[Unbound-users] Parent Child Disagreement Redux

[Hauke Lampe]

On 07/20/2010 10:14 PM, Robert Edmonds wrote:

> what am i missing?  the only problem i see is that the nameservers for
> www.us.hsbc.com (broken loadbalancers?) don't respond to qtype=NS and
> some other qtypes, e.g. MX and TXT.  but they do send NOERROR for
> qtype=AAAA.

Not responding to NS records would be bad enough. To make it worse, the
nameservers only respond to all-lowercase queries.

$ dig +short www.us.hsbc.com @161.113.3.248
161.113.4.6

$ dig +short wwW.Us.hsBc.cOm @161.113.3.248
;; connection timed out; no servers could be reached

That breaks 0x20 randomization ("use-caps-for-id: yes").


Hauke.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20100720/552d9185/attachment.bin>