wt/dnsmasq
1
0 Fork 0
mirror of http://thekelleys.org.uk/git/dnsmasq.git synced 2026-10-31 13:10:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove --dnssec-permissive, pointless if we don't set CD upstream.

Browse Source
This commit is contained in:
Simon Kelley committed 2014-01-26 09:33:21 +00:00
1 parent 703c7ff429
commit 7d23a66ff0
3 files changed
+4 -20
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/forward.c
+1 -14
View File
@@ -608,20 +608,7 @@ static size_t process_reply(struct dns_header *header, time_t now, struct server
#ifdef HAVE_DNSSEC
if (no_cache && !(header->hb4 & HB4_CD))
{
if (option_bool(OPT_DNSSEC_PERMISS))
{
unsigned short type;
char types[20];
if (extract_request(header, (size_t)n, daemon->namebuff, &type))
{
querystr("", types, type);
my_syslog(LOG_WARNING, _("DNSSEC validation failed: query %s%s"), daemon->namebuff, types);
}
else
my_syslog(LOG_WARNING, _("DNSSEC validation failed for unknown query"));
}
else
if (!option_bool(OPT_DNSSEC_DEBUG))
{
/* Bogus reply, turn into SERVFAIL */
SET_RCODE(header, SERVFAIL);