Niall O'Reilly <niall.orei...@ucd.ie> wrote: > > I think that a clearer expression of the first case might be > > any server that can act as both an authoritative server and a recursive > resolver MUST NOT answer queries that are defined in this protocol > whenever it is acting as an authoritative server. > > If this still seems to leave a contradiction, it may be worthwhile to > view the distinction as a property of the transaction, rather than of > the "portion of the server". The server, if it receives a query for > which it determines that an authoritative answer is appropriate, must > not answer as if it were a recursive resolver.
The conditions for special recursive-only answers are queries with RD=1 that get responses with RA=1. (You might be able to allow queries with RD=0 but I don't know if iterative clients that happen to be allowed RA=1 are likely to be confused by these answers.) Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ partnership and community in all areas of life _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop