On Mon, Dec 09, 2002 at 07:38:20AM +0200, Aleksi Suhonen wrote:
But why don't ns*.domain-registry.nl and auth02.ns.uu.net provide full glue records for the name servers?
If BIND is set to no-recursion and no fetch-glue then it will never find the address of a name server if it isn't listed in any zones that it has been told to load. This is currently considered a Good Thing <tm> because of security. You can tell that this is the way ns.domain-registry.nl is configured since it only gives additional information for the two name servers that ends with the name nl. Putting a glue for ns.ripe.net wont work within the .nl zone. (sunic.sunet.se is secondary for ripe.net, so it has the AAAA record already, and can give it as additional info) -- Robert Martin-Legene