success resolving xxx after disabling EDNS

2022-05-04 Thread Veronique Lefebure
Hello, If we see this on our DNS server logs (BIND 9.11): 04-May-2022 12:55:37.675 edns-disabled: info: success resolving 'sour.woinsta.com/A' (in 'woinsta.com'?) after disabling EDNS - are we correct to say that with BIND 9.16, that query wil always fail because EDNS won't be disabled anymore

Re: success resolving xxx after disabling EDNS

2022-05-04 Thread Ondřej Surý
> On 4. 5. 2022, at 14:12, Veronique Lefebure > wrote: > > Hello, > > If we see this on our DNS server logs (BIND 9.11): > > 04-May-2022 12:55:37.675 edns-disabled: info: success resolving > 'sour.woinsta.com/A' (in 'woinsta.com'?) after disabling EDNS > > - are we correct to say that with B

Re: success resolving xxx after disabling EDNS

2022-05-04 Thread Greg Choules via bind-users
Hi Veronique. Every DNS server should support EDNS by now. It has been around for a very long time. Even if it doesn't support EDNS it should ignore it. I made some test queries and packet captures to 23.82.12.28. Whatever this box is, please talk to the manufacturer about EDNS support. Or.. it ma

Re: success resolving xxx after disabling EDNS

2022-05-04 Thread Petr Špaček
On 04. 05. 22 14:34, Greg Choules via bind-users wrote: Hi Veronique. Every DNS server should support EDNS by now. It has been around for a very long time. Even if it doesn't support EDNS it should ignore it. I made some test queries and packet captures to 23.82.12.28. Whatever this box is, p

Re: success resolving xxx after disabling EDNS

2022-05-04 Thread Veronique Lefebure
Thanks Greg and Ondrej, Many thanks for the pointer to DNS Cookies in BIND 9 (isc.org) https://kb.isc.org/docs/aa-01387 I have used https://ednscomp.isc.org/ednscomp/1ba42afa27 to check if they are compliant, but the answer is ambiguous: EDNS Compliance Tester Checking: 'sour.woinsta.com' as

Re: success resolving xxx after disabling EDNS

2022-05-04 Thread Mark Andrews
> On 5 May 2022, at 00:17, Veronique Lefebure > wrote: > > Thanks Greg and Ondrej, > > Many thanks for the pointer to DNS Cookies in BIND 9 (isc.org) > > I have used https://ednscomp.isc.org/ednscomp/1ba42afa27 to check if they > are compliant, but the answer is ambiguous: > > EDNS Complia