Re: [dnsext] BADVER/FORMERR

Ray Bellis <Ray.Bellis@nominet.org.uk> Sat, 12 November 2011 14:12 UTC

Return-Path: <Ray.Bellis@nominet.org.uk>
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6065A21F84B5 for <dnsext@ietfa.amsl.com>; Sat, 12 Nov 2011 06:12:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.606
X-Spam-Level:
X-Spam-Status: No, score=-7.606 tagged_above=-999 required=5 tests=[AWL=-1.007, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6w647mg9igef for <dnsext@ietfa.amsl.com>; Sat, 12 Nov 2011 06:12:05 -0800 (PST)
Received: from mx1.knowthenet.org.uk (mx1.knowthenet.org.uk [213.248.199.2]) by ietfa.amsl.com (Postfix) with ESMTP id 5A0F021F848E for <dnsext@ietf.org>; Sat, 12 Nov 2011 06:12:05 -0800 (PST)
DomainKey-Signature: s=main.dk.nominet.selector; d=nominet.org.uk; c=nofws; q=dns; h=X-IronPort-AV:Received:Received:From:To:CC:Subject: Thread-Topic:Thread-Index:Date:Message-ID:References: In-Reply-To:Accept-Language:Content-Language: X-MS-Has-Attach:X-MS-TNEF-Correlator:Content-Type: Content-ID:Content-Transfer-Encoding:MIME-Version; b=MafxN0OFxt+8CqhgPASeNEMXADMtxPcq+o+LgwdEWaUH2CDUDOs3Nkwt ZBDmGz1wkfRWS8A3zY4rTlbGQCJFyedMYPEMI7K38IvIkT3gpsMDF2BcW F6F09bKgyiQIWob;
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nominet.org.uk; i=Ray.Bellis@nominet.org.uk; q=dns/txt; s=main.dkim.nominet.selector; t=1321107125; x=1352643125; h=from:sender:reply-to:subject:date:message-id:to:cc: mime-version:content-transfer-encoding:content-id: content-description:resent-date:resent-from:resent-sender: resent-to:resent-cc:resent-message-id:in-reply-to: references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:list-owner:list-archive; z=From:=20Ray=20Bellis=20<Ray.Bellis@nominet.org.uk> |Subject:=20Re:=20[dnsext]=20BADVER/FORMERR|Date:=20Sat, =2012=20Nov=202011=2014:11:54=20+0000|Message-ID:=20<EFF9 20B5-B4F6-4C42-B507-01C2392067B0@nominet.org.uk>|To:=20Ma rk=20Andrews=20<marka@isc.org>|CC:=20"dnsext@ietf.org"=20 <dnsext@ietf.org>|MIME-Version:=201.0 |Content-Transfer-Encoding:=20quoted-printable |Content-ID:=20<99a746b4-8f33-4a42-99cb-377bb799dab5> |In-Reply-To:=20<20111112084928.A6299171131B@drugs.dv.isc .org>|References:=20<20111111025007.B689B17061FA@drugs.dv .isc.org>=0D=0A=20<8B7F972437853B40865000D86857B1D118DC4B 13@wds-exc1.okna.nominet.org.uk>=0D=0A=20<20111112084928. A6299171131B@drugs.dv.isc.org>; bh=TDRLFQWdORrFGmstRe7XpuWS2jcm/ge7wpSy7RoHd48=; b=5MwYW+AXjXmUClcYyHmP+9gGq8QMEHXwHClOcnz+EqodYeZShHX6Qhgg JP8U70hYlUHjB0MsGCWvKVCyrKSQzmLBQY3Spgj8xCH3+4D5PwRaTJHFd weiaZlFBHpfMjig;
X-IronPort-AV: E=Sophos;i="4.69,499,1315177200"; d="scan'208";a="36551071"
Received: from wds-exc2.okna.nominet.org.uk ([213.248.197.145]) by mx3.nominet.org.uk with ESMTP; 12 Nov 2011 14:12:04 +0000
Received: from WDS-EXC1.okna.nominet.org.uk ([fe80::1593:1394:a91f:8f5f]) by wds-exc2.okna.nominet.org.uk ([fe80::7577:eaca:5241:25d4%19]) with mapi; Sat, 12 Nov 2011 14:11:56 +0000
From: Ray Bellis <Ray.Bellis@nominet.org.uk>
To: Mark Andrews <marka@isc.org>
Thread-Topic: [dnsext] BADVER/FORMERR
Thread-Index: AQHMoBzA5mAz8aYz4U6U8KCek//FTpWnnoCVgAFRcVqAAFnkAA==
Date: Sat, 12 Nov 2011 14:11:54 +0000
Message-ID: <EFF920B5-B4F6-4C42-B507-01C2392067B0@nominet.org.uk>
References: <20111111025007.B689B17061FA@drugs.dv.isc.org> <8B7F972437853B40865000D86857B1D118DC4B13@wds-exc1.okna.nominet.org.uk> <20111112084928.A6299171131B@drugs.dv.isc.org>
In-Reply-To: <20111112084928.A6299171131B@drugs.dv.isc.org>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="us-ascii"
Content-ID: <99a746b4-8f33-4a42-99cb-377bb799dab5>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "dnsext@ietf.org" <dnsext@ietf.org>
Subject: Re: [dnsext] BADVER/FORMERR
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Nov 2011 14:12:06 -0000

On 12 Nov 2011, at 16:49, Mark Andrews wrote:
> 
> EDNS is RFC 2671.

Yes, 2308 was a mistake.  I did of course mean RFC 2671.

> If you don't support the EDNS version in the
> request you must send back BADVER.  At that point trying to process
> the question section, whatever it is, is moot as the RCODE has
> already been set.

Again, I ask, where is this defined?

I can't see anything in _2671_ that says that processing of the EDNS version number takes priority over any other input checking that might be performed by a server.

As far as I can see, the only pertinent text in 2671, and the (expired) 2671bis draft is this:

"If a responder does not implement the VERSION level of the request, then it answers with RCODE=BADVERS"
which doesn't even have a 2119-level compliance requirement word in it.

>> Just out of interest, are there any _existing_ legitimate circumstances where
>> QDCOUNT != 1 ?
> 
> Seeing if a server is alive.
> Getting the EDNS UDP size prior to sending a UPDATE. 
> Getting the EDNS version prior to anything.

> If I set qcount=2 with ./in/a and ./in/aaaa and edns=50 the correct
> rcode for a edns=0 server is BADVER.

Why not something else?  Because *BIND* doesn't do it that way?

Ray