Re: [dnsext] Lame Server responses

Edward Lewis <> Mon, 11 October 2010 19:27 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 3B2793A6B78; Mon, 11 Oct 2010 12:27:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -101.501
X-Spam-Status: No, score=-101.501 tagged_above=-999 required=5 tests=[AWL=1.098, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id Ruiakz3+2A15; Mon, 11 Oct 2010 12:27:33 -0700 (PDT)
Received: from ( [IPv6:2001:418:1::62]) by (Postfix) with ESMTP id C1F083A6B74; Mon, 11 Oct 2010 12:27:31 -0700 (PDT)
Received: from majordom by with local (Exim 4.72 (FreeBSD)) (envelope-from <>) id 1P5NwD-000BKW-CW for; Mon, 11 Oct 2010 19:21:33 +0000
Received: from ([]) by with esmtps (TLSv1:AES256-SHA:256) (Exim 4.72 (FreeBSD)) (envelope-from <>) id 1P5NwA-000BK5-He for; Mon, 11 Oct 2010 19:21:30 +0000
Received: from ( []) by (8.14.4/8.14.4) with ESMTP id o9BJLKUg088527; Mon, 11 Oct 2010 15:21:20 -0400 (EDT) (envelope-from
Received: from [] by (PGP Universal service); Mon, 11 Oct 2010 15:21:27 -0400
X-PGP-Universal: processed; by on Mon, 11 Oct 2010 15:21:27 -0400
Mime-Version: 1.0
Message-Id: <a06240804c8d91279f68d@[]>
In-Reply-To: <15C444FDEB61471D8FFC167D9CF14435@local>
References: <a06240801c8d8cde3e37e@[]> <15C444FDEB61471D8FFC167D9CF14435@local>
Date: Mon, 11 Oct 2010 15:21:17 -0400
To: <>
From: Edward Lewis <>
Subject: Re: [dnsext] Lame Server responses
Cc: Edward Lewis <>
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
X-Scanned-By: MIMEDefang 2.68 on
Precedence: bulk
List-ID: <>
List-Unsubscribe: To unsubscribe send a message to with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <>

At 18:52 +0100 10/11/10, George Barwood wrote:

>I agree with BIND, it seems to me that REFUSED is closest to then codes
>defined by the standard.  I expect either SERVERFAIL or REFUSED will
>work perfectly well.

 From reading the spec, neither really applies.  But I think they are 
the only two choices (from the existing pool). I.e., in REFUSED, the 
"eg" uses the word "wishes" which isn't the issue.  OTOH, SERVFAIL 
talks about name server error, which also isn't the issue.  Our bias 
was that it was a system error that caused any earnest query to go to 
a lame server, so we adopted SERVFAIL.  "Course, there's no telling 
what the right thing is for a non-earnest query (like a maintenance 
one, a probing one, a simple mistake).

>I don't see any strong reason to have a specific LAME return code, so
>the chance of introducing one at this stage seems practically zero, even
>if EDNS theoretically allows it.

Given we've lasted this long without an return code, we don't need to 
invent one now.

>Can you think of any other situation that causes REFUSED to be returned (to
>  a normal query)?

AXFR?  Depends on what's normal.  A server that will only answer 
queries with specific TSIG keys?

Edward Lewis
NeuStar                    You can leave a voice message at +1-571-434-5468

Ever get the feeling that someday if you google for your own life story,
you'll find that someone has already written it and it's on sale at Amazon?