Mark Andrews via RT <bind9-bugs@isc.org> wrote:
>
> This one will break lookups from behind a firewall that only passes DNS
> queries <= 512 bytes.

OK I totally didn't understand the way the adb metrics were being used :-)

Ace, many thanks for your fix. I have given it a try and my dumb smoke
test passes. However most of that is to do with fixes on the authority
servers! But soy. and foo. still fail with an oldish 9.11 and work with
the new one.


$ time dig axfr . | sed -E '/^([0-9a-z-]+)[.][      ].*/!d;s//\1/' | sort -u | while read d; do dig dnskey $d. | grep 'status: SERVFAIL' && echo $d; done
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 50379
xn--l1acc

real    2m22.193s
user    0m4.048s
sys     0m3.096s


Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
Lundy, Fastnet, Irish Sea, Shannon: West or northwest 4 or 5, occasionally 6
at first, becoming variable or southwest 3 or 4. Slight or moderate. Showers.
Good.