Windows Server 2008 issue with DNS queries that contain EDNS0 section

-

when client sends dns query has optional edns0 section responds formerr (format error).

i have search , things find talk potential firewalls drop dns queries large, not happening since see query reaching dns server, both dns debug logging turned on , wireshark traces.

successful attempt windows 2008 dns server in vm:

; <<>> dig 9.9.3 <<>> www.google.com @172.19.10.63
;; global options: +cmd
;; got answer:
;; ->>header<<- opcode: query, status: noerror, id: 8478
;; flags: qr rd ra; query: 1, answer: 1, authority: 0, additional: 1

;; opt pseudosection:
; edns: version: 0, flags:; udp: 1280
;; question section:
;www.google.com. in a

;; answer section:
www.google.com. 204 in a 216.58.193.100

;; query time: 25 msec
;; server: 172.19.10.63#53(172.19.10.63)
;; when: thu dec 01 18:27:42 mst 2016
;; msg size  rcvd: 59

unsuccessful attempt to windows 2008 dns server in vm:

; <<>> dig 9.9.3 <<>> www.google.com @172.19.10.63 +client=127.0.0.1
;; global options: +cmd
;; got answer:
;; ->>header<<- opcode: query, status: formerr, id: 5218
;; flags: qr rd; query: 1, answer: 0, authority: 0, additional: 1
;; warning: recursion requested not available

;; opt pseudosection:
; edns: version: 0, flags:; udp: 4096
; client-subnet: 127.0.0.1/32/0
;; question section:
;www.google.com. in a

;; query time: 0 msec
;; server: 172.19.10.63#53(172.19.10.63)
;; when: thu dec 01 18:27:40 mst 2016
;; msg size  rcvd: 55

successful attempt google dns server:

; <<>> dig 9.9.3 <<>> www.google.com @8.8.8.8 +client=127.0.0.1
;; global options: +cmd
;; got answer:
;; ->>header<<- opcode: query, status: noerror, id: 14658
;; flags: qr rd ra; query: 1, answer: 1, authority: 0, additional: 1

;; opt pseudosection:
; edns: version: 0, flags:; udp: 512
; client-subnet: 127.0.0.1/32/0
;; question section:
;www.google.com. in a

;; answer section:
www.google.com. 12 in a 216.58.193.100

;; query time: 14 msec
;; server: 8.8.8.8#53(8.8.8.8)
;; when: thu dec 01 18:30:55 mst 2016
;; msg size  rcvd: 71

any suggestions appreciated.  i have tried 'dnscmd /config /enableednsprobes 0' , did not work.


hi scott,

>>i have tried 'dnscmd /config /enableednsprobes 0'

this setting disable edns0, please change 1 , try again.

please check article below further understanding:

edns0

https://technet.microsoft.com/en-us/library/dn308539(v=ws.10).aspx

please check link below install updates fix issue:

https://support.microsoft.com/en-us/kb/2550719

best regards

john

please remember mark replies answers if help.
if have feedback technet subscriber support, contact tnmff@microsoft.com.



Windows Server  >  Windows Server General Forum



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

RDS 2012 r2 collections show black screen and then close

-
Image
greetings,   have deployed 2 server 2012 r2 rds session collections (each 2 rdsh servers, , both going through same gateway/broker server), , during testing had no issues, rolled production, our users have been experiencing black screens when attempting log in, , remote desktop window closes (no actual login performed).   seems happen intermittently, , on both collections @ different times.  thought had solved disabling use of udp in rdp clients, wasn't permanent fix.   looking @ event log of 1 of affected servers, there seems event id 36 generated @ every logon attempt following message: an error occurred when transitioning csrconnected in response evcsrinitialized. (errorcode 0x80070102)   after scouring web looking answers, nothing came up.  here appreciated. edit:  apparently can't screenshot attach, located here: http://imgur.com/rlioxpd so, appears have figured out reason (although, i'm still unsure of root cause).  bi...
Read more