Re: [Dnsmasq-discuss] Cannot set edns-packet-max < 4096 with DNSSEC enabled

2014-12-15 Thread Simon Kelley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I confess I can't come up with a sensible rationalisation for this, but I think it has something to to with the immediately preceding commit in dnsmasq, which adds, this code. + if (header->hb3 & HB3_TC) + { + /* Trunca

[Dnsmasq-discuss] Cannot set edns-packet-max < 4096 with DNSSEC enabled

2014-11-25 Thread Anders Kaseorg
dnsmasq refuses to honor an --edns-packet-max option less than EDNS_PKTSZ == 4096: #ifdef HAVE_DNSSEC /* Enforce min packet big enough for DNSSEC */ if (option_bool(OPT_DNSSEC_VALID) && daemon->edns_pktsz < EDNS_PKTSZ) daemon->edns_pktsz = EDNS_PKTSZ; #endif Since 4096 is already the de