DLV dnssec setup
Mark Andrews
marka at isc.org
Thu Jul 10 14:54:14 UTC 2014
Firstly upgrade. You are out of date.
Secondly fix your firewall. You need to allow through 4K DNS UDP
messages. You need to turn off whatever is blocking the bigger
packets and you also need to allow through fragmented UDP packets.
Mark
In message <CALm7FAfxMb1HaG-vryuH5DRji43gK+SWkOseptZt_EXzea7GJQ at mail.gmail.com>, Wolfgang Rosenauer writes:
> On Thu, Jul 10, 2014 at 4:16 PM, Tony Finch <dot at dotat.at> wrote:
> >
> > Suspicious. What do you get if you run
> > dig +short rs.dns-oarc.net txt
>
> s15418965:~ # dig +short rs.dns-oarc.net txt
> rst.x479.rs.dns-oarc.net.
> rst.x488.x479.rs.dns-oarc.net.
> rst.x493.x488.x479.rs.dns-oarc.net.
> "2001:8d8:870:1200::53 DNS reply size limit is at least 493 bytes"
> "2001:8d8:870:1200::53 lacks EDNS, defaults to 512"
>
>
> Wolfgang
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list