On Fri, 6 Nov 2009, Davide Libenzi wrote:

> On Fri, 6 Nov 2009, Bart Mortelmans wrote:
> 
> > This actually is a situation we see rather often: a domain name having one 
> > or
> > more lame nameservers like this one (not responding, or responding with an
> > authority section refering to the TLD root-servers) but actually still 
> > working
> > (more or less) because at least one nameserver isn't lame.
> > 
> > The response of sdns1.ovh.net for secca-expertise.com doesn't have the
> > authoritative flag set. That's most probably the part that triggers other 
> > DNS
> > software to look further, on to the next nameserver. I will however warn 
> > that,
> > some other nameservers might return valid information which you would prefer
> > to take into account, withou setting the authoritative flag. So just 
> > skipping
> > any NS that doesn't set that flag would be a bad idea.
> > 
> > Maybe skipping those that neither have an answer section (this one only
> > returned an authority sections, which many nameservers do if you ask them
> > something they know nothing about), nor have the authoritative flag set, 
> > could
> > be a hint to move on to the next one?
> 
> This should be fixed now. I'll make another 1.27 pre-release this weekend ...

Actually, after some consideration, I decided NOT to fix that problem. 
That is a totally lame DNS configuration, where an inner NS give an 
authority response bouncing back WRT the current resolve chain.
Even `dig`, when run in trace mode (recursive descendent - like XMail), 
fails many times with a 'BAD REFERRAL' error code.
As far as I'm concerned, the  secca-expertise.com  domain (and its IT 
admins) can go to hell.



- Davide


_______________________________________________
xmail mailing list
xmail@xmailserver.org
http://xmailserver.org/mailman/listinfo/xmail

Reply via email to