From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.252.184]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by huchra.bufferbloat.net (Postfix) with ESMTPS id 707C321F1FA for ; Sat, 12 Apr 2014 13:54:23 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 0AC2820011; Sat, 12 Apr 2014 16:54:29 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id 4D18663ABA; Sat, 12 Apr 2014 16:54:21 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 3663663AB6; Sat, 12 Apr 2014 16:54:21 -0400 (EDT) From: Michael Richardson To: Robert Bradley In-Reply-To: <5349A26B.2020105@gmail.com> References: <53491E4F.4040108@gmail.com> <878urakdj7.fsf@alrua-x1.kau.toke.dk> <53492939.4090508@gmail.com> <874n1ykb68.fsf@alrua-x1.kau.toke.dk> <53493083.40808@gmail.com> <3489.1397329632@sandelman.ca> <5349A26B.2020105@gmail.com> X-Mailer: MH-E 8.2; nmh 1.3-dev; GNU Emacs 23.4.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Sender: mcr@sandelman.ca Cc: cerowrt-devel Subject: Re: [Cerowrt-devel] DNSSEC failure for *.cloudflare.com via dnsmasq? X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Apr 2014 20:54:23 -0000 Robert Bradley wrote: >> Did I understand that your dnsmasq is using 8.8.8.8 as it's upstream >> forwarder, so your results are filtered through google? > Yes, that's right. I think that there is some interaction between dnsmasq doing DNSSEC, and Google DNS doing it as well. Can you try with some other open resolver that does not do DNSSEC resolution? -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [