Con Wieland <[email protected]> wrote:
> I have a nameserver that can not resolve extranet.aro.army.mil.
The end of the CNAME chain is e1008.d.akamaiedge.akamai.csd.disa.mil. The
authoritative servers for this name really like to drop queries if they
don't like the qtype. This is very bad, because it makes it easy to upset
resolvers.
My server can usually resolve this name OK, but I can kick it into
SERVFAIL mode with:
d=e1008.d.akamaiedge.akamai.csd.disa.mil.;
while [ -n "$d" ];
do dig $d in ns $d in ds $d in dnskey;
d=$(echo $d | sed 's/^[^.]*[.]//');
done
serve-stale helps my resolver recover from being kicked like this.
Tony.
--
f.anthony.n.finch <[email protected]> http://dotat.at/
Irish Sea: Variable 3 or 4. Smooth or slight. Thundery showers, fog patches.
Moderate or good, occasionally very poor.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users
