[dns-operations] It looks like .BIZ has started blocking EDNS(1) and unknown EDNS flags over IPv4.

[Gustavo Lozano]

Mark,

 
I performed tests in the past 48 hours, and I have
not been able to replicate your results. Probably, I performed my tests
after
the issue was resolved, or the issue was present in a subset of node(s) of
an
anycast cloud and we are reaching different servers.
 

Are you running your tests from different points on the Internet?
 Would it be possible to add the NSID(s), if available, to your report?
 

Thank you,
Gustavo
ICANN



On 9/25/16, 20:56, "dns-operations on behalf of Mark Andrews"
<dns-operations-bounces at dns-oarc.net on behalf of marka at isc.org> wrote:

>
>Did someone decide to upgrade a firewall?
>
>reports/tld.2016-09-24T00:00:00Z:biz. @156.154.124.65 (a.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-24T00:00:00Z:biz. @2001:502:ad09::30 (a.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-24T00:00:00Z:biz. @156.154.125.65 (b.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-24T00:00:00Z:biz. @156.154.127.65 (c.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-24T00:00:00Z:biz. @156.154.126.65 (e.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-24T00:00:00Z:biz. @2001:500:3682::12 (f.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-24T00:00:00Z:biz. @209.173.58.66 (f.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-24T00:00:00Z:biz. @156.154.128.65 (k.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-24T00:00:00Z:biz. @2001:503:e239::3:2 (k.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-25T00:00:00Z:biz. @156.154.124.65 (a.gtld.biz.):
>dns=ok edns=ok edns1=timeout edns at 512=ok ednsopt=ok edns1opt=timeout
>do=ok ednsflags=timeout optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-25T00:00:00Z:biz. @2001:502:ad09::30 (a.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-25T00:00:00Z:biz. @156.154.125.65 (b.gtld.biz.):
>dns=ok edns=ok edns1=timeout edns at 512=ok ednsopt=ok edns1opt=timeout
>do=ok ednsflags=timeout optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-25T00:00:00Z:biz. @156.154.127.65 (c.gtld.biz.):
>dns=ok edns=ok edns1=timeout edns at 512=ok ednsopt=ok edns1opt=timeout
>do=ok ednsflags=timeout optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-25T00:00:00Z:biz. @156.154.126.65 (e.gtld.biz.):
>dns=ok edns=ok edns1=timeout edns at 512=ok ednsopt=ok edns1opt=timeout
>do=ok ednsflags=timeout optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-25T00:00:00Z:biz. @2001:500:3682::12 (f.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-25T00:00:00Z:biz. @209.173.58.66 (f.gtld.biz.):
>dns=ok edns=ok edns1=timeout edns at 512=ok ednsopt=ok edns1opt=timeout
>do=ok ednsflags=timeout optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-25T00:00:00Z:biz. @156.154.128.65 (k.gtld.biz.):
>dns=ok edns=ok edns1=timeout edns at 512=ok ednsopt=ok edns1opt=timeout
>do=ok ednsflags=timeout optlist=ok signed=ok,yes ednstcp=ok
>reports/tld.2016-09-25T00:00:00Z:biz. @2001:503:e239::3:2 (k.gtld.biz.):
>dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=ok edns1opt=ok do=ok
>ednsflags=ok optlist=ok signed=ok,yes ednstcp=ok
>
>-- 
>Mark Andrews, ISC
>1 Seymour St., Dundas Valley, NSW 2117, Australia
>PHONE:	+61 2 9871 4742		         INTERNET: marka at isc.org
>_______________________________________________
>dns-operations mailing list
>dns-operations at lists.dns-oarc.net
>https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>dns-operations mailing list
>https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4701 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20160929/da5105af/attachment.bin>