sneak 2c03858092 resolver: never resend a refused query asking for recursion (closes #206) ...

queryDNS resent a query that a server refused, this time asking for
recursion, so on a network that intercepts DNS the answers could come
from a recursive resolver without anyone knowing. A refusal is now only
a refusal, and the server is passed over for the next.

When every server of a zone refuses, the error says so. When every root
server refuses, the error is ErrIntercepted: root servers refuse no
query, so something on the network is answering in their place.
FindAuthoritativeNameservers stops at that error instead of trying each
parent name, so the watcher's log line says it.

Model: opus-5-5

2026-10-02 00:23:57 +00:00

..

dns_client.go

tests: remove the DNS stand-ins from the watcher and resolver tests (closes #159)

2026-09-29 08:44:07 +02:00

errors.go

resolver: never resend a refused query asking for recursion (closes #206)

2026-10-02 00:23:57 +00:00

export_test.go

resolver: never resend a refused query asking for recursion (closes #206)

2026-10-02 00:23:57 +00:00

iterative_test.go

resolver: take a domain's NS set from its delegation (closes #200)

2026-10-02 01:48:54 +02:00

iterative.go

resolver: never resend a refused query asking for recursion (closes #206)

2026-10-02 00:23:57 +00:00

livedns_harness_test.go

tests: remove the DNS stand-ins from the watcher and resolver tests (closes #159)

2026-09-29 08:44:07 +02:00

livedns_test.go

tests: rename internal/livedns to livednstest and deny it outside tests (closes #164)

2026-10-01 19:52:48 +02:00

resolver_test.go

resolver: never resend a refused query asking for recursion (closes #206)

2026-10-02 00:23:57 +00:00

resolver.go

tests: remove the DNS stand-ins from the watcher and resolver tests (closes #159)

2026-09-29 08:44:07 +02:00