I’ve been complaining for YEARS about lack of EDNS compliance.

If you run really old Windows DNS servers you are broken.

If you run a firewall in front of your DNS server you may be broken.

If you are QWEST you are broken.

Mark