Re: Bind/Named 9.9 auth-nxdomain question

2017-11-13 Thread Filipe Cifali
On 11/10/2017 07:05 PM, Mark Andrews wrote: On 11 Nov 2017, at 3:38 am, Tony Finch wrote: Filipe Cifali wrote: I'm trying to have an Auth Server that says the auth flags ('aa') even on NXDOMAIN. BIND (well, all DNS servers) have to do that. It doesn't need to be configured. See the first exa

Re: Bind/Named 9.9 auth-nxdomain question

2017-11-10 Thread Mark Andrews
> On 11 Nov 2017, at 3:38 am, Tony Finch wrote: > > Filipe Cifali wrote: >> >> I'm trying to have an Auth Server that says the auth flags ('aa') even on >> NXDOMAIN. > > BIND (well, all DNS servers) have to do that. It doesn't need to be > configured. See the first example dig output below. >

Re: Bind/Named 9.9 auth-nxdomain question

2017-11-10 Thread Tony Finch
Filipe Cifali wrote: > > I'm trying to have an Auth Server that says the auth flags ('aa') even on > NXDOMAIN. BIND (well, all DNS servers) have to do that. It doesn't need to be configured. See the first example dig output below. However the example query in your first message did not seem to m

Re: Bind/Named 9.9 auth-nxdomain question

2017-11-10 Thread Filipe Cifali
On 11/10/2017 10:05 AM, Tony Finch wrote: Filipe Cifali wrote: I need to make an authoritative server that gives 'AA' flags to every query, I would need to set only auth-nxdomain right? Don't use auth-nxdomain, it has been obsolete for 15 years. Ok, I understand that just seems a bit strange

Re: Bind/Named 9.9 auth-nxdomain question

2017-11-10 Thread Tony Finch
Filipe Cifali wrote: > > I need to make an authoritative server that gives 'AA' flags to every query, I > would need to set only auth-nxdomain right? Don't use auth-nxdomain, it has been obsolete for 15 years. > I'm running this config: That looks like a recursive server configuration to me - t

Bind/Named 9.9 auth-nxdomain question

2017-11-09 Thread Filipe Cifali
Hello, I'm have a question: IF(Ignoring RFC 1035 #do not shoot the messenger) I need to make an authoritative server that gives 'AA' flags to every query, I would need to set only auth-nxdomain right? I'm running this config: # --