[Dnsmasq-discuss] seeing www.ietf.org fail dnssec with dnsmasq rc7

[Dave Taht]

I retried it with edns0 set to 1500 bytes, and it worked (falling back
to tcp). 1800 bytes did not.

an osx box was the client.

I did capture the transaction(s) this time, the failing queries and a
working one are at: http://snapon.lab.bufferbloat.net/~d/dnsmasq/

One of my concerns has always been what fq_codel's algorithm does to
fragmented packets in general... but I have not looked at this
captures...

The testing I was doing earlier (where ietf.org worked) was with a
linux box as the client a few days ago. I will resume testing that
later today, and also continue slamming dnsmasq with queries over ipv6
from the alexa top 1m....



On Wed, May 6, 2015 at 12:30 PM, Kevin Darbyshire-Bryant
<kevin at darbyshire-bryant.me.uk> wrote:
> Continues to work here on my iPhone hiding behind openwrt cc trunk dnsmasq2.73rc7
>
> Were I not on the iPhone I could do some dig'age :-)
>
> --
> Cheers,
>
> Kevin at Darbyshire-Bryant.me.uk
> Sent from my phone, apologies for brevity, spelling & top posting
>
>> On 6 May 2015, at 20:21, Dave Taht <dave.taht at gmail.com> wrote:
>>
>> nslookup www.ietf.org fails again... it did not fail a few days ago.
>>
>> chrome returns nxdomain
>>
>>
>> --
>> Dave Täht
>> Open Networking needs **Open Source Hardware**
>>
>> https://plus.google.com/u/0/+EricRaymond/posts/JqxCe2pFr67
>>
>> _______________________________________________
>> Dnsmasq-discuss mailing list
>> Dnsmasq-discuss at lists.thekelleys.org.uk
>> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss



-- 
Dave Täht
Open Networking needs **Open Source Hardware**

https://plus.google.com/u/0/+EricRaymond/posts/JqxCe2pFr67