Re: Should a nameserver know about itself?

[Peter Koch <[e-mail]>]

> Yes, but there is one notorious DNS implementation that doesn't do
> that. It fails to return any answer -- not even a referral for . -- if
> it's asked for a name that it isn't authoritative for.

That may even be helpful for the victim of a lame delegation, but anyway,
let's not go down this particular path. On the other hand, can we compile
a document (e.g. BCP) with technical/operational delegation prerequisites?
I remember that back in DNSIND times there were plans heading that direction.

The set of (non controversial) mandatory features to test may be small, but
still it might be helpful to have a "blessed" set of - optional - test
patterns.

Years ago, when I worked for a - then small - registry, we checked the
general nameserver setup before doing the delegation (correct 127.0.0.1
reverse mapping, root hints, forwarding etc.) in addition to a "sane"
zone configuration (NS and MX RRs, SOA timer, RNAME ...). At that time
pretty much everybody used "a" nameserver as server and resolver/forwarder,
so the checks were reasonable. Nowadays, even if you ignore the anti-registry-
djihad fraction, tests would have to accept a far broader range of setups.

-Peter