Can DNSSEC resolvers pass through all mangling CPEs?

Hello, We are seeing more DNSSEC all the way to the desktop, thanks to NLnet Labs products like libunbound and GetDNS. Hooray! What I am wondering is, if this also resolves all issues relating to NAT/firewall traversal of DNS. Quite a few CPE boxes are known to mangle DNS traffic under their de

Re: Can DNSSEC resolvers pass through all mangling CPEs?

Hi Tony / list, > DNSSEC detects and blocks mangling, it does not bypass it. Thanks, I know. What I am wondering is if the approach of recursive resolution, not explicitly going through the CPE, suffices to avoid mangling. The CPE *could* still force control over DNS traffic on account of tar

Trying to fetch SRV data with libunbound / libldns

Hello, I'm trying to use libunbound (and possibly libldns) to pull out SRV records. I am not certain how to proceed, based on the documentation that I could found in the form of man pages, tutorials and doxygen. Am I correct that libunbound returns RDATA unmodified, and is basically concerned wi

Re: Trying to fetch SRV data with libunbound / libldns

Ah! Thanks a lot guys! Even with code :) Looks like I was on the right track after all, but struggled to find the vital routines ldns_dname_new_frm_data() and ldns_rdf2str() -- and their pragmatically short names made it difficult for me / newbee to find them. The uncompressed names are vita

Flags?

Hi, Unbound sets a number of very useful flags after it has completed a query, to check the security status. But there are a few places where I'm unsure what to check, and in what order. For instance, the security of not having found any data or domain. Is there anywhere I can find something li

Preview of data before security is established

Hello, Is there any way for an asynchronous program to get a preview of DNS data that is in the process of being validated? For instance, we sometimes need to go over these three records in a sequence... _kerberos.arpa2.org. IN TXT "ARPA2.ORG" _kerberos._udp.arpa2.org. IN SRV 10 10 88

Re: Flags?

Hi Wouter, Thanks for the additional info. >> Resultant state | Secure | Bogus | Nxdomain >> ++---+--- >> happy |0 | 1 |0 >> extatic |1 | 0 |0 > > Adding nxdomain to the list is weird. Also the tabl

Porting Unbound to MXE

Hi Wouter / others, We're trying to include Unbound into MXE, a cross-platform toolkit for Windows, http://mxe.cc Just like the KDE folks, we see this as a good way to roll out our software to that platform. The documentation online on how to compile Unbound for Windows is limited, so we're a bit

Re: Porting Unbound to MXE

Hello, Should this in configure.ac... > # are we on MinGW? > if uname -s 2>&1 | grep MINGW32 >/dev/null; then on_mingw="yes" > else > if echo $target | grep mingw32 >/dev/null; then on_mingw="yes" > else on_mingw="no"; fi > fi ...have been... > # are we on MinGW? > if uname -s

Re: Porting Unbound to MXE

Wouter, Could you give us the command sequence that you use for cross-compiling Unbound for Windows? We're reverse engineering it from autoconfig stuff now, and that's not a lot of fun. -Rick

pkg-config

Hi, Is there a reason why no pkg-config pattern file is included with Unbound? Are you perhaps assuming that package builders write these files? [I can imagine a basic version being appreciated by them -- since it contains knowledge about the way the package is made.] -Rick

Relation between ub_fd/ub_poll/ub_process and ub_ctx_async

Hello, I'm not quite clear on the relation between ub_ctx_async() on the one hand, and ub_fd(), ub_poll() and ub_process() the other hand. The latter triple can clearly be integrated with an event loop, but the former seems to suggest that background threads or processes are used. If I use ub_re