Re: [Dnsmasq-discuss] [PATCH] Update DNSSEC timestamp file on process TERM

2015-07-27 Thread Simon Kelley
Patch applied. Many thanks. Cheers, Simon. On 18/07/15 20:51, Kevin Darbyshire-Bryant wrote: Patch to update the DNSSEC timestamp file upon receipt of SIGTERM. Helps to ensure the last known good time is noted at system shutdown. Signed-off-by: Kevin Darbyshire-Bryant

Re: [Dnsmasq-discuss] Cannot resolve csail.mit.edu with --dnssec

2015-07-27 Thread Simon Kelley
I just committed a fix to this. Cheers, Simon. On 17/07/15 10:54, Anders Kaseorg wrote: csail.mit.edu is a signed zone inside the unsigned mit.edu zone. (It happens to be registered in dlv.isc.org, but that’s not relevant to dnsmasq.) Since an NSEC3 record in edu verifies that mit.edu is

Re: [Dnsmasq-discuss] RFC5011?

2015-07-27 Thread Simon Kelley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I've considered it, and in an ideal world would like to implement it. My experience is the _nothing_ to do with DNSSEC is not too difficult and, to be honest, any system deploying the releases of dnsmasq with DNSSEC to-date which can't be updated is

Re: [Dnsmasq-discuss] [PATCH] --add-subnet custom values

2015-07-27 Thread Simon Kelley
Thanks for this. I plan to return to it in a week or so, once the 2.74 bugfix release is done. Cheers, Simon. On 25/07/15 03:36, Ed Bardsley wrote: Hi folks - I wrote up some changes to --add-subnet to, in addition to the current behavior, let you specify things like