Op di 27 jun 2023 om 16:36 schreef Rich Felker <dalias@libc.org>:

It's not a matter of whether it's something other than A or AAAA; just
that you have a wildcard in your search domain path. This will never
give acceptable results unless your goal is to intercept all lookups
and have them return the same thing (either NODATA or a fixed
address).

Rich

Thanks for the explanation and quick response.

I'm not sure I agree that NOERROR is a valid response if some other record is queried for. I mean most other implentations do the other thing so even if this is the correct way, a lot of compatibility is broken, but that is up to you guys.

This last bit really shows where we went wrong. I'll remember not to use a wildcard without a proper subdomain (lightly). If I had a wildcard A in the domain (without subdomain) it would have broken even more by resulting in the same address for every host tried.