Mac OS X Server 10.6.6 DNS not responding properly, get a “Truncated, retrying in TCP mode” for subdomain

Create a zone named "foo.com.", and inside it create a machine (A) record for "foo.com." -- the trailing period on the machine name indicates that the name is "fully qualified", and that the zone name shouldn't be implicitly added.

Yes, it's poor configuration and/or implementation - there's no reason for an authoritative server to return root referrals in an otherwise valid response.

Furthermore, I'm seeing other errors that simply shouldn't happen from those two Worldnic servers:

• sometimes it gives the right answer, but with a SERVFAIL error code and without the AA bit set.

• UDP replies are always truncated at 512 bytes, even with EDNS0 (RFC 2671) specified. This means that DNSSEC won't work with this name server

• It's not just the ADDITIONAL section that's a problem, it's putting the root name servers in the AUTHORITY section of an authoritative (AA bit set) answe.