Wow... thank you for the advice and link! There goes my weekend ;-) -R -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Doug Barton Sent: Wednesday, August 20, 2014 11:09 AM To: [email protected] Subject: Re: [Dnssec-deployment] Validating Resolvers
On 8/20/14 9:43 AM, Richard Lamb wrote: > This is cool. Do you have a link to where I might find instructions to build the DNSSEC capable dnsmasq for OpenWRTish devices? Rick, You don't have to build it, they have a dnsmasq-full package that includes it. But be aware that this pulls in about 400k of other packages to support the DNSSEC function, so you need to have the available flash to support it. I've had very good luck with building a custom image using the OpenWrt Image Builder tool. They pre-compile all the packages, you download the tarball, and then the makefile will put together what you want, and leave out what you don't want. For example, I can get dnsmasq-full onto an image for my current router if I leave out luci. But since I've already got the configuration I need, that's not a great loss. You can also include the conf files in the custom image, so when the router comes up after flashing it is already configured and ready to roll. Crunching packages into a custom image is also a lot more efficient than adding them to the /overlay file system after install. More info here: http://wiki.openwrt.org/doc/howto/obtain.firmware.generate ... and btw, you have to start with Barrier Breaker to get the DNSSEC-capable dnsmasq. They are currently on -rc3, and it seems to be going Ok for me so far. hth, Doug
smime.p7s
Description: S/MIME cryptographic signature
