<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jan 18, 2019, at 9:18 AM, Ben Croswell <<a href="mailto:ben.croswell@gmail.com" class="">ben.croswell@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="auto" class="">I shouldn't have posted so closely to responding to the other user.</div></div></blockquote><div><br class=""></div>Oh, my mistake. How is this for a definitve statement?</div><div><br class=""></div><div><span style="font-family: "Open Sans", sans-serif; font-size: 13.5px; font-variant-ligatures: normal; orphans: 2; white-space: pre-wrap; widows: 2;" class="">BIND 9 was designed to be EDNS compliant from very beginning. </span>All currently-supported branches of BIND 9 are EDNS-compliant. That includes 9.11, 9.12 and 9.13. <span style="font-family: "Open Sans", sans-serif; font-size: 13.5px; orphans: 2; white-space: pre-wrap; widows: 2;" class="">We strongly advise running a version supported by ISC or the vendor as there could be bugs related to EDNS in earlier versions.</span></div><div><br class=""></div><div>I realize a lot of ppl on bind-users are running eol versions anyway. </div><div style="orphans: 2; widows: 2;">We did poke around a bit here, and found we fixed some minor EDNS issue with <span style="orphans: 2; widows: 2;" class=""><font face="Open Sans, sans-serif" class=""><span style="white-space: pre-wrap;" class="">change #3949 in 2014. That was also about the time we added dig +ednsopt. I don’t know what the issue was or if it is significant, but I am sure that any version issued since 2014 would be compliant vs the ednscomp tool.</span></font></span></div><div style="orphans: 2; widows: 2;"><span style="orphans: 2; widows: 2;" class=""><font face="Open Sans, sans-serif" class=""><span style="white-space: pre-wrap;" class=""><br class=""></span></font></span></div><div> <br class=""><blockquote type="cite" class=""><div class=""><div dir="auto" class=""><div dir="auto" class=""><br class=""></div><div dir="auto" class="">I am not running 9.8. I was replying to them about firewalls in regards to their 9.8 issues.</div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">Was just hoping for a statement of 9.x or greater supports the needed badvers signaling etc.</div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="">On Fri, Jan 18, 2019, 12:15 PM Victoria Risk <<a href="mailto:vicky@isc.org" class="">vicky@isc.org</a> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space" class=""><div class=""><br class=""></div><div class=""><div class=""><blockquote type="cite" class=""><div class="">On Jan 18, 2019, at 9:09 AM, Ben Croswell <<a href="mailto:ben.croswell@gmail.com" target="_blank" rel="noreferrer" class="">ben.croswell@gmail.com</a>> wrote:</div><br class="m_1329206319147160903Apple-interchange-newline"><div class=""><div dir="auto" class="">Has ISC released minimum viable BIND version for flag day?</div></div></blockquote><div class=""><br class=""></div>Most versions of BIND authoritative servers, going back years, are EDNS compatible. Certainly ALL currently supported versions are compatible. I see you are running 9.8, which has been EOL since September, 2014. I think that is probably fine, as far as EDNS, however.<div class=""><br class=""></div><div class="">The change in BIND related to DNS Flag Day is removing workarounds from resolvers, that will retry without EDNS or otherwise try to proceed even when EDNS fails. This change came in the BIND 9.13 development version, and will be in BIND 9.14, which is not yet released.</div><div class=""><br class=""></div><div class="">The problem you are seeing is most likely firewall-related.</div><div class=""><br class=""></div><div class="">Vicky</div><div class=""><br class=""></div><blockquote type="cite" class=""><div class=""><div dir="auto" class=""><div dir="auto" class=""><br class=""></div><div dir="auto" class="">I looked around and couldn't find anything. </div></div>
_______________________________________________<br class="">Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank" rel="noreferrer" class="">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br class=""><br class="">bind-users mailing list<br class=""><a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer" class="">bind-users@lists.isc.org</a><br class=""><a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank" rel="noreferrer" class="">https://lists.isc.org/mailman/listinfo/bind-users</a><br class=""></div></blockquote></div><br class=""><div class="">
<div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; word-wrap: break-word;" class=""><div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; word-wrap: break-word;" class=""><div class=""><br class=""></div></div></div></div></div></div></blockquote></div>
_______________________________________________<br class="">Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" class="">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br class=""><br class="">bind-users mailing list<br class=""><a href="mailto:bind-users@lists.isc.org" class="">bind-users@lists.isc.org</a><br class="">https://lists.isc.org/mailman/listinfo/bind-users<br class=""></div></blockquote></div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Victoria Risk</div><div class="">Product Manager</div><div class="">Internet Systems Consortium</div><div class=""><a href="mailto:vicky@isc.org" class="">vicky@isc.org</a></div><div class=""><br class=""></div></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""></body></html>