Why "dig foo" fails but "dig +trace foo" succeeds?

[Mark Andrews]

> Since this host is running RHEL supported with their up2date service I
> was hoping to keep to their stock RPMs, and 9.2.4rc6 is what they
> provide.  I'll notify them of the issue and look into building a custom
> package with the 9.3.0 sources.  Thanks for your cogent and quick
> explanation.
> 
> > 	Next you want to eliminate a broken/misconfigured firewall
> > 	from the problem space.  You should be able to get a answer
> > 	to both of these queries.  If you don't you need to fix your
> > 	firewall to handle EDNS queries.
> > 	
> > 		dig +bufsiz=4096 www.powweb.com @a.root-servers.net
> > 		dig www.powweb.com @a.root-servers.net
> 
> Both queries failed, so we've opened up a call to the firewall vendor as well
> .
 
	I would expect the "+bufsiz=4096" one to fail and the other
	to succeed.

> Thanks again,
> 
> -- 
>  Norman Joseph, System Engineer             joseph at ctc.com        IC|XC
>  Concurrent Technologies Corporation         814/269.2633         --+--
>  Federal Systems Group/IT & Systems Engineering                   NI|KA
> 
>       ***** If we don't change the direction we are headed, *****
>                   we will end up where we are going.
> 
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org