DNS/実装/unbound/harden-referral-path/動作確認について、ここに記述してください。

/毒サイト

1. off

/on /2

$ unbound-control set_option harden-referral-path no
ok
tmaeno@u16:~$ unbound-control get_option harden-referral-path
no
tmaeno@u16:~$ unbound-control flush_zone brau.jp
ok removed 3 rrsets, 4 messages and 0 key entries


tmaeno@u16:~$ dig poison.brau.jp @127.0.0.3

; <<>> DiG 9.12.3 <<>> poison.brau.jp @127.0.0.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58283
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1220
;; QUESTION SECTION:
;poison.brau.jp.                        IN      A

;; AUTHORITY SECTION:
brau.jp.                2560    IN      SOA     a.ns.brau.jp. hostmaster.brau.jp. 1543968754 16384 2048 1048576 2560

;; Query time: 23 msec
;; SERVER: 127.0.0.3#53(127.0.0.3)
;; WHEN: 水 12月 05 13:51:46 JST 2018
;; MSG SIZE  rcvd: 95

[1543985484] unbound[7346:0] info: control cmd:  set_option harden-referral-path no
[1543985488] unbound[7346:0] info: control cmd:  get_option harden-referral-path
[1543985498] unbound[7346:0] info: control cmd:  flush_zone brau.jp
[1543985506] unbound[7346:0] info: resolving poison.brau.jp. A IN
[1543985506] unbound[7346:0] info: response for poison.brau.jp. A IN
[1543985506] unbound[7346:0] info: reply from <jp.> 192.50.43.53#53
[1543985506] unbound[7346:0] info: query response was REFERRAL
[1543985506] unbound[7346:0] info: response for poison.brau.jp. A IN
[1543985506] unbound[7346:0] info: reply from <brau.jp.> 14.192.44.29#53
[1543985506] unbound[7346:0] info: query response was NXDOMAIN ANSWER