Date: Mon, 12 Feb 2001 23:48:31 -0500 (EST) From: Mitch Collinsworth <mitch@ccmr.cornell.edu> To: James Housley <jim@thehousleys.net> Cc: Corey Ralph <corey.ralph@datafast.net.au>, freebsd-isp@FreeBSD.ORG Subject: Re: Bind problems Message-ID: <Pine.LNX.4.10.10102122343100.22516-100000@ruby.ccmr.cornell.edu> In-Reply-To: <Pine.LNX.4.10.10102122324000.22516-100000@ruby.ccmr.cornell.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 12 Feb 2001, Mitch Collinsworth wrote:
> On Mon, 12 Feb 2001, James Housley wrote:
>
> > I might be seeing a similar problem. Since I upgraded to 8.2.3 via
> > CVSup in 4.2-STABLE some of my secondaries are suddenly saying my
> > unpublished master is no longer authorative for some of my domains. I
> > am getting "Received NOTIFY answer (!AA)" messages in my notify log.
>
> Well this one seems to be addressed in the CHANGES file. Entry 1025,
> prior to the 8.2.3-T6B release says:
>
> 1025. [proto] NOTIFY messages should have AA.
>
> Not much to go on there. Sounds like somebody didn't like the idea
> of sending NOTIFY's if you aren't authoritative. I don't know if
> this is stated in an RFC somewhere or if it was a developer decision.
> I think there may be a case for arguing this is unnecessarily
> restrictive, though there might also be a case for arguing it's a
> security issue or potential DOS. The place to take it up is probably
> bind-users.
Replying to myself here, it seems I should have finished reading the
CHANGES file before firing this off. Further along are these entries:
1037. [support] soften #1025 -- continue to accept !AA notify req's.
1055. [bug] aa was being cleared on notify "queries" prior to
testing.
1037 seems to support my argument that 1025 was a mistake. But your
logs seem to indicate the reversal of 1025 didn't take. Not sure what
1055 is trying to say. Probably time to write to bind-users.
-Mitch
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.10.10102122343100.22516-100000>