On 10/04/2014 15:32, Toke Høiland-Jørgensen wrote:
> Robert Bradley <robert.bradley1@gmail.com> writes:
>
>> - I had to add my cable modem configuration address to the BCP38
>> exception list (192.168.100.1).  This gets used for nothing except
>> configuration and checking the modem logs so this is understandable.  I
>> also end up adding a static route anyway since if Internet breaks, I
>> need a route to the modem...
> If you add a 'scope link' route on the wan interface, the BCP38 code
> *should* pick this up automatically and add an exception. Would be cool
> if you could test this :)

Just tested this now and it works fine. :)

>> - dnsmasq's default of dnssec-check-unsigned broke my DNS, since my
>> ISP servers do not support DNSSEC. In that case, everything winds up
>> as failing.
> That's an interesting failure mode. FWIW you can point it at
> 8.8.8.8/8.8.4.4 instead if you want dnssec verification :)

I was tempted to leave it as-is, but tested it now with a custom
/tmp/resolv.conf.manual file and it also works well with added DNSSEC
checks.

-- 
Robert Bradley