[Pdns-users] pdns_recursors trusts addtional section where it better shouldn't

[Brian Candler]

On 17/02/2017 13:29, Thomas Mieslinger wrote:
> dig asie4all.com. @192.43.172.30
>
> ; <<>> DiG 9.10.4-P5 <<>> asie4all.com. @192.43.172.30
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4893
> ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;asie4all.com.            IN    A
>
> ;; AUTHORITY SECTION:
> asie4all.com.        172800    IN    NS    mx1.ovh.net.
> asie4all.com.        172800    IN    NS    mx2.ovh.net.
>
> ;; ADDITIONAL SECTION:
> mx1.ovh.net.        172800    IN    A    213.186.33.29
> mx2.ovh.net.        172800    IN    A    213.186.33.45 


That's not what I see from here. Maybe this domain just got fed up and 
moved away from using OVH.

$ dig asie4all.com. @192.43.172.30

; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> asie4all.com. @192.43.172.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53672
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 2
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;asie4all.com.            IN    A

;; AUTHORITY SECTION:
asie4all.com.        172800    IN    NS    ns-fr.1and1-dns.fr.
asie4all.com.        172800    IN    NS    ns-fr.1and1-dns.biz.
asie4all.com.        172800    IN    NS    ns-fr.1and1-dns.com.
asie4all.com.        172800    IN    NS    ns-fr.1and1-dns.org.

;; ADDITIONAL SECTION:
ns-fr.1and1-dns.com.    172800    IN    AAAA 2001:8d8:fe:53:0:d9a0:5204:100
ns-fr.1and1-dns.com.    172800    IN    A    217.160.82.4

;; Query time: 13 msec
;; SERVER: 192.43.172.30#53(192.43.172.30)
;; WHEN: Fri Feb 17 16:14:46 2017
;; MSG SIZE  rcvd: 202