dnsmasq with unbound as upstream - DNSSEC
    Peter Russel 
    jpgpi250 at gmail.com
       
    Sat Apr  8 13:44:11 UTC 2023
    
    
  
Hi George
There may be a bug in the code that attaches EDE codes for DNSSEC
validation failures to the SERVFAIL answers
I've created an unbound issue here:
https://github.com/NLnetLabs/unbound/issues/873
Apparently, the EDE codes aren't always present, extensive log and
pcap file data available in the pi-hole topic
(https://discourse.pi-hole.net/t/dnssec-discussion-support-for-proxy-dnssec/62217/21)
can you please have a look
Thanks
    
    
More information about the Unbound-users
mailing list