Re: [Dnsmasq-discuss] Announce: dnsmasq-2.69rc1

2014-03-25 Thread Simon Kelley
On 24/03/14 23:29, sven falempin wrote: Yes it logs better when i launch with --dnssec-check-unsigned can i put these in the configuration file like bogus-priv : Yes, the set of --long-option and config-file keywords is identical, apart from a few which make no sense, like --version.

Re: [Dnsmasq-discuss] Announce: dnsmasq-2.69rc1

2014-03-24 Thread sven falempin
openbsd 5.4: pkg_add libnettle (ew) [make] $ ./src/dnsmasq --version Dnsmasq version 2.69rc1 Copyright (c) 2000-2014 Simon Kelley Compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth DNSSEC Would you please explain why the

Re: [Dnsmasq-discuss] Announce: dnsmasq-2.69rc1

2014-03-24 Thread sven falempin
On Mon, Mar 24, 2014 at 2:07 PM, Dave Taht dave.t...@gmail.com wrote: On Mon, Mar 24, 2014 at 10:45 AM, sven falempin sven.falem...@gmail.com wrote: openbsd 5.4: pkg_add libnettle (ew) [make] $ ./src/dnsmasq --version Dnsmasq version 2.69rc1 Copyright (c) 2000-2014 Simon Kelley

Re: [Dnsmasq-discuss] Announce: dnsmasq-2.69rc1

2014-03-24 Thread Simon Kelley
On 24/03/14 17:45, sven falempin wrote: openbsd 5.4: pkg_add libnettle (ew) [make] $ ./src/dnsmasq --version Dnsmasq version 2.69rc1 Copyright (c) 2000-2014 Simon Kelley Compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth

Re: [Dnsmasq-discuss] Announce: dnsmasq-2.69rc1

2014-03-24 Thread Toke Høiland-Jørgensen
Simon Kelley si...@thekelleys.org.uk writes: Note that you may want to add --dnssec-check-unsigned to the configuration. That will cause dnsmasq to ensure that unsigned replies are legit by ensuring that there exists secure denial of existence of a DS record somewhere on the path from the DNS

Re: [Dnsmasq-discuss] Announce: dnsmasq-2.69rc1

2014-03-22 Thread Simon Kelley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 22/03/14 21:41, Toke Høiland-Jørgensen wrote: Please run it if you can, and report any problems. If you can configure DNSSEC and test that, all the better. Installed and running. Fine so far :) Packages available at:

Re: [Dnsmasq-discuss] Announce: dnsmasq-2.69rc1

2014-03-22 Thread Toke Høiland-Jørgensen
Hmm, Debian has a useful character, '~' which sorts after everything else, and the packaging scripts turn 2.69test1 into 2.69~~test1 and 2.69rc1 into 2.69~rc1 to avoid this problem. Does the same facility exist in Arch? No idea; pretty sure it doesn't have a way to do it automatically, at