[Pdns-users] CNAME to other nameserver, what should a recursor do?

Mon Dec 12 16:23:50 UTC 2011

Hello Niek,

On Dec 12, 2011, at 13:17 , niek-pdns at internl.net wrote:

> I'm having problems reaching webmail.deictvereniging.nl when using
> pdns-recursor 3.3-1 and 3.3.1

There is a misconfiguration at Neostrada:

$ dig +norecurse  a webmail.deictvereniging.nl  @sandra.neostrada.nl
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54049

;; ANSWER SECTION:
webmail.deictvereniging.nl. 3600 IN	CNAME	webmail.prioserve.net.

;; AUTHORITY SECTION:
.			3600	IN	SOA	sandra.neostrada.nl. hostmaster.neostrada.nl. 2007022100 10800 3600 604800 3600

It claims NXDOMAIN while it has no say about prioserve.net. It even provides a SOA to go with this.

PowerDNS (erroneously, I must admit) accepts this information and caches an NXDOMAIN for webmail.deictvereniging.nl. This has been fixed after 3.4-pre - the patch is at http://wiki.powerdns.com/trac/changeset/2188. PowerDNS 3.4, when it is released, will have no trouble resolving these names.

Kind regards,
Peter van Dijk