[Pdns-users] Inconsistent wildcard behaviour with and without DNSSEC
peter at desec.io
Fri Sep 9 02:00:56 UTC 2016
I noticed the following inconsistency in the authoritative server, and I
would like to know if it is intended. (I was not unable to figure this
out by looking up the RFCs.)
Let's say we have
*.example.com. IN A 220.127.116.11
a.example.com. IN A 18.104.22.168
Then, without DNSSEC enabled, asking for the A record of b.a.example.com
gives 22.214.171.124. However, with DNSSEC enable, the result is NXDOMAIN.
So, there is a difference in how a wildcard record impacts higher-level
subdomains of a domain which is configured explicitly on the same level
as the wildcard record.
Is this behavior intended?
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the Pdns-users