Read http://jdebp.eu./FGA/dns-edns0-and-firewalls.html http://jdebp.eu./FGA/dns-edns0-and-firewalls.html for an explanation. What is happening is that all of t

Read http://jdebp.eu./FGA/dns-edns0-and-firewalls.html http://jdebp.eu./FGA/dns-edns0-and-firewalls.html for an explanation. What is happening is that all of the stuff that I have been explaining in the "Local fix" section for a decade and a half, alongside the practice that clients had of timing out and then retrying the transaction without the extensions, is now being declared moot. If DNS lookup does not work because of this problem, it is being declared entirely the server-end's problem. Clients are no longer going to be expected to put such local fixes in place, or have timeout and retry bodges.