Re: our isp not supports EDNS?

2010-06-22 Thread Mark Andrews
In message <20100622155814.gd4...@puga.deis.gldn.net>, Anatoly Pugachev writes: > Mark, > > please see below... > > On 04.05.2010 / 14:31:25 +1000, Mark Andrews wrote: > > > > In message > , Je > > ff Pang writes: > > > Hello, > > > > > > Following the discussions in the list, I made a test o

Re: our isp not supports EDNS?

2010-06-22 Thread Anatoly Pugachev
Thanks Bill. I'm well aware of dns-oarc tests... but they are no more than firewall / dns packet size tests. My idea/concern is what could be wrong/broken (except of DNSSEC), if we disable eDNS on our servers - I need to carry this idea to my collegue. My quick test show that disabling edns per

Re: our isp not supports EDNS?

2010-06-22 Thread Bill Buhlman
another example:   dig +short rs.dns-oarc.net txt rst.x3827.rs.dns-oarc.net. rst.x3837.x3827.rs.dns-oarc.net. rst.x3843.x3837.x3827.rs.dns-oarc.net. "Tested at 2010-06-22 17:11:44 UTC" "169.199.1.1 sent EDNS buffer size 4096" "169.199.1.1 DNS reply size limit is at least 3843" --- On Tue, 6/22/10,

Re: our isp not supports EDNS?

2010-06-22 Thread Anatoly Pugachev
Mark, please see below... On 04.05.2010 / 14:31:25 +1000, Mark Andrews wrote: > > In message , > Je > ff Pang writes: > > Hello, > > > > Following the discussions in the list, I made a test on one of our > > servers, which is in an ISP's datacenter. > > > > The result is below: > > > > $ di

Re: problems resolving domains unser NSxx.DOMAINCONTROL.COM - this problem i have too! :(((((

2010-06-22 Thread Erwin Lansing
On Mon, Jun 21, 2010 at 05:31:59PM +0200, Rok Poto??nik wrote: > Anyway.. I found out what the problem is... they don't reply to dnssec > enabled requests... > > $ dig +short @ns33.domaincontrol.com. replacementservices.com. > 72.32.12.235 > > $ dig +short +dnssec @ns33.domaincontrol.com. replac

Configure bind to reflect ip addresses (ala whoami.ultradns.net)

2010-06-22 Thread Ricardo Oliveira
Hi all, Did anyone configured/hacked bind to reflect the ip address of the querying resolver as whoami.ultradns.net is doing? Cheers, --Ricardo ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: problems resolving domains unser NSxx.DOMAINCONTROL.COM - this problem i have too! :(((((

2010-06-22 Thread Rok Potočnik
On 22.6.2010 2:16, Mark Andrews wrote: I suspect that your firewall is dropping replies to EDNS queries that *don't* include the OPT record (i.e. they are plain DNS not EDNS responses). Note that there was no OPT record in the reply. I hardly think that my firewall configuration is faulty bec