Hacker News Reader

Is there the concept of an 'administratively prohibited' error in the DNS? So your resolver could return an error with that code rather than an incorrect result.

View on HN

NXDOMAIN [1] ?

Dnsmasq can return nxdomain responses

echo 'server=/.example.tld/' >> /etc/dnsmasq.conf

Check dnsgate [2] or FreeContributor [3]

[1] https://www.dnsknowledge.com/whatis/nxdomain-non-existent-do...

[2] https://github.com/jakeogh/dnsgate

[3] https://github.com/tbds/FreeContributor

Sadly not. The closest match is probably SERVFAIL, but that covers all sorts of problems. (SERVFAIL is what a validating recursive server will return if its upstream tries to NXDOMAIN a signed domain.)

Reply on news.ycombinator.com