[dns-operations] why use different dig version return different result?

[Doug Barton]

On 09/09/2018 08:27 PM, Champion Xie wrote:
>
> why  use different dig version return different result?    Request to 
> reach a different server?
>
>
> *./dig xn--j1amh. @212.1.66.247 <http://212.1.66.247>  +edns=1*
> ;; BADVERS, retrying with EDNS version 0.

You apparently missed the above. Newer BIND steps down the EDNS version 
if a higher version fails, and retries. SERVFAIL is the "correct" 
answer, as nsi.uanic.net is apparently not configured for the zone (even 
though it's in the root delegation for it).

Your earlier version of BIND below gave up on the BADVERS error.

> ; <<>> *DiG 9.11.1cn1-P3* <<>> xn--j1amh. @212.1.66.247 
> <http://212.1.66.247> +edns=1
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: *SERVFAIL*, id: 41568
> ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;xn--j1amh.INA
>
> ;; Query time: 3249 msec
> ;; SERVER: 212.1.66.247#53(212.1.66.247)
> ;; WHEN: Mon Sep 10 11:15:29 CST 2018
> ;; MSG SIZE  rcvd: 38
>
> dig xn--j1amh. @212.1.66.247 <http://212.1.66.247>  +edns=1
>
> ; <<>>*DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6* <<>> xn--j1amh. 
> @212.1.66.247 <http://212.1.66.247> +edns=1
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: *BADVERS*, id: 53766
> ;; flags: qr rd; QUERY: 0, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; Query time: 819 msec
> ;; SERVER: 212.1.66.247#53(212.1.66.247)
> ;; WHEN: Mon Sep 10 11:16:08 2018
> ;; MSG SIZE  rcvd: 23
>
> -- 
> Best Regards!!
> champion_xie
>
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20180909/c0077e42/attachment.html>