Andrew Sullivan wrote: > Hi, > > Now that the DNS is back (thanks!), I thought I'd ask why the ra bit > is set on the responses. Are those servers providing recursion to > the whole Net? (They seem to be.) If so, that's a Bad Thing. > > A > Yes, they do seem to be and yes it probably is a Bad Thing: $ dig @ns3.hub.org www.mysql.com ; <<>> DiG 9.3.1 <<>> @ns3.hub.org www.mysql.com ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58427 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 4, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.mysql.com. IN A ;; ANSWER SECTION: www.mysql.com. 3600 IN A 213.115.162.29 www.mysql.com. 3600 IN A 213.115.162.82 www.mysql.com. 3600 IN A 213.136.52.29 www.mysql.com. 3600 IN A 213.136.52.82 ;; AUTHORITY SECTION: mysql.com. 3600 IN NS dns1.mysql.com. mysql.com. 3600 IN NS dns2.mysql.com. mysql.com. 3600 IN NS dns3.mysql.com. mysql.com. 3600 IN NS dns5.mysql.com. ;; Query time: 409 msec ;; SERVER: 200.46.204.254#53(200.46.204.254) ;; WHEN: Wed Sep 6 10:15:56 2006 ;; MSG SIZE rcvd: 171
