Re: [Dnsmasq-discuss] dnsmasq and AD flag forwarding

2013-12-17 Thread Simon Kelley
On 16/12/13 11:13, Tomas Hozza wrote: - Original Message - I can see at least one bug in the code: in the code-path taken to answer a query from the cache, the value of the AD flag is never changed: it simply takes the value that it had in the query. I guess the authenticated status of

Re: [Dnsmasq-discuss] dnsmasq and AD flag forwarding

2013-12-16 Thread Tomas Hozza
- Original Message - I can see at least one bug in the code: in the code-path taken to answer a query from the cache, the value of the AD flag is never changed: it simply takes the value that it had in the query. I guess the authenticated status of the data should be cached, and used

Re: [Dnsmasq-discuss] dnsmasq and AD flag forwarding

2013-12-12 Thread Simon Kelley
On 11/12/13 13:52, Tomas Hozza wrote: Hi. I have been trying to understand what --proxy-dnssec option does. From what I understand if NOT used, dnsmasq will NOT forward the AD flag set by the upstream server to its clients. If the --proxy-dnssec option is used, dnsmasq WILL forward the AD

[Dnsmasq-discuss] dnsmasq and AD flag forwarding

2013-12-11 Thread Tomas Hozza
Hi. I have been trying to understand what --proxy-dnssec option does. From what I understand if NOT used, dnsmasq will NOT forward the AD flag set by the upstream server to its clients. If the --proxy-dnssec option is used, dnsmasq WILL forward the AD flag in the DNS answer IF it was set by the