dnsmasq with unbound as upstream - DNSSEC

Peter Russel jpgpi250 at gmail.com
Sat Apr 8 13:44:11 UTC 2023


Hi George

There may be a bug in the code that attaches EDE codes for DNSSEC
validation failures to the SERVFAIL answers

I've created an unbound issue here:
https://github.com/NLnetLabs/unbound/issues/873

Apparently, the EDE codes aren't always present, extensive log and
pcap file data available in the pi-hole topic
(https://discourse.pi-hole.net/t/dnssec-discussion-support-for-proxy-dnssec/62217/21)

can you please have a look

Thanks


More information about the Unbound-users mailing list