At 3:01 AM +0100 2003/02/08, Brad Knowles wrote:
if you set up bind9 with a authoritative-only view it will return REFUSED. in a "normal" configuration, it will use pre-compiled root-hints.
Right, but REFUSED != SERVFAIL.
Moreover, this isn't the default behaviour of BIND 9. You have to go out of your way to make this configuration choice. I'm okay with people choosing to configure their servers this way, but this isn't something that should be done by default. -- Brad Knowles, <brad.knowles@skynet.be> "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." -Benjamin Franklin, Historical Review of Pennsylvania. GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E-(---) W+++(--) N+ !w--- O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++) tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)