| reply to dellsweig
Also, we include tests for this as part of Netalyzr ( »netalyzr.icsi.berkeley.edu )
For the client->internet connection, we check for the ability to directly receive DNS requests of various sizes with and without EDNS to see if there is something on the client's path which may cause problems (eg, no fragments allowed, no EDNS allowed, assumes that DNS = 512B).
For the resolver, we check thde actual MTU, the advertised MTU, whether it requests DNSSEC data, whether it can handle fragments, and whether it can properly fallback to TCP (all issues which affect DNSSEC) |
·
