[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [zonecheck-tests] Weirdness in Zonecheck 3.0.2
|
From: |
Stephane Bortzmeyer |
|
Subject: |
Re: [zonecheck-tests] Weirdness in Zonecheck 3.0.2 |
|
Date: |
Mon, 12 Jul 2010 09:47:38 +0200 |
|
User-agent: |
Mutt/1.5.18 (2008-05-17) |
On Mon, Jul 05, 2010 at 10:36:24PM -0500,
Stan Barber <address@hidden> wrote
a message of 71 lines which said:
> root-servers list present
> [TEST root-servers list present]: answer refused from server: (NS )
>
> DNS-OARC suggests in
> https://www.dns-oarc.net/oarc/articles/upward-referrals-considered-harmful
> that REFUSED is a reasonable response.
The algorithm followed by Zonecheck is "if the server claims to be
recursive, it should be recursive". If it is not, this test is not
performed. In most cases, the proper solution is to disable
recursion. Otherwise, if it is not possible, yes, indeed, the recent
developments following the ISPRIME attack creates a problem.