[Dnsmasq-discuss] Possible to enable DNSSEC only for specific upstream servers?

[wkitty42 at gmail.com]

On 10/19/24 9:51 AM, Kevin P. Fleming wrote:
> Unfortunately when the 'general' usptream resolvers provided by the 
> hotel/airplane/etc. don't provide RRSIG in their responses, I have to disable 
> the global 'dnssec' setting in dnsmasq, otherwise all DNS resolution is broken.

if they are using "walled gardens", my first thought will likely not work... 
that thought being to set your DNS server to always look to well known servers 
that do provide what you need... eg: always override to 8.8.8.8 and 4.4.4.4...

it is possible they may be intercepting DNS queries and forcing them to their 
servers which will negate my suggestion thought, too...


-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list unless*
        *a signed and pre-paid contract is in effect with us.*