X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mx.pao1.isc.org content-type: text/plain; charset="utf-8" To: bind-suggest@isc.org Received: from mx.pao1.isc.org (mx.pao1.isc.org [149.20.64.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx.pao1.isc.org", Issuer "COMODO RSA Organization Validation Secure Server CA" (not verified)) by bugs.isc.org (Postfix) with ESMTPS id 839F4D78B0A for ; Fri, 17 Nov 2017 13:37:12 +0000 (UTC) Received: from iscwebprod.isc.org (iscwebprod.isc.org [IPv6:2001:4f8:1:d::16]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id 2EDC53B6E72 for ; Fri, 17 Nov 2017 13:37:10 +0000 (UTC) Received: from www (uid 80) (envelope-from www@iscwebprod.isc.org) id 7b7d08 by iscwebprod.isc.org (DragonFly Mail Agent v0.11); Fri, 17 Nov 2017 13:37:09 +0000 Message-ID: <03eb40e63dfa4dea485abbad55295975@www.isc.org> X-PHP-Originating-Script: 20001:class-phpmailer.php X-Mailer: PHPMailer 5.2.22 (https://github.com/PHPMailer/PHPMailer) X-Spam-Status: No, score=0.0 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, RP_MATCHES_RCVD,UNPARSEABLE_RELAY autolearn=unavailable autolearn_force=no version=3.4.1 X-RT-Incoming-Encryption: Not encrypted MIME-Version: 1.0 From www@isc.org Fri Nov 17 13:37:12 2017 Return-Path: X-Original-To: bind9-public@bugs.isc.org Subject: BIND 9.10.6 - named-checkzone: Warn on data hidden by delegation Date: Fri, 17 Nov 2017 13:37:09 +0000 From: "Bernhard Schmidt" Delivered-To: bind9-public@bugs.isc.org X-RT-Original-Encoding: utf-8 X-RT-Interface: Email Content-Length: 1017 Bug Report from www.isc.org: Name: Bernhard Schmidt Email: Bernhard.Schmidt@lrz.de Software Version: BIND 9.10.6 OS: Linux Subject:named-checkzone: Warn on data hidden by delegation Bug Detail =========== It would be great if named-checkzone could warn about rrsets being hidden from queries because they are at the same level or even below delegating NS records --- $TTL 86400 example.com. SOA ns1.provider.com. hostmaster.provider.com. 2017050214 21600 1800 3600000 86400 example.com. NS ns1.provider.com. example.com. NS ns2.provider.com. sub.example.com. NS ns1.provider.com. sub.example.com. NS ns2.provider.com. sub.example.com. MX 10 mail.provider.com. www.sub.example.com. A 1.1.1.1 --- % /usr/sbin/named-checkzone example.com example.com zone example.com/IN: loaded serial 2017050214 OK Both sub.example.com/MX and www.sub.example.com/* will not be visible --- This email was received through isc.org Bug Submission Form