Re: [ipv6-wg@localhost] Re: RIPE NCC's DNS server available in IPv6

[Robert Martin-Legène <]

On Mon, Dec 09, 2002 at 07:38:20AM +0200, Aleksi Suhonen wrote:
> But why don't ns*.domain-registry.nl and auth02.ns.uu.net provide
> full glue records for the name servers?

If BIND is set to no-recursion and no fetch-glue then it will never
find the address of a name server if it isn't listed in any zones
that it has been told to load. This is currently considered a Good
Thing <tm> because of security.

You can tell that this is the way ns.domain-registry.nl is configured
since it only gives additional information for the two name servers
that ends with the name nl.

Putting a glue for ns.ripe.net wont work within the .nl zone.

(sunic.sunet.se is secondary for ripe.net, so it has the AAAA
record already, and can give it as additional info)

-- Robert Martin-Legene