<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
Ahoy there,</div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
I've been messing around with Unbound v1.18.0 and DDR by setting up some <i>local-data
</i>for <i>_dns.resolver.arpa. </i>and it seems to work fine, except for the additional data section that doesn't come with it as per <span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">draft-ietf-add-ddr-10 document:</span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;"><br>
</span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">"</span><span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">When responding to these special queries for "resolver.arpa",
the </span><span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">recursive resolver SHOULD include the A and AAAA records for the name
</span><span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">of the Designated Resolver in the Additional Answers section."</span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;"><br>
</span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;"><br>
</span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="white-space-collapse: preserve"></span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="white-space-collapse: preserve">Is there a way to include the additional section when using a local zone?
</span><span style="font-family: Calibri, sans-serif; font-size: 11pt;">I am half sure this is bugging Windows 11's DoH settings since it works when I set DoH to manual mode without unencrypted fallback.</span></div>
</span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;"></span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;"><br>
</span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">Would also like to point out that using a local zone, the server responds to other queries to the domain
<i>resolver.arpa</i> with <b>NXDOMAIN </b>instead of the expected <b>NODATA, </b>
per item 6.4 of the internet draft:</span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;"><br>
</span></div>
<div style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); background-color: transparent;">
<span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">"</span><span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">DNS resolvers that support DDR by responding to queries
for </span><span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">_dns.resolver.arpa MUST treat resolver.arpa as a locally served zone
</span><span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">per [RFC6303]. In practice, this means that resolvers SHOULD respond
</span><span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">to queries of any type other than SVCB for _dns.resolver.arpa with
</span><span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">NODATA and queries of any type for any domain name under
</span><span style="white-space-collapse: preserve; font-family: Calibri, sans-serif; font-size: 11pt;">resolver.arpa with NODATA."</span></div>
</body>
</html>