[Pdns-users] unwanted SERVFAIL with bind backend

[Matthias Leopold]

Am 2013-06-28 09:39, schrieb Peter van Dijk:
> Hello Pawel,
>
> On Jun 28, 2013, at 9:05 , Pawel Panek wrote:
>
>>> 3.2 will reply with 'NOERROR' for any non-existing domain, and I am not aware
>>> how to change this, spare altering the code. sending REFUSED is ok, but
>>> replying with NXDOMAIN is basically claiming that "yeah, i am sure this does
>>> not exists anywhere".
>>
>> I was wondering why authoritative pdns is answering to non-existing
>> domains with NOERROR status while other dns servers I know (bind.
>> mydns) and many other I checked on the net always respond with
>> SERVFAIL or REFUSED. I thought I have a bug in my backend but
>> according to above this is correct answer for such domains.
>
> We do this because we believe it provides optimal interoperability.
>
>> Following OP question: isn't this answer causing troubles for domain registrars?
>
>
> We have had zero reports about our empty no-aa NOERROR causing domain registrar trouble, before this thread.
>
> If nic.at really chokes on the NOERROR, this is a recent change, and we would like to hear more about it.
>
> Kind regards,
>

hi,

these are the requirements for the process of a zone deletion by nic.at

https://www.nic.at/ui/index.php/zonedel/pagezonedelintro/?lang=en-iso-8859-15

they only talk about REFUSED and NXDOMAIN. in the past i experienced 
that SERVFAIL indeed doesn't pass their check, so my intended 
administrative zone deletion requests at nic.at didn't succed. when i 
asked about NOERROR (which i could produce using "send-root-referral") 
they pointed me to the above

matthias



-- 
Mit freundlichen Grüssen

Matthias Leopold
System & Network Administration

Streams Telecommunicationsservices GmbH
Universitaetsstrasse 10/7, 1090 Vienna, Austria

tel: +43 1 40159113
fax: +43 1 40159300
------------------------------------------------