From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-qg0-x231.google.com (mail-qg0-x231.google.com [IPv6:2607:f8b0:400d:c04::231]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id A769B21F19B for ; Thu, 1 May 2014 13:26:47 -0700 (PDT) Received: by mail-qg0-f49.google.com with SMTP id j5so3752737qga.22 for ; Thu, 01 May 2014 13:26:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=McIFhq0iy+Kjc+v/ZzDawjPMaBhiB1lm6tyHYmk1IJg=; b=jnPw7XnMq7LClqvH7cQGSU9RMBY7qoQni7HTb3PIl9qojQ4hebHWf3pv7FclB1J8LU mJJ8yA30e5tLt2Wyesd1sdv+9Xrq5DB+iom888GYQr+c4IVlGIYxil97AS/cro6mHC8x gjFkuWNSA5IueDR+mImVtkqajgThJSfRIsvMwqXK9bjvaggeW57bnUXW6IfKDpldeNDo AQSWVClqi6ObKgRjPd6OLFLewVvSzD2+vsxthPX0cVO3tY1pYgoc4LTFqlfbmyRds2GC trFvQpX5bSO5ciD9vq+tYDNnzW6YGCK/lpwp19uN28Zl/n9XZe6rfTJrAwLvArp2EugU irJQ== X-Received: by 10.224.57.142 with SMTP id c14mr16956761qah.23.1398976006500; Thu, 01 May 2014 13:26:46 -0700 (PDT) Received: from richs-mbp-4431.home.lan (d-ptld-bng1-71-161-115-228.ngn.east.myfairpoint.net. [71.161.115.228]) by mx.google.com with ESMTPSA id o16sm18339440qax.23.2014.05.01.13.26.45 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 01 May 2014 13:26:45 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\)) From: Rich Brown In-Reply-To: <53629461.6020500@thekelleys.org.uk> Date: Thu, 1 May 2014 16:26:35 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <535EACCB.7090104@thekelleys.org.uk> <20140428232459.GA55372@redoubt.spodhuis.org> <535FA793.8020502@thekelleys.org.uk> <20140429205757.GA70801@redoubt.spodhuis.org> <53629461.6020500@thekelleys.org.uk> To: Simon Kelley X-Mailer: Apple Mail (2.1874) Cc: dnsmasq-discuss , "cerowrt-devel@lists.bufferbloat.net" Subject: Re: [Cerowrt-devel] [Dnsmasq-discuss] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014 X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 May 2014 20:26:47 -0000 On May 1, 2014, at 2:37 PM, Simon Kelley = wrote: > On 30/04/14 18:26, Dave Taht wrote: >> On Tue, Apr 29, 2014 at 1:57 PM, Phil Pennock >> wrote: snip, snip snip... >> Is the consensus to not run with negative proofs on at this juncture? >=20 > If you want stuff to just work, turn off negative proofs, if you want = to > push the envelope, leave them on and complain to domain-admins. >=20 > I had some feeling that something like this might be a problem, hence > the discrete controls. I apologize that I haven't been following this closely, but so I'm going = to ask a TL;DR question. Which places in the OpenWrt/CeroWrt GUI (or the config files) do I use = to wiggle these levers? Thanks! Rich=