Niall O'Reilly <niall.orei...@ucd.ie> wrote:
>
> I think that a clearer expression of the first case might be
>
>   any server that can act as both an authoritative server and a recursive
>   resolver MUST NOT answer queries that are defined in this protocol
>   whenever it is acting as an authoritative server.
>
> If this still seems to leave a contradiction, it may be worthwhile to
> view the distinction as a property of the transaction, rather than of
> the "portion of the server".  The server, if it receives a query for
> which it determines that an authoritative answer is appropriate, must
> not answer as if it were a recursive resolver.

The conditions for special recursive-only answers are queries with RD=1
that get responses with RA=1. (You might be able to allow queries with
RD=0 but I don't know if iterative clients that happen to be allowed RA=1
are likely to be confused by these answers.)

Tony.
-- 
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/
partnership and community in all areas of life

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to