<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Le 20/02/2026 à 07:34, Frank Habicht a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:a4d95d70-d025-44ad-8f8b-e1972a0f63fb@geier.ne.tz">Hi,
<br>
<br>
On 2/20/2026 3:16 AM, Sylvain BAYA wrote:
<br>
<blockquote type="cite">Le 19/02/2026 à 14:41, Frank Habicht a
écrit :
<br>
<blockquote type="cite">should there also be a check that for
any new domain object there are not two nserver: attributes
pointing to the exact same server name?
<br>
<br>
</blockquote>
<br>
No! imho, i see less interest and not existing
<br>
documentation to support such a process.
<br>
<br>
Maybe you have more context to share, then i
<br>
need to figure it out. Do kindly provide more
<br>
element, for me to eventually reconsider my
<br>
actual PoV (Point of View).
<br>
<br>
</blockquote>
<br>
I admit and agree that the current letter-of-the-law does allow
<br>
>> nserver: ns1.ibits.xyz
<br>
>> nserver: ns1.ibits.xyz
<br>
<br>
but is this really possibly the intend of the originator of this
data? <br>
<br>
</blockquote>
<br>
Hi Frank,<br>
<br>
Good question and my answer is: yes!<br>
<br>
Possible scenario:<br>
<br>
--if the implementation of that class attribute <br>
is of the kind: <br>
--multiple means two or more;<br>
--then a user with only one DNS authoritative <br>
server, at the moment,<br>
--would be tempted to fill the same data to a <br>
--secondary *mandatory* attribute.<br>
--.<br>
<br>
<blockquote type="cite"
cite="mid:a4d95d70-d025-44ad-8f8b-e1972a0f63fb@geier.ne.tz"><br>
In my opinion this is very most likely the result of a human
mistake <br>
<br>
</blockquote>
<br>
Probably; but please see above for another <br>
possible cause!<br>
<br>
<blockquote type="cite"
cite="mid:a4d95d70-d025-44ad-8f8b-e1972a0f63fb@geier.ne.tz"><br>
and it is also a likely cause for following human
misunderstanding. <br>
<br>
Someone looking at this casually might think there are 2 nservers
set. <br>
<br>
</blockquote>
<br>
...anycasted ;-)<br>
<br>
<blockquote type="cite"
cite="mid:a4d95d70-d025-44ad-8f8b-e1972a0f63fb@geier.ne.tz"><br>
AfriNIC auth DNS server gives one answer - not 2 identical ones.
[1] <br>
<br>
</blockquote>
<br>
...then, they seem to be doing a prior check :-/<br>
<br>
We really need to better understand how they <br>
manage that class attribute: record & response.<br>
<br>
<blockquote type="cite"
cite="mid:a4d95d70-d025-44ad-8f8b-e1972a0f63fb@geier.ne.tz"><br>
My intention is to see if we can help avoid someone (e.g.
<a class="moz-txt-link-abbreviated" href="mailto:tnoc@ibits.co">tnoc@ibits.co</a>) mistakenly understanding the whois data as having
effectively two auth DNS servers and thus some degree of
redundancy. <br>
<br>
</blockquote>
<br>
Sure, we should! then, could we include follow-up <br>
support to the existing training+assistance done <br>
already by AfriNIC Capacity Building & HelpDesk?<br>
<br>
Getting better your point now, i agree there is <br>
a need to check for improvement.<br>
<br>
...then i have a question, to the Staff: <br>
<br>
What's the meaning of "mutiple" in considering <br>
your implementation of nserver: attribute of the <br>
domain class?<br>
<br>
==> i kindly remind you my off-topic suggestion; <br>
dear cochairs :-)<br>
<br>
<blockquote type="cite"
cite="mid:a4d95d70-d025-44ad-8f8b-e1972a0f63fb@geier.ne.tz"><br>
<br>
<blockquote type="cite">
<blockquote type="cite">If on domain object creation two
nserver: attributes have the exact same content, should
creation be rejected (because of most likely human error) ?
<br>
<br>
</blockquote>
<br>
Why? even more here. It's a "no" for me.
<br>
...as you shared, that "domain" class attribute
<br>
description; and i can add (if minimum is 2?):
<br>
<br>
cacty@<a class="moz-txt-link-freetext" href="shalom:~$">shalom:~$</a> TZ='UTC' date --rfc-3339='seconds' && \
<br>
whois -h whois.afrinic.net -- -t domain | \
<br>
grep nserver \
<br>
# from AS15964 at Bhome
<br>
2026-02-19 23:59:22+00:00
<br>
nserver: [mandatory] [multiple] [inverse key]
<br>
cacty@<a class="moz-txt-link-freetext" href="shalom:~$">shalom:~$</a>
<br>
<br>
Is there a persevered problem? please clarify,
<br>
to allow me to better understand, brother.
<br>
<br>
</blockquote>
see above.
<br>
<br>
PS: the auth server is this example is also LAME :-( - [2] <br>
<br>
</blockquote>
<br>
...sad too! though it reminds me to do my own <br>
home work; as we have not yet configured any <br>
reverse DNS record :'-( but i know that Nishal <br>
would help us! or Willy! thanks to you guys.<br>
<br>
Is the contacts reachable? then following apply:<br>
<a class="moz-txt-link-freetext" href="https://afrinic.net/support/whois/resolve-lame-delegation">https://afrinic.net/support/whois/resolve-lame-delegation</a><br>
and<br>
<a class="moz-txt-link-freetext" href="https://www.afrinic.net/services/lame-delegation">https://www.afrinic.net/services/lame-delegation</a><br>
<br>
...and this is my next question, to the Staff: <br>
is the cited nserver: attributes content present, <br>
on the raw data, here [*] already?<br>
__<br>
[*]: <a href="https://stats.afrinic.net/lamerdns/">Lame Delegation |
AfriNIC Statistics Portal</a><br>
<br>
Shalom,<br>
--sb.<br>
<br>
<blockquote type="cite"
cite="mid:a4d95d70-d025-44ad-8f8b-e1972a0f63fb@geier.ne.tz"><br>
Regards,
<br>
Frank
<br>
<br>
<br>
<br>
[1]
<br>
$ dig @ns1.afrinic.net. 8.c.4.f.f.0.c.2.ip6.arpa ns +norec
<br>
<br>
; <<>> dig 9.10.8-P1 <<>>
@ns1.afrinic.net. 8.c.4.f.f.0.c.2.ip6.arpa ns +norec
<br>
; (2 servers found)
<br>
;; global options: +cmd
<br>
;; Got answer:
<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
63543
<br>
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
<br>
<br>
;; OPT PSEUDOSECTION:
<br>
; EDNS: version: 0, flags:; udp: 1232
<br>
;; QUESTION SECTION:
<br>
;8.c.4.f.f.0.c.2.ip6.arpa. IN NS
<br>
<br>
;; AUTHORITY SECTION:
<br>
8.c.4.f.f.0.c.2.ip6.arpa. 172800 IN NS ns1.ibits.xyz.
<br>
<br>
<br>
[2]
<br>
$ dig @ns1.ibits.xyz. 8.c.4.f.f.0.c.2.ip6.arpa soa
<br>
...
<br>
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id:
5581
<br>
<br>
<br>
_______________________________________________
<br>
DBWG mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:DBWG@afrinic.net">DBWG@afrinic.net</a>
<br>
<a class="moz-txt-link-freetext" href="https://lists.afrinic.net/mailman/listinfo/dbwg">https://lists.afrinic.net/mailman/listinfo/dbwg</a>
<br>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<font size="2"><br>
Best Regards !<br>
</font>
<font size="2"><br>
baya.sylvain [AT cmNOG DOT cm] | <br>
<a href="https://www.cmnog.cm/dokuwiki/Structure">cmNOG's
Structure</a> | <a
href="https://web.archive.org/web/20240706030230/http://www.camix.cm/">CAMIX's
Website</a> | <a href="https://tools.std.douala-ix.net/lg">Douala-IX's
Looking Glass</a> | <br>
<a href="https://survey2.cmnog.cm/">cmNOG's Surveys</a> |
Subscribe to <a
href="https://lists.cmnog.cm/mailman/listinfo/cmnog">cmNOG's
Mailing List</a> | <br>
__
<br>
#LASAINTEBIBLE|#Ephé<a class="moz-txt-link-freetext" href="siens5:18,15-21«">siens5:18,15-21«</a>[...] 18 Et <b><u>ne vous
enivrez</u></b> pas <b><u>de vin</u></b>, en quoi <b><u>il
y a de la dissolution</u></b>; mais <b><u>soyez remplis de
l'Esprit</u></b>, [...]» <br>
#LASAINTEBIBLE|#Hé<a class="moz-txt-link-freetext" href="breux13:9,5-15«">breux13:9,5-15«</a>[...] 9 <u><b>Ne soyez pas
seduits par</b></u> des <u><b>doctrines diverses</b></u> et
<u><b>etrangeres</b></u>, car il est bon <u><b>que le coeur
soit affermi par la grace</b></u>, non par les viandes,
lesquels n'ont pas profite à ceux qui y ont marche. [...]»
<br>
#AMEN,#Maranatha,#MerciJÉSUS! #MaPrière est que tu naisses de
nouveau.#Chrétiennement</font><br>
</div>
<br>
</body>
</html>