watchWWW/iana.orgについて、ここに記述してください。 == iana.org == http://www.iana.org/ http://www.iana.net/ [[/kresd]] {{{ iana.org. 86400 IN NS a.iana-servers.net. iana.org. 86400 IN NS c.iana-servers.net. iana.org. 86400 IN NS ns.icann.org. iana.org. 86400 IN NS b.iana-servers.net. }}} $ dig www.iana.org @a.iana-servers.net {{{ ; <<>> DiG 9.9.5-3ubuntu0.7-Ubuntu <<>> www.iana.org @a.iana-servers.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49717 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.iana.org. IN A ;; ANSWER SECTION: www.iana.org. 3600 IN CNAME ianawww.vip.icann.org. ;; Query time: 72 msec ;; SERVER: 199.43.132.53#53(199.43.132.53) ;; WHEN: Fri Feb 12 12:07:05 JST 2016 ;; MSG SIZE rcvd: 73 }}} この返事ならいいのだが、... ----- $ dig www.iana.org @ns.icann.org {{{ ; <<>> DiG 9.9.5-3ubuntu0.7-Ubuntu <<>> www.iana.org @ns.icann.org ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28631 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 5 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.iana.org. IN A ;; ANSWER SECTION: www.iana.org. 3600 IN CNAME ianawww.vip.icann.org. ;; AUTHORITY SECTION: vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. ;; ADDITIONAL SECTION: gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 ;; Query time: 171 msec ;; SERVER: 199.4.138.53#53(199.4.138.53) ;; WHEN: Thu Feb 11 20:18:13 JST 2016 ;; MSG SIZE rcvd: 206 }}} CNAMEはANSWERだからいいとして、その先のdelegationまで返してくるとはほんと余計なことを。 　Unboundがどう処理しているか調べてみよう。 　いま動いているKnot resolverはダメらしいが。 -- ToshinoriMaeno <>