Name

DNSC-701 — Resolving process cannot continue due to incorrect answer

Severity

W (warning)

Message text

Response from %s contains no authority records for %s

Description

During the resolution process, some authoritative server sent an answer without authority (AA) flag. According to the RFC, such an answer is incorrect and cannot be processed as trusted.

Unfortunately, some popular nameservers ignore this RFC rule and the resolving process will stop at them. If it is the case of known nameservers, you can prepare for this domain an extra request-acl with the IGNORE-MISSING-AA flag.

The resolving will fail.

See also

logging(7)

Authors

This man page is a part of Kernun Firewall.
Copyright © 2000–2023 Trusted Network Solutions, a. s.
All rights reserved.