dnsmasq with unbound as upstream - DNSSEC
Peter Russel
jpgpi250 at gmail.com
Sat Apr 8 13:44:11 UTC 2023
Hi George
There may be a bug in the code that attaches EDE codes for DNSSEC
validation failures to the SERVFAIL answers
I've created an unbound issue here:
https://github.com/NLnetLabs/unbound/issues/873
Apparently, the EDE codes aren't always present, extensive log and
pcap file data available in the pi-hole topic
(https://discourse.pi-hole.net/t/dnssec-discussion-support-for-proxy-dnssec/62217/21)
can you please have a look
Thanks
More information about the Unbound-users
mailing list