Telstra (and other large ISPs) may be using Nominum CNS, which only uses EDNS after getting a truncated response (details at <a href="https://www.dns-oarc.net/oarc/services/replysizetest">https://www.dns-oarc.net/oarc/services/replysizetest</a> ).<br>
<div style="visibility: hidden; display: inline;" id="avg_ls_inline_popup"></div><style type="text/css">#avg_ls_inline_popup { position:absolute; z-index:9999; padding: 0px 0px; margin-left: 0px; margin-top: 0px; width: 240px; overflow: hidden; word-wrap: break-word; color: black; font-size: 10px; text-align: left; line-height: 13px;}</style><br>
eg at first it looks like iiNet's server don't support EDNS:<br><br>> dig +short <a href="http://rs.dns-oarc.net">rs.dns-oarc.net</a> txt @<a href="http://dns.iinet.net.au">dns.iinet.net.au</a><br><a href="http://rst.x476.rs.dns-oarc.net">rst.x476.rs.dns-oarc.net</a>.<br>
<a href="http://rst.x485.x476.rs.dns-oarc.net">rst.x485.x476.rs.dns-oarc.net</a>.<br><a href="http://rst.x490.x485.x476.rs.dns-oarc.net">rst.x490.x485.x476.rs.dns-oarc.net</a>.<br>"203.55.230.105 DNS reply size limit is at least 490"<br>
"203.55.230.105 lacks EDNS, defaults to 512"<br>"Tested at 2010-05-02 07:28:06 UTC"<br>><br><br>But if you query using <a href="http://tcf.rs.dns-oarc.net">tcf.rs.dns-oarc.net</a> it shows they actually do:<br>
<br>; <<>> DiG 9.4.2-P2.1 <<>> <a href="http://tcf.rs.dns-oarc.net">tcf.rs.dns-oarc.net</a> txt @<a href="http://dns.iinet.net.au">dns.iinet.net.au</a><br><br>;; QUESTION SECTION:<br>;<a href="http://tcf.rs.dns-oarc.net">tcf.rs.dns-oarc.net</a>. IN TXT<br>
<br>;; ANSWER SECTION:<br><a href="http://tcf.rs.dns-oarc.net">tcf.rs.dns-oarc.net</a>. 60 IN CNAME <a href="http://tcf.x3831.rs.dns-oarc.net">tcf.x3831.rs.dns-oarc.net</a>.<br><a href="http://tcf.x3831.rs.dns-oarc.net">tcf.x3831.rs.dns-oarc.net</a>. 59 IN CNAME <a href="http://tcf.x3837.x3831.rs.dns-oarc.net">tcf.x3837.x3831.rs.dns-oarc.net</a>.<br>
<a href="http://tcf.x3837.x3831.rs.dns-oarc.net">tcf.x3837.x3831.rs.dns-oarc.net</a>. 58 IN CNAME <a href="http://tcf.x3843.x3837.x3831.rs.dns-oarc.net">tcf.x3843.x3837.x3831.rs.dns-oarc.net</a>.<br><a href="http://tcf.x3843.x3837.x3831.rs.dns-oarc.net">tcf.x3843.x3837.x3831.rs.dns-oarc.net</a>. 57 IN TXT "203.55.230.105 DNS reply size limit is at least 3843"<br>
<a href="http://tcf.x3843.x3837.x3831.rs.dns-oarc.net">tcf.x3843.x3837.x3831.rs.dns-oarc.net</a>. 57 IN TXT "Tested at 2010-05-02 07:28:39 UTC"<br><br><br><div style="visibility: hidden; display: inline;" id="avg_ls_inline_popup">
</div><style type="text/css">#avg_ls_inline_popup { position:absolute; z-index:9999; padding: 0px 0px; margin-left: 0px; margin-top: 0px; width: 240px; overflow: hidden; word-wrap: break-word; color: black; font-size: 10px; text-align: left; line-height: 13px;}</style>prk<br>
<br><br><div class="gmail_quote">On 2 May 2010 15:08, Jason Lingohr <span dir="ltr"><<a href="mailto:jason@lucid.net.au">jason@lucid.net.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="#ffffff" text="#000000">
<font size="-1"><font face="Trebuchet MS">No surprise to see Telstra
resolvers can't handle EDNS...</font></font><br>
<br>
<tt><a href="http://rst.x476.rs.dns-oarc.net" target="_blank">rst.x476.rs.dns-oarc.net</a>.<br>
<a href="http://rst.x485.x476.rs.dns-oarc.net" target="_blank">rst.x485.x476.rs.dns-oarc.net</a>.<br>
<a href="http://rst.x490.x485.x476.rs.dns-oarc.net" target="_blank">rst.x490.x485.x476.rs.dns-oarc.net</a>.<br>
"203.50.90.32 lacks EDNS, defaults to 512"<br>
"203.50.90.32 DNS reply size limit is at least 490"<br>
"Tested at 2010-05-02 06:55:47 UTC"</tt><div class="im"><br>
<br>
<br>
On 2/05/2010 2:19 PM, Karl Kloppenborg wrote:
<blockquote type="cite">Hey Noggers!
<div><br>
</div>
<div>With the DNSSEC roll date set to 5th of may (oh look, that's in
three days!)
<div><br>
</div>
<div><b>Are you ready?</b></div>
<div><br>
</div>
</div>
<br>
</blockquote>
</div></div>
<br>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br>