SUSE Support

Here When You Need Us

DNS Flag Day - Disabling some DNS compatibility features

This document (7023663) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 10
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 15

Situation

Administrators operating DNS (Domain Name System) servers are potentially being affected by the DNS Flag Day.

The operators of the world DNS infrastructure will switch to a stricter handling of EDNS0 flagging, and servers that are improperly firewalled or misbehave will no longer considered to be working in the worlds DNS infrastructure.

While most regular DNS software supports this for a long time, firewall appliances might filter the EDNS0 requests incorrectly.

The website https://dnsflagday.net/ links to an online compliance tester to check if your site is set up correctly, both software and firewall wise. The focus here is more around  EDNS0 
The website https://ednscomp.isc.org/ links to an online compliance tester checking all the features of EDNS.


Resolution

SUSE already ships ISC (Internet Systems Consortium) BIND (Berkeley Internet Name Domain) 9 versions in SUSE Linux Enterprise 10 and newer and these versions are compliant with the wanted EDNS0 flag usage.

Cause

Stricter handling of the EDNS0 requests.

Additional Information

For  more information about DNS Flag Day - February 1, 2019, please see  the ISC details here.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7023663
  • Creation Date: 23-Jan-2019
  • Modified Date:03-Mar-2020
    • SUSE Linux Enterprise Server

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com

tick icon

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

tick icon

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.

tick icon

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.