F5 are asking me for time to debug.. while Google is saying "All our appliances do this, nobody else is complaining...".. Just saying, I prefer the former response so far.
Thanks, Mohamed. On Fri, Oct 10, 2014 at 3:20 PM, Jared Mauch <ja...@puck.nether.net> wrote: > > > On Oct 10, 2014, at 2:54 PM, Hugo Salgado <hsalg...@nic.cl> wrote: > > > > > > On 10/10/2014 03:24 PM, Roland Dobbins wrote: > >> > >> On Oct 11, 2014, at 1:07 AM, Mohamed Lrhazi < > mohamed.lrh...@georgetown.edu> wrote: > >> > >>> The appliance vendor, Google, tells me that edns0 opt code 20732 must > be "the service name", whatever that means.... > >> > >> I don't know what that means in the context of a non-SRV query . . . > can you turn off the F5's 'malformed DNS query' scrubbing and see what > happens? > >> > > > > Well... F5 is known of misbehavior with its aggressive filtering, > > even with AAAA records some time ago: > > http://hugo.salga.do/post/50030273426/quad-a-blocking-in-dns > > I’ve never had success with F5 and DNS packet handling properly going all > the way back to Nov 1998 timeframe. One of their engineers was > troubleshooting it in our offices of my employer at the time and ended up > upset and saying “why doesn’t this work” when it was broken vs being able > to properly triage it. > > I’m expecting someone from F5 to email me because at the time when I > posted about the issue on NANOG they were aggressive in trying to defend a > public view of their product and legitimate technical problems. > > - Jared > _______________________________________________ > dns-operations mailing list > dns-operations@lists.dns-oarc.net > https://lists.dns-oarc.net/mailman/listinfo/dns-operations > dns-jobs mailing list > https://lists.dns-oarc.net/mailman/listinfo/dns-jobs >
_______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs