Name

RGAI-730 — DNS answer contains irrelevant data

Severity

D (debug), W (warning), A (alert)

Message text

%1 #%2 %3 (%4) does not match %5 (%6)

Description

The Kernun resolver checks the answer received whether it contains only records relevant to the query or to preceding RRs.

This message means that the record number %2 (counted from 1) withing the group %1 (e.g. ANSWER) has type or name that is not relevant to the original query or the canonical name included in the response.

The A-level message represents a very serious problem and it could be a symptom of an attack.

The W-level message is only a warning and this inconsistency should be ignored in most cases.

The D-level message is just a debugging info.

See also

logging(7)

Authors

This man page is a part of Kernun Firewall.
Copyright © 2000–2021 Trusted Network Solutions, a. s.
All rights reserved.