No Response to DNSSEC Requests

[Mark Andrews]

> On Wed, 22 Aug 2007, Mark Andrews wrote:
> 
> > 	Upgrade to BIND 9.4 which will fall back to EDN at 512 before
> > 	falling back to plain DNS.
> 
> I'm using 9.4.1-P1, for three of the four authoratative servers and for
> the resolving server. Is there an option needed for this, or anything
> like that? I'll do a tcpdump when I get a chance to try to confirm that
> it is falling back.

	Named will do it automatically.  The real fix is to remove the
	broken router/firewall/NAT with extreme prejudice if necessary.

	Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org