From 993fe8459a89c780304c989cb0d36c82f305073b Mon Sep 17 00:00:00 2001 From: Alex Rad <37549748+lts-rad@users.noreply.github.com> Date: Tue, 5 Apr 2022 10:21:10 -0700 Subject: [PATCH] Replies should include Authoritative flag set to true ``` chashell 300 IN A [SERVERIP] c 300 IN NS chashell.[DOMAIN]. ``` The chanserv unning at [SERVERIP] is an authoritative nameserver for chashell.[DOMAIN]. The message header reply should have the 'aa' (Authoritative) flag set. Without this flag set, a strict recursive nameserver may block replies from reaching the client. This was observed with DigitalOcean for example. --- cmd/server/chaserv.go | 1 + 1 file changed, 1 insertion(+) diff --git a/cmd/server/chaserv.go b/cmd/server/chaserv.go index ad6e794..e2b4f63 100644 --- a/cmd/server/chaserv.go +++ b/cmd/server/chaserv.go @@ -199,6 +199,7 @@ func parseQuery(m *dns.Msg) { rr, _ := dns.NewRR(fmt.Sprintf("%s TXT %s", q.Name, answer)) m.Answer = append(m.Answer, rr) + m.MsgHdr.Authoritative = true }