zonemaster-engine
zonemaster-engine copied to clipboard
zonemaster
invalid edns queries
It looks like Zonemaster do not follow rfc during queries. When EDNS queries are not accepted causing FORMERR in response, a normal query should be used instead.
Thank you for your question. Zonemaster is a test tool. In Nameserver02 Zonemaster checks for EDNS support, and if FORMERR is returned, a message is returned to the client that there is no EDNS support for the specific name server. In that case Zonemaster does not requery since that is meaningless.
The Zonemaster queries have another purpose than most DNS queries from "normal" clients. Most test cases do the testing without EDNS, except where DNSSEC support in the query is needed.
Do you have something else in your mind? We might have missed something.
Zonemaster reports critical error in system and basic (The domain must have at least one working name server) when using non-EDNS servers, and it stops after that doing no more tests.
Since this is the first test Zonemaster is doing, no tests are actually performed
@jay2398743, could you share what domain name (zone) you have tested so that I can investigate? Either here or in an email directly to me (mats.dufberg at iis.se)?