[j-nsp] DNS Flag Day

[sthaug at nethelp.no]

> When doing some investigation for the upcoming DNS Flag Day (https://dnsflagday.net: February 1st 2019) I got some bad news from one of the service providers: they use Juniper SRX firewalls, and claim that they can't properly support EDNS because of a bug in their SRX firewalls. This seems outrageous to me. Is this just because they haven't upgraded their JunOS for years, they're running ancient DNS server software, or is there really a problem?

See

https://mailman.nanog.org/pipermail/nanog/2019-January/099180.html

"Juniper and Checkpoint have newer code that doesn't do this."

Steinar Haug, Nethelp consulting, sthaug at nethelp.no