tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: DNSSEC problems



On Sat, 22 Jan 2011, Jeremy C. Reed wrote:

> For some reason, a query for dlv.isc.org's SOA got a response that was 
> not signed. Some misconfigured firewalls block DNS on UDP responses over 
> 512 bytes. Some broken firewalls block EDNS. Some nameservers don't 
> respond to EDNS.


Sorry I didn't mean to say "misconfigured". See RFC 1035 and RFC 2671 
and others.


Home | Main Index | Thread Index | Old Index