[dns-operations] Misbehaving name servers

Mark Andrews marka at isc.org
Fri Jan 27 05:45:15 UTC 2017


The following name servers were found as part of EDNS compliance
checking <https://ednscomp.isc.org/compliance/tld-report.html#e1>.
They ignore the EDNS version field in the request and return a SOA
as if the version field was set to zero rather than 1.  Correctly
functioning name servers will return BADVERS to EDNS version 1
requests with the version field set to the highest version that
they support.  Can you please fix these server.  You name server
vendor most probably has a fixed version of the name server code
that you can install.

ge. @212.72.130.11 (ns.nic.ge.): dns=ok edns=ok edns1=noerror,badversion,soa edns at 512=ok ednsopt=ok edns1opt=noerror,badversion,soa do=ok ednsflags=ok optlist=ok,nsid signed=ok ednstcp=ok
mp. @202.128.29.2 (ns1.nic.mp.): dns=ok edns=ok edns1=noerror,badversion,soa edns at 512=ok ednsopt=ok edns1opt=noerror,badversion,soa do=ok ednsflags=ok optlist=ok,nsid signed=ok ednstcp=ok
mp. @202.128.29.135 (ns2.nic.mp.): dns=ok edns=ok edns1=noerror,badversion,soa edns at 512=ok ednsopt=ok edns1opt=noerror,badversion,soa do=ok ednsflags=ok optlist=ok,nsid signed=ok ednstcp=ok
np. @202.52.255.5 (shikhar.mos.com.np.): dns=ok edns=ok edns1=noerror,badversion,soa edns at 512=ok ednsopt=ok edns1opt=noerror,badversion,soa do=ok ednsflags=ok optlist=ok,nsid signed=ok ednstcp=ok
vu. @196.192.110.15 (cctld-vu.orange.mu.): dns=ok edns=ok edns1=noerror,badversion,soa edns at 512=ok ednsopt=ok edns1opt=noerror,badversion,soa do=ok ednsflags=ok optlist=ok,nsid signed=ok,yes ednstcp=ok
vu. @202.80.32.9 (ns1-cctld.vunic.vu.): dns=ok edns=ok edns1=noerror,badversion,soa edns at 512=ok ednsopt=ok edns1opt=noerror,badversion,soa do=ok ednsflags=ok optlist=ok,nsid signed=ok,yes ednstcp=ok

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE:	+61 2 9871 4742		         INTERNET: marka at isc.org



More information about the dns-operations mailing list