<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Actually they conditionally return a EDNS response. Send the servers a ECS option and you will get a EDNS ECS response. <div><br></div><div>If I remember correctly they also show breakage with EDNS(1) if ECS is present but I’m not in front of the right equipment to check. <br><br><div id="AppleMailSignature" dir="ltr">-- <div>Mark Andrews</div></div><div dir="ltr"><br>On 5 Dec 2018, at 03:51, Mats Dufberg <<a href="mailto:mats.dufberg@iis.se">mats.dufberg@iis.se</a>> wrote:<br><br></div><blockquote type="cite"><div dir="ltr">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 2 6 3 5 4 5 2 3 4;}
@font-face
{font-family:Menlo;
panose-1:2 11 6 9 3 8 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Courier New";
color:windowtext;
font-weight:normal;
font-style:normal;}
p.p1, li.p1, div.p1
{mso-style-name:p1;
margin:0cm;
margin-bottom:.0001pt;
background:white;
font-size:8.5pt;
font-family:Menlo;
color:black;}
p.p2, li.p2, div.p2
{mso-style-name:p2;
margin:0cm;
margin-bottom:.0001pt;
background:white;
font-size:8.5pt;
font-family:Menlo;
color:black;}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
span.s1
{mso-style-name:s1;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style>
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Courier New"">The <a href="http://google.com">google.com</a> replies without OPT when the query has OPT record. It seems to be true for all servers of <a href="http://google.com">google.com</a>.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Courier New""><a href="https://www.zonemaster.net/result/396932f178c82fd6">https://www.zonemaster.net/result/396932f178c82fd6</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="p1"><span class="s1">; <<>> DiG 9.10.6 <<>> @216.239.34.10 <a href="http://google.com">google.com</a> soa +dns +qr +mu</span><o:p></o:p></p>
<p class="p1"><span class="s1"><span lang="EN-US">; (1 server found)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; global options: +cmd</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; Sending:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15863</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; flags: rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><b><span lang="EN-US">;; OPT PSEUDOSECTION:</span></b></span><b><span lang="EN-US"><o:p></o:p></span></b></p>
<p class="p1"><span class="s1"><b><span lang="EN-US">; EDNS: version: 0, flags: do; udp: 4096</span></b></span><b><span lang="EN-US"><o:p></o:p></span></b></p>
<p class="p1"><span class="s1"><b><span lang="EN-US">;; QUESTION SECTION:</span></b></span><b><span lang="EN-US"><o:p></o:p></span></b></p>
<p class="p1"><span class="s1"><b><span lang="EN-US">;<a href="http://google.com">google.com</a>.</span></b></span><span class="apple-tab-span"><b><span lang="EN-US">
</span></b></span><span class="s1"><b><span lang="EN-US">IN SOA</span></b></span><b><span lang="EN-US"><o:p></o:p></span></b></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><b><span lang="EN-US">;; Got answer:</span></b></span><b><span lang="EN-US"><o:p></o:p></span></b></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15863</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 8</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; WARNING: recursion requested but not available</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; QUESTION SECTION:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;<a href="http://google.com">google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">IN SOA</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; ANSWER SECTION:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://google.com">google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">60 IN SOA <a href="http://ns1.google.com">ns1.google.com</a>. <a href="http://dns-admin.google.com">dns-admin.google.com</a>. (</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">223945713</span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">; serial</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">900</span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">; refresh (15 minutes)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">900</span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">; retry (15 minutes)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">1800 </span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">; expire (30 minutes)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">60 </span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">; minimum (1 minute)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; AUTHORITY SECTION:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://google.com">google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN NS <a href="http://ns3.google.com">ns3.google.com</a>.</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://google.com">google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN NS <a href="http://ns1.google.com">ns1.google.com</a>.</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://google.com">google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN NS <a href="http://ns4.google.com">ns4.google.com</a>.</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://google.com">google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN NS <a href="http://ns2.google.com">ns2.google.com</a>.</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; ADDITIONAL SECTION:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://ns3.google.com">ns3.google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN A 216.239.36.10</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://ns3.google.com">ns3.google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN AAAA 2001:4860:4802:36::a</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://ns1.google.com">ns1.google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN A 216.239.32.10</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://ns1.google.com">ns1.google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN AAAA 2001:4860:4802:32::a</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://ns4.google.com">ns4.google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN A 216.239.38.10</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://ns4.google.com">ns4.google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN AAAA 2001:4860:4802:38::a</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://ns2.google.com">ns2.google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN A 216.239.34.10</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US"><a href="http://ns2.google.com">ns2.google.com</a>.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">345600 IN AAAA 2001:4860:4802:34::a</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; Query time: 52 msec</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; SERVER: 216.239.34.10#53(216.239.34.10)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; WHEN: Tue Dec 04 17:47:35 CET 2018</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1">;; MSG SIZE</span><span class="apple-converted-space">
</span><span class="s1">rcvd: 322</span><o:p></o:p></p>
<p class="p2"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Courier New";color:black">---</span><span lang="EN-US" style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Courier New";color:black">Mats Dufberg</span><span lang="EN-US" style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Courier New";color:black">DNS Specialist, IIS</span><span lang="EN-US" style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black">Mobile: +46 73 065 3899</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black"><a href="https://www.iis.se/en/"><span style="color:#954F72">https://www.iis.se/en/</span></a></span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div></blockquote><blockquote type="cite"><div dir="ltr"><span>_______________________________________________</span><br><span>dns-operations mailing list</span><br><span><a href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.net</a></span><br><span><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a></span><br><span>dns-operations mailing list</span><br><span><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a></span><br></div></blockquote></div></body></html>