Ralf G. R. Bergs wrote: > >> Jul 20 15:44:06 Server named[139]: sysquery: query(jeondrs.jeonju.ac.kr) NS > >> points to CNAME (ns.kren.ne.kr:) learnt (CNAME=<my-forwarder>:NS= > >> 203.248.240.141) > [...] > >"NS points to CNAME" is an error message. It means that querying the > >RHS of an NS record returns a CNAME record, which is an error. > > Sorry, obviously I wasn't specific enough. I'm well aware of what you wrote > above. > > What I would like to know is: What does the trailing part > > learnt (CNAME=<my-forwarder>:NS=203.248.240.141) > > mean? Where does that IP come from (it resolves to kr2ld.bora.net, which is not > any of jeondrs.jeonju.ac.kr's nameservers)? It is one of the ".kr" nameservers: kr. 1d5h27m25s IN NS KR2LD.DACOM.CO.kr. ... KR2LD.DACOM.CO.kr. 1d7h27s IN A 203.248.240.141 > What does "learnt <something>" mean in this connection? It means "The bogus DNS reply contained the following". > Why does the message mention my forwarder as a CNAME? This is misleading, both in terms of the phrasing and the information which it provides. "CNAME=<my-forwarder>" basically means "the bogus RR was a CNAME RR, and it came from <my-forwarder>". Without any forwarders, it would have identified the nameserver from which the RR actually originated. -- Glynn Clements <glynn.clements@virgin.net> - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org
