[Unbound-users] Problems with dipmap.com

[Hauke Lampe]

On 19.09.2011 15:51, W.C.A. Wijngaards wrote:

> I do not understand how they continue to query LAME servers.

Doesn't look lame to me. It answers queries for tirparkolo.dipmap.com as
well as for ns/ns1/ns2.dipmap.com. Only the NS record is wrong.

My Unbound resolver (current svn) keeps returing the correct answer.

> If it would not
> give Lame answers, then it would work with unbound (and the parent-child
> disagreement would not be an issue).

Shouldn't it fail with "harden-referral-path" set? Or is it enough if
the child servers sends answers for the nameserver names from the parent
zone even if the NS records differ?

Here's a query trace from unbound-host w/ harden-referral-path:
http://pastebin.com/VU3tuN3J


Hauke.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20110919/d33fbc19/attachment.bin>