Re: [dnsext] Lame Server responses

Edward Lewis <Ed.Lewis@neustar.biz> Tue, 12 October 2010 12:54 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2E7F93A6968; Tue, 12 Oct 2010 05:54:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.566
X-Spam-Level:
X-Spam-Status: No, score=-101.566 tagged_above=-999 required=5 tests=[AWL=1.033, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iFBpu4Ml0GtC; Tue, 12 Oct 2010 05:54:35 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 067CF3A694F; Tue, 12 Oct 2010 05:54:35 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.72 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1P5eJb-0003r6-8O for namedroppers-data0@psg.com; Tue, 12 Oct 2010 12:50:47 +0000
Received: from stora.ogud.com ([66.92.146.20]) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.72 (FreeBSD)) (envelope-from <Ed.Lewis@neustar.biz>) id 1P5eJY-0003qF-Fb for namedroppers@ops.ietf.org; Tue, 12 Oct 2010 12:50:44 +0000
Received: from Work-Laptop-2.local (gatt.md.ogud.com [10.20.30.6]) by stora.ogud.com (8.14.4/8.14.4) with ESMTP id o9CCoVm4055279; Tue, 12 Oct 2010 08:50:33 -0400 (EDT) (envelope-from Ed.Lewis@neustar.biz)
Received: from [10.31.200.147] by Work-Laptop-2.local (PGP Universal service); Tue, 12 Oct 2010 08:50:39 -0400
X-PGP-Universal: processed; by Work-Laptop-2.local on Tue, 12 Oct 2010 08:50:39 -0400
Mime-Version: 1.0
Message-Id: <a06240802c8da07a4f1cd@[10.31.200.147]>
In-Reply-To: <alpine.LSU.2.00.1010121117330.535@hermes-2.csi.cam.ac.uk>
References: <a06240801c8d8cde3e37e@[192.168.129.62]> <15C444FDEB61471D8FFC167D9CF14435@local> <a06240804c8d91279f68d@[192.168.129.62]> <alpine.LSU.2.00.1010121117330.535@hermes-2.csi.cam.ac.uk>
Date: Tue, 12 Oct 2010 08:43:07 -0400
To: Tony Finch <dot@dotat.at>
From: Edward Lewis <Ed.Lewis@neustar.biz>
Subject: Re: [dnsext] Lame Server responses
Cc: Edward Lewis <Ed.Lewis@neustar.biz>, namedroppers@ops.ietf.org
Content-Type: text/plain; charset="us-ascii"; format="flowed"
X-Scanned-By: MIMEDefang 2.68 on 10.20.30.4
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

At 11:30 +0100 10/12/10, Tony Finch wrote:

>BIND's behaviour makes a useful distinction between lame (REFUSED) and
>broken (SERVFAIL).

The problem (for both us and BIND, and everyone in general) there are at least:

"The answer failed DNSSEC"
"I couldn't follow a referral (all servers down)"
"I won't answer you (query, dynamic update, or zone management)"
"I am not properly informed" (lame)

These four cases (plus others probably) have to map into two response 
code values.  Distinctions really aren't going to be made.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at +1-571-434-5468

Ever get the feeling that someday if you google for your own life story,
you'll find that someone has already written it and it's on sale at Amazon?