Re: Bind/Named 9.9 auth-nxdomain question

2017-11-13 Thread Filipe Cifali
On 11/10/2017 07:05 PM, Mark Andrews wrote: On 11 Nov 2017, at 3:38 am, Tony Finch wrote: Filipe Cifali wrote: I'm trying to have an Auth Server that says the auth flags ('aa') even on NXDOMAIN. BIND (well, all DNS servers) have to do that. It doesn't need to be confi

Re: Bind/Named 9.9 auth-nxdomain question

2017-11-10 Thread Filipe Cifali
On 11/10/2017 10:05 AM, Tony Finch wrote: Filipe Cifali wrote: I need to make an authoritative server that gives 'AA' flags to every query, I would need to set only auth-nxdomain right? Don't use auth-nxdomain, it has been obsolete for 15 years. Ok, I understand that j

Bind/Named 9.9 auth-nxdomain question

2017-11-09 Thread Filipe Cifali
cs doesn't say auth-nxdomain is not available to auth servers and I know it's a bad idea, but it's a bad idea that can be achieved by DLZ drivers via queries and the config should behave in a similar way (or the doc should be a bit more clear about who can use and how it works). -- ...