[Pdns-users] Behavior when asking for out-of-zone queries

[Peter van Dijk]

Hi Marc,

On Nov 15, 2011, at 14:18 , Marc Haber wrote:

> I have investigated the issue further, with the kind help of Peter. In
> a lab setting, all tested versions of the authoritative pdns server
> (2.9.22, 2.9.22.x.3 and 3.1-pre pulled from svn) behave correctly when
> faced with a non-RD query and return an authoritative NOERROR with the
> naked CNAME.
> 
> However, in the productive setup, the authoritative PowerDNS 2.9.22
> returns a non-authoritative SERVFAIL even when faced with a non-RD
> query, but strangely only when the query was issued by a recursor. dig
> +norecurse gets an authoritative NOERROR. I have compared the queries
> in the wireshark-parsed form and did not see a difference.
> 
> This is confusing. Any explanations?

Could you post pcaps of request+reply of both the SERVFAIL and NOERROR rd=0 cases?

Kind regards,
Peter van Dijk