Re: ECS subnet

2025-02-17 Thread Petr Špaček

On 14. 02. 25 17:41, Rainer Duffner wrote:

Am 14.02.2025 um 17:39 schrieb Greg Choules 
:

Hi.
Is this a question about BIND, or Unbound?
Note the name of the list.




No, it’s a question about BIND.

If an upstream resolver sends an ECS subnet (it’s in the packet header 
somewhere, from what I understand) - how can BIND show this in the logs?


ECS is not supported in the open source version of BIND so I guess it 
might not get logged. What you can do is enable PROXYv2 support, 
assuming Unbound supports it.


--
Petr Špaček
Internet Systems Consortium
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: ECS subnet

2025-02-17 Thread Rainer Duffner


> Am 17.02.2025 um 18:00 schrieb Petr Špaček :
> 
> ECS is not supported in the open source version of BIND so I guess it might 
> not get logged. What you can do is enable PROXYv2 support, assuming Unbound 
> supports it.


Unfortunately, it looks like it doesn’t support it sending requests downstream.


:-(




Rainer-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: ECS subnet

2025-02-17 Thread Carlos Horowicz via bind-users

Hi,

you mean "edns-client-subnet yes;" in opensource bind9.18 right ?  
("unknown option 'edns-client-subnet'")


-Carlos

On 17/02/2025 18:00, Petr Špaček wrote:

On 14. 02. 25 17:41, Rainer Duffner wrote:
Am 14.02.2025 um 17:39 schrieb Greg Choules 
:


Hi.
Is this a question about BIND, or Unbound?
Note the name of the list.




No, it’s a question about BIND.

If an upstream resolver sends an ECS subnet (it’s in the packet 
header somewhere, from what I understand) - how can BIND show this in 
the logs?


ECS is not supported in the open source version of BIND so I guess it 
might not get logged. What you can do is enable PROXYv2 support, 
assuming Unbound supports it.



--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users