search

zonemaster / zonemaster-engine

The Zonemaster Engine - part of the Zonemaster project
Other
33 stars 31 forks source link

invalid edns queries #1313

Open jay2398743 opened 7 months ago

jay2398743 commented 7 months ago

It looks like Zonemaster do not follow rfc during queries. When EDNS queries are not accepted causing FORMERR in response, a normal query should be used instead.

matsduf commented 7 months ago

Thank you for your question. Zonemaster is a test tool. In Nameserver02 Zonemaster checks for EDNS support, and if FORMERR is returned, a message is returned to the client that there is no EDNS support for the specific name server. In that case Zonemaster does not requery since that is meaningless.

The Zonemaster queries have another purpose than most DNS queries from "normal" clients. Most test cases do the testing without EDNS, except where DNSSEC support in the query is needed.

Do you have something else in your mind? We might have missed something.

jay2398743 commented 7 months ago

Zonemaster reports critical error in system and basic (The domain must have at least one working name server) when using non-EDNS servers, and it stops after that doing no more tests.

Since this is the first test Zonemaster is doing, no tests are actually performed

matsduf commented 7 months ago

@jay2398743, could you share what domain name (zone) you have tested so that I can investigate? Either here or in an email directly to me (mats.dufberg at iis.se)?

matsduf commented 7 months ago

See issue https://github.com/zonemaster/zonemaster-engine/issues/1314