[rbldnsd] queries of non-existent RRs

[Steven F Siirila]

On Fri, Apr 22, 2005 at 11:46:26PM +0400, Michael Tokarev wrote:
> Steven F Siirila wrote:
> >I am curious as to why rbldnsd returns a "temporary error" instead of a
> >"not found" error when looking up a non-existent RR.  This makes sense
> >for a zone in which rbldnsd did not load, but not for ones it did load.
> >For example, if I query for 2.0.0.127.sbl.spamhaus.org, I get an answer.
> >However, if I query for 1.0.0.127.sbl.spamhaus.org, I get a temporary
> >error.  The only way to "fix" this is to ensure use of "forward first"
> >in the BIND forward zone pointing to my local rbldnsd.  While I want to
> >be configured in this manner, it seems counterproductive to query the
> >real sbl.spamhaus.org zone for every IP address which is not listed in
> >rbldnsd.
> 
> Aha, perhaps I know what it means.
> Have you configured SOA in the zone you're using?  Without SOA configured,
> rbldnsd can't answer with NXDOMAIN, so it just REFUSEs the query, and such
> a reply gets translated into SERVFAIL by your forwarder.

Actually, it doesn't appear that the rsync'd SBL zone has an SOA defined.
However, the rsync'd SORBS zone does and it has the same problem:

$DATASET ip4set dul safe @
$SOA	86400	rbldns0.sorbs.net dns.isux.com 0 7200 7200 604800 3600
$NS 86400 sorbs-sql1.vix.com. rbldns0.sorbs.net. rbldns2.sorbs.net.
rbldns3.sorbs.net. rbldns4.sorbs.net rbl1.oregonstate.edu.
rbl2.oregonstate.edu. sorbs.bl.xs4all.nl. rbldns5.sorbs.net.
rbldns6.sorbs.net.
:127.0.0.10:Dynamic IP Addresses See:
http://www.dnsbl.sorbs.net/lookup.shtml?$
$TTL 3600
4.10.0.0/15
4.33.138.0/24
4.4.0.0/16
	.
	.
	.

> Well... it's interesting.  Lemme take a more detailed look at this...

Can you provide me with a small (< 20 lines) zone which I could load that
shouldn't have this problem, and I can test against it?

-- 

Steven F. Siirila			Office: Lind Hall, Room 130B
Internet Services			E-mail: sfs at umn.edu
Office of Information Technology	Voice: (612) 626-0244
University of Minnesota			Fax: (612) 626-7593