getting edns disabling message in logs

[Tony Finch]

Cathy Almond <cathya at isc.org> wrote:
>
> https://kb.isc.org/article/AA-00708/55/Why-does-BIND-log-messages-about-disabling-EDNS-or-reducing-the-advertised-packet-size
>
> (Just created, so apologies if there are any typos or other editorial
> corrections needed - they will happen later)

I suggest "middlebox" since "middleware" usually means something like a
horrific enterprisey web services message bus framework.

> > Is there any way that we can show that current disabling EDNS happens by
> > firewall issue ?
>
> That's a bit tricky, if what's broken is not in your network space.  On
> the other hand, if you're getting this reported for every domain that is
> queried, then it's probably *your* problem.

Try the DNS-OARC reply size test server.
https://www.dns-oarc.net/oarc/services/replysizetest/

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Biscay: Westerly or southwesterly 4 or 5, occasionally 6 later in southwest.
Moderate, becoming rough later in west. Rain or thundery showers. Moderate or
good.