:rgb(224,224,224)">Use of the information within this document constitutes acceptance for use in an "as is" condition. There are no warranties with regard to this information; Certego has verified the data as thoroughly as possible. Any use of this information lies within the user's responsibility. In no event shall Certego be liable for any consequences or damages, including direct, indirect, incidental, consequential, loss of business profits or special damages, arising out of or in connection with the use or spread of this information.</div></pre></div></div></div></div>