Problems with EDNS0

[Breno Silveira Soares]

Mark, thanks for your reply.
An IPS is blocking FORMERR messages, this is the reason of timeout.

Thanks,
Breno.


Mark Andrews escreveu:
>   
>> From my server, dig to Akamai with EDNS (+bufsize=512) doesn't get 
>> FORMERR message, dig return "connection timed out; no servers could be 
>> reached".
>> What could be the reason ?
>>     
>
> 	You have a device in the path that is filtering out the
> 	FORMERR responses.  Such devices are usually labeled
> 	"firewall" but could be something else like a NAT with a
> 	bad DNS ALG.
>  
> 	Mark
>
>   

-- 
Ats,
Breno S. Soares
Analista de Redes
SERPRO/SUPRE/REBHE
Tel: (31) 3311-6825



"Esta mensagem do SERVIÇO FEDERAL DE PROCESSAMENTO DE DADOS (SERPRO), empresa pública federal regida pelo disposto na Lei Federal nº 5.615, é enviada exclusivamente a seu destinatário e pode conter informações confidenciais, protegidas por sigilo profissional. Sua utilização desautorizada é ilegal e sujeita o infrator às penas da lei. Se você a recebeu indevidamente, queira, por gentileza, reenviá-la ao emitente, esclarecendo o equívoco."

"This message from SERVIÇO FEDERAL DE PROCESSAMENTO DE DADOS (SERPRO) -- a government company established under Brazilian law (5.615/70) -- is directed exclusively to its addressee and may contain confidential data, protected under professional secrecy rules. Its unauthorized use is illegal and may subject the transgressor to the law's penalties. If you're not the addressee, please send it back, elucidating the failure."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20090723/a05d8bdd/attachment.html>