Robert Bradley <robert.bradley1@gmail.com> writes:

> - I had to add my cable modem configuration address to the BCP38
> exception list (192.168.100.1).  This gets used for nothing except
> configuration and checking the modem logs so this is understandable.  I
> also end up adding a static route anyway since if Internet breaks, I
> need a route to the modem...

If you add a 'scope link' route on the wan interface, the BCP38 code
*should* pick this up automatically and add an exception. Would be cool
if you could test this :)

> - dnsmasq's default of dnssec-check-unsigned broke my DNS, since my
> ISP servers do not support DNSSEC. In that case, everything winds up
> as failing.

That's an interesting failure mode. FWIW you can point it at
8.8.8.8/8.8.4.4 instead if you want dnssec verification :)

-Toke