Package: nsd Severity: normal Hello,
Please deliver a default configuration which prevents fragmentation of UDP EDNS datagrams. DNS Flag Day 2020 is focusing "on the operational and security problems in DNS caused by Internet Protocol packet fragmentation." https://dnsflagday.net/ They recommend: server: ipv4-edns-size: 1232 ipv6-edns-size: 1232 FYI, it seems the DNS Flag Day people involve some big players. They are interested in removing work-arounds from their own systems which provide interoperability with other people's poorly configured or poorly operating DNS servers. See also Bug#947028. Regards, Karl -- System Information: Debian Release: 9.11 APT prefers oldstable APT policy: (500, 'oldstable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-11-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages nsd depends on: ii adduser 3.115 ii init-system-helpers 1.48 ii libc6 2.24-11+deb9u4 ii libevent-2.0-5 2.0.21-stable-3 ii libssl1.1 1.1.0l-1~deb9u1 ii lsb-base 9.20161125 ii openssl 1.1.0l-1~deb9u1 nsd recommends no packages. nsd suggests no packages.
