BINDrecursion不parsing某些域

我有一个recursioncachingBIND /命名设置,它不想解决一些域。 我在日志文件中看到这些错误:

Dec 22 11:53:02 router2.lan named[301]: skipping nameserver 'ns0.flowerfire.com' because it is a CNAME, while resolving 'www.sawmill.net/AAAA' Dec 22 11:53:02 router2.lan named[301]: SERVFAIL unexpected RCODE resolving 'www.sawmill.net/A/IN': 63.249.66.124#53 Dec 22 11:53:02 router2.lan named[301]: skipping nameserver 'ns0.flowerfire.com' because it is a CNAME, while resolving 'www.sawmill.net/A' Dec 22 11:53:02 router2.lan named[301]: skipping nameserver 'ns1.flowerfire.com' because it is a CNAME, while resolving 'www.sawmill.net/A' Dec 22 11:53:02 router2.lan named[301]: SERVFAIL unexpected RCODE resolving 'www.sawmill.net/AAAA/IN': 63.249.66.124#53 Dec 22 11:53:02 router2.lan named[301]: skipping nameserver 'ns0.flowerfire.com' because it is a CNAME, while resolving 'www.sawmill.net/AAAA' Dec 22 11:53:02 router2.lan named[301]: skipping nameserver 'ns1.flowerfire.com' because it is a CNAME, while resolving 'www.sawmill.net/AAAA' 

(该域名不是我的)
谷歌的8.8.8.8正确parsing这个域名

这是我的named.conf

 options { directory "/var/named"; pid-file "/run/named/named.pid"; listen-on-v6 { any; }; dnssec-validation auto; auth-nxdomain no; allow-query { any; }; recursion yes; allow-recursion { any; }; allow-transfer { none; }; allow-update { none; }; version none; hostname none; server-id none; max-cache-size 16M; max-ncache-ttl 3600; }; 

和BIND版本:
BIND 9.11.0-P1

有谁知道为什么会发生这种情况?

顺便说一句,服务器是防火墙,所以没有任何损害,允许所有来源的recursion。

这个问题的关键是这两个信息:

 Dec 22 11:53:02 router2.lan named[301]: skipping nameserver 'ns0.flowerfire.com' because it is a CNAME, while resolving 'www.sawmill.net/A' Dec 22 11:53:02 router2.lan named[301]: skipping nameserver 'ns1.flowerfire.com' because it is a CNAME, while resolving 'www.sawmill.net/A' 

BIND对执行RFC 1034规定非常严格, 规定 NSlogging“应该始终”指向主名称而不是别名。 一些域名服务器软件可能会select解决大脑损伤,但是它们应该被认为是例外而不是规则。

BIND将最初追逐由net.提供的胶水loggingnet. TLD,但是当刷新NSlogging的时候,当遇到CNAME时,它们将被从caching中清除。


作为一个侧面说明,这些sawmill.net名称服务器一般是可怕的。 指向CNAME别名的NSlogging,缺less粘连的NSlogging,复制IP的两个NSlogging,仅指向两个,一个名称服务器返回一个意外的rcode,以及相邻的IP地址忽略BCP 16. Sheesh。