* Bill Owens: > On Fri, Feb 03, 2012 at 01:55:12PM +0000, Florian Weimer wrote: >> These nameservers: >> >> dns2.oppedahl.com. 172800 IN A 208.109.255.50 >> dns1.oppedahl.com. 172800 IN A 216.69.185.50 >> >> return SERVFAIL for EDNS0 queries. COM contains a signed delegation. >> This configuration is not supported. It seems that BIND produces >> a failure even if DNSSEC validation is not enabled for the view. > > How odd. . . it doesn't look that way from here: > > [littledebian:~] owens% dig oppedahl.com soa +norec +edns=0 @216.69.185.50
The exact same command line results in SERVFAIL for me. Various protocol-specific traceroutes suggests that I'm hitting the Godaddy servers hosted close to Level3 in Washington DC. The exact same command line also results in SERVFAIL for me. Does my DNS reply size limit have anything to do with this? Should it be over 4000? [klear@idns1 ~]$ dig +short rs.dns-oarc.net txt rst.x3827.rs.dns-oarc.net. rst.x3837.x3827.rs.dns-oarc.net. rst.x3843.x3837.x3827.rs.dns-oarc.net. "Tested at 2012-02-03 00:54:03 UTC" "151.207.242.20 sent EDNS buffer size 4096" "151.207.242.20 DNS reply size limit is at least 3843" [klear@idns1 ~]$ -- Florian Weimer <fwei...@bfk.de> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99 _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
