[j-nsp] DNS Flag Day

Christian Scholz chs at ip4.de
Fri Jan 25 07:06:45 EST 2019

What they told you sounds like bullshit to me. From 10.2 on there are no special settings required. Maybe they don’t know how to do it?

So I guess they are just very lazy or don’t know better and blame the firewall... I pray for you that they don’t run Code below 10.2...



Von meinem iPhone gesendet

Am 25.01.2019 um 12:53 schrieb sthaug at nethelp.no:

>> When doing some investigation for the upcoming DNS Flag Day (https://dnsflagday.net: February 1st 2019) I got some bad news from one of the service providers: they use Juniper SRX firewalls, and claim that they can't properly support EDNS because of a bug in their SRX firewalls. This seems outrageous to me. Is this just because they haven't upgraded their JunOS for years, they're running ancient DNS server software, or is there really a problem?
> See
> https://mailman.nanog.org/pipermail/nanog/2019-January/099180.html
> "Juniper and Checkpoint have newer code that doesn't do this."
> Steinar Haug, Nethelp consulting, sthaug at nethelp.no
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp

More information about the juniper-nsp mailing list