On Tue, Feb 13, 2007 at 09:37:06AM +1100,
Mark Andrews wrote
a message of 88 lines which said:

> Upgrade to atleast BIND 9.2.5 or BIND 9.3.1. .FR has IPv6
> servers and named was ignoring the error code.
>
> 1773. [bug] Fast retry on host / net unreachable. [RT #13153]
>
> If Debian Sarge Stable only has BIND 9.2.4 they are doing you
> a disservice. They are over 2 years behind on our maintenance
> releases.


9.2.4 works fine, even with ".fr" nameservers and I was able to
completely pass the test in
http://www.icann.org/committees/security/sac017.htm with a Debian
"sarge" (stable) BIND recursive name server.


; <<>> DiG 9.2.4 <<>> +norec +bufsize=1024 @eve . NS
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54984
;; flags: qr ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 19

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;. IN NS

;; ANSWER SECTION:
.. 518392 IN NS I.ROOT-SERVERS.NET.
.. 518392 IN NS J.ROOT-SERVERS.NET.
.. 518392 IN NS K.ROOT-SERVERS.NET.
.. 518392 IN NS L.ROOT-SERVERS.NET.
.. 518392 IN NS M.ROOT-SERVERS.NET.
.. 518392 IN NS A.ROOT-SERVERS.NET.
.. 518392 IN NS B.ROOT-SERVERS.NET.
.. 518392 IN NS C.ROOT-SERVERS.NET.
.. 518392 IN NS D.ROOT-SERVERS.NET.
.. 518392 IN NS E.ROOT-SERVERS.NET.
.. 518392 IN NS F.ROOT-SERVERS.NET.
.. 518392 IN NS G.ROOT-SERVERS.NET.
.. 518392 IN NS H.ROOT-SERVERS.NET.

;; ADDITIONAL SECTION:
A.ROOT-SERVERS.NET. 604792 IN A 198.41.0.4
B.ROOT-SERVERS.NET. 604792 IN A 192.228.79.201
B.ROOT-SERVERS.NET. 604792 IN AAAA 2001:478:65::53
C.ROOT-SERVERS.NET. 604792 IN A 192.33.4.12
D.ROOT-SERVERS.NET. 604792 IN A 128.8.10.90
E.ROOT-SERVERS.NET. 604792 IN A 192.203.230.10
F.ROOT-SERVERS.NET. 604792 IN A 192.5.5.241
F.ROOT-SERVERS.NET. 604792 IN AAAA 2001:500::1035
G.ROOT-SERVERS.NET. 604792 IN A 192.112.36.4
H.ROOT-SERVERS.NET. 604792 IN A 128.63.2.53
H.ROOT-SERVERS.NET. 604792 IN AAAA 2001:500:1::803f:235
I.ROOT-SERVERS.NET. 604792 IN A 192.36.148.17
J.ROOT-SERVERS.NET. 604792 IN A 192.58.128.30
K.ROOT-SERVERS.NET. 604792 IN A 193.0.14.129
K.ROOT-SERVERS.NET. 604792 IN AAAA 2001:7fd::1
L.ROOT-SERVERS.NET. 604792 IN A 198.32.64.12
M.ROOT-SERVERS.NET. 604792 IN A 202.12.27.33
M.ROOT-SERVERS.NET. 604792 IN AAAA 2001:dc3::35

;; Query time: 1 msec
;; SERVER: 192.134.7.250#53(eve)
;; WHEN: Tue Feb 13 11:35:56 2007
;; MSG SIZE rcvd: 587