[OpenWrt-Devel] Implementing DNSSEC

2014-05-13 Thread Erik Rigtorp
Hi,

I recently submitted a patch to bump dnsmasq to 2.70. The main new
feature in 2.70 is support for DNSSEC. If dnsmasq is updated my next
patch is to enable a build flag to build dnsmasq with DNSSEC support.

Also there is no maintainer listed in the dnsmasq Makefile.

Thanks,
Erik
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel


Re: [OpenWrt-Devel] Implementing DNSSEC

2014-05-13 Thread Yousong Zhou
Hi, Erik.

On 14 May 2014 11:35, Erik Rigtorp e...@rigtorp.se wrote:
 Hi,

 I recently submitted a patch to bump dnsmasq to 2.70. The main new
 feature in 2.70 is support for DNSSEC. If dnsmasq is updated my next
 patch is to enable a build flag to build dnsmasq with DNSSEC support.


Can you also pick up build flags for ipset and authoritative DNS
server?  I posted a patch [1] for the purpose a while back.  Maybe it
will help.

[1] http://patchwork.openwrt.org/patch/5243/


Regards.

yousong

 Also there is no maintainer listed in the dnsmasq Makefile.

 Thanks,
 Erik
 ___
 openwrt-devel mailing list
 openwrt-devel@lists.openwrt.org
 https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel


Re: [OpenWrt-Devel] Implementing DNSSEC

2014-05-13 Thread David Lang

On Tue, 13 May 2014, Erik Rigtorp wrote:


Hi,

I recently submitted a patch to bump dnsmasq to 2.70. The main new
feature in 2.70 is support for DNSSEC. If dnsmasq is updated my next
patch is to enable a build flag to build dnsmasq with DNSSEC support.


A word of warning here, enabling DNSSEC can actually knock you off the network 
due to broken ISPs, cerowrt has spent a lot of time over the last couple of 
months working on this. I would suggest at least reading through the issues 
they've been having making things work in the real world before enabling this.


David Lang



Also there is no maintainer listed in the dnsmasq Makefile.

Thanks,
Erik
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel


___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel