Maintained by: NLnet Labs

[Unbound-users] Problems with

Hauke Lampe
Mon Sep 19 17:41:53 CEST 2011

On 19.09.2011 15:51, W.C.A. Wijngaards wrote:

> I do not understand how they continue to query LAME servers.

Doesn't look lame to me. It answers queries for as
well as for ns/ns1/ Only the NS record is wrong.

My Unbound resolver (current svn) keeps returing the correct answer.

> If it would not
> give Lame answers, then it would work with unbound (and the parent-child
> disagreement would not be an issue).

Shouldn't it fail with "harden-referral-path" set? Or is it enough if
the child servers sends answers for the nameserver names from the parent
zone even if the NS records differ?

Here's a query trace from unbound-host w/ harden-referral-path:


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL: <>