Subject: [dnsext] BADVERS returned for unknown EDNS option

From: Mark Andrews <[email-masked]>
Date: Thu, 20 Mar 2014 03:19:53 +1100

Is the vendor of the nameservers cpb.gov are runnning willing
	to standup and issue a recall notice for the version they
	are running.  version.bind returns "3.2.2" 

	When presented a unknown EDNS option they return BADVERS
	rather then ignoring the option.  The EDNS RFCs (both the
	original and the replacement) are explict about what
	conditions set BADVERS.

	This sort of mis-behaviour make it very difficult to deploy
	new EDNS options.

	Mark

; <<>> DiG 9.10.0b2 <<>> @sauthns1.qwest.net cpb.gov +nsid
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 39491
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;cpb.gov.			IN	A

;; Query time: 12 msec
;; SERVER: 2001:428::7#53(2001:428::7)
;; WHEN: Thu Mar 20 03:14:22 EST 2014
;; MSG SIZE  rcvd: 36

; <<>> DiG 9.10.0b2 <<>> @sauthns1.qwest.net cpb.gov +sit
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: BADVERS, id: 57276
;; flags: qr rd ad; QUERY: 0, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; Query time: 12 msec
;; SERVER: 2001:428::7#53(2001:428::7)
;; WHEN: Thu Mar 20 03:15:32 EST 2014
;; MSG SIZE  rcvd: 23

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE:	+61 2 9871 4742		         INTERNET: [email-masked]