Enforce EDNS

Chuck Anderson cra at WPI.EDU
Tue Feb 7 17:13:05 UTC 2017


On Tue, Feb 07, 2017 at 11:59:39AM +1100, Mark Andrews wrote:
> I really don't want to add new automatic work arounds for broken
> servers but it requires people being willing to accepting that
> lookups will fail.  That manual work arounds will now have to
> be done. e.g. "server ... { send-cookie no; };"
> 
> Servers not answering would EDNS or EDNS + DNS COOKIE would require
> operator intervention.

Break them.  That's the only way it will eventually get fixed.


More information about the bind-users mailing list