Does Support EDNS0 ?

[yon]

I have dns server in PF LAN network.  I have find the wrong.  then PF v2.2.5 support EDNS0 or how I do config right?

http://support.simpledns.com/kb/a149/not-resolving-internet-domains-returns-rcode-2-server-failure.aspx#kbref
https://www.icann.org/groups/ssac/documents/sac-016-en

Test if your Firewall implementation accommodates Type AAAA RRs

To test the action a firewall implementation takes when it encounters Type AAAA resource records, a network or firewall administrator can perform the following DNS lookup using the popular dig program:

dig hk ns @203.119.2.18

This command should elicit a 508 bytes response that contains AAAA resource records:

If no response is received, network and firewall administrators should first determine if a security policy other than the vendor's default processing for DNS messages is blocking the response message. If no policy other than the vendor's default processing is configured, note the implementation and version, and contact your vendor to determine if an upgrade or hot fix is available.

[doktornotor]

https://github.com/pfsense/pfsense/search?utf8=%E2%9C%93&q=edns