Re: DNSSEC scaremongering

> Lo and behold. DNSSEC works fine. There is SOMETHING wrong with
> Win2k3's DNS and DNSSEC.
>
> Rick

Has someone disabled EDNS on the 2003 system?

Chris

Probably turned off a long time ago, there used to be quite a few
network devices that had issues with the UDP packet size it needed (very
old versions of Cisco IOS, and so on).

Not to worry, it should pass the DNSSEC test for packet size now.

Chris

Yep. Obviously you should do your own testing, but that should be all it
takes.

Chris

Corbin O'Reilly wrote:
> On 4/14/2010 6:11 PM, Chris Dent wrote:
>>
>>
>> Probably turned off a long time ago, there used to be quite a few
>> network devices that had issues with the UDP packet size it needed (very
>> old versions of Cisco IOS, and so on).
>>
>> Not to worry, it should pass the DNSSEC test for packet size now.
>>
>> Chris
>
> So just go the command prompt of my internal DNS servers and type
>
> dnscmd /Config /EnableEDnsProbes 1 and the problem will be corrected?
>

--
Blog: http://www.indented.co.uk
DnsShell: http://code.msdn.microsoft.com/dnsshell