Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

EDNS unknown version: query not in response#208

Open
AngeloColucci opened this issue Mar 5, 2022 · 3 comments
Open

EDNS unknown version: query not in response #208

AngeloColucci opened this issue Mar 5, 2022 · 3 comments

Comments

@AngeloColucci
Copy link

Hi @wcawijngaards
I'm experimenting the same issue in a similar configuration scenario described in the issue #97 (dnsdist 1.7.0 in front of nsd 4.2.4 epel package).
When I try to exectute dnsflag day 2020 auth nameserver validation I receive minor warning on the query:

dig +edns=1 soa zone @server

Capturing the network traffic i noticed that in the query response is missing the initial request.
Does this nsd version is fixable?

Thanks in advance for your support
Angelo
@wcawijngaards
Copy link
Member

To fix it you need to upgrade, the fix for that issue appears in NSD 4.3.2. When I test the latest version in the code repository, that version seems to work fine too. So an upgrade, to perhaps the latest version, of NSD would solve the issue.

@AngeloColucci
Copy link
Author

Hi @wcawijngaards,
thanks for your update.
So I need to request that version to the mantainer of epel repository, because they still promote the 4.2.4.

BR
Angelo

@wcawijngaards
Copy link
Member

Yes, we do not maintain those repositories. You could also compile NSD manually, from source code. That creates a version that installs in /usr/local by default.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests

2 participants
@wcawijngaards @AngeloColucci