what does it mean exactly auth-nxdomain yes; from BIND 9?

[cccc]

hi

can someone explain me auth-nxdomain yes;
at named.conf from BIND 9.2.2?

should I set it active for my internal DNS server
(DDNS with non internet public domain ),
or I don't need?

kind regards
cccc

[SeanW]

From the BIND manual

auth-nxdomain
If yes, the AA bit is always set on NXDOMAIN responses, even if the server is not actually authoritative. The default is yes. Do not turn off auth-nxdomain unless you are sure you know what you are doing, as some older software won't like it.

NX-DOMAIN means "domain doesn't exist" The AA bit means the server has authority.

So, just leave it alone ;)

Sean

[cccc]

hi SeanW

what do you mean exactly with "leave it alone"

should I set it to "no", instead of "yes"?

auth-nxdomain no;

kind regards
cccc

[trillianjedi]

Your question already answered above:-

The default is yes. Do not turn off auth-nxdomain unless you are sure you know what you are doing

should I set it to "no", instead of "yes"?

That doesn't sound like "leaving it alone" to me...

;-)

TJ

[cccc]

thanks