BADVERS returned for unknown EDNS option
Mark Andrews <[email protected]> Thu, 20 Mar 2014 03:19:53 +1100
| Newsgroups | gmane.ietf.dnsext |
|---|---|
| Message-ID | <[email protected]> |
Is the vendor of the nameservers cpb.gov are runnning willing to standup and issue a recall notice for the version they are running. version.bind returns "3.2.2" When presented a unknown EDNS option they return BADVERS rather then ignoring the option. The EDNS RFCs (both the original and the replacement) are explict about what conditions set BADVERS. This sort of mis-behaviour make it very difficult to deploy new EDNS options. Mark ; <<>> DiG 9.10.0b2 <<>> @sauthns1.qwest.net cpb.gov +nsid ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 39491 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;cpb.gov. IN A ;; Query time: 12 msec ;; SERVER: 2001:428::7#53(2001:428::7) ;; WHEN: Thu Mar 20 03:14:22 EST 2014 ;; MSG SIZE rcvd: 36 ; <<>> DiG 9.10.0b2 <<>> @sauthns1.qwest.net cpb.gov +sit ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: BADVERS, id: 57276 ;; flags: qr rd ad; QUERY: 0, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; Query time: 12 msec ;; SERVER: 2001:428::7#53(2001:428::7) ;; WHEN: Thu Mar 20 03:15:32 EST 2014 ;; MSG SIZE rcvd: 23 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ dnsext mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsext