From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wg0-x232.google.com (mail-wg0-x232.google.com [IPv6:2a00:1450:400c:c00::232]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 484B721F21C for ; Thu, 1 May 2014 15:27:23 -0700 (PDT) Received: by mail-wg0-f50.google.com with SMTP id k14so2779249wgh.33 for ; Thu, 01 May 2014 15:27:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=DUGjR3oQujLIHSEuHgETD4Iqb0hjTITV94/B8zu5lJc=; b=i+ilrqC32nyBYZIizdMgSujczBIE7hWBuLPazB00KgiciDu4ZY+4zEgGIjAuvbtHQK HmrHOgsgVAMjUOH1UAWTmmiP7ChGJK88UMiAcSC0LMR4JNnX1fOQevcm4vUBrEddhnTf g4MzfUKziH6akreGMWmuoNRntVSSJucW22W2vUNZApXobQ2Xb2KwlVLN3zeNckvXcqZW 7cTpzw5vyCb4oGIbvl2d/3IzJO2zQ/Z7VCU1yJi27YEQh8SlGWGruoVIRfroLY9Oiwem O1aIPAJSOut09xGmaphFFVD7YbY61e1V4seOFMGFATy6FGNKIcWoILu14tSMzVzewwTg Q+0A== MIME-Version: 1.0 X-Received: by 10.180.14.233 with SMTP id s9mr3853693wic.53.1398983240889; Thu, 01 May 2014 15:27:20 -0700 (PDT) Received: by 10.216.207.82 with HTTP; Thu, 1 May 2014 15:27:20 -0700 (PDT) In-Reply-To: References: <535EACCB.7090104@thekelleys.org.uk> <20140428232459.GA55372@redoubt.spodhuis.org> <535FA793.8020502@thekelleys.org.uk> <20140429205757.GA70801@redoubt.spodhuis.org> <53629461.6020500@thekelleys.org.uk> Date: Thu, 1 May 2014 15:27:20 -0700 Message-ID: From: Dave Taht To: Rich Brown Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: dnsmasq-discuss , "cerowrt-devel@lists.bufferbloat.net" Subject: Re: [Cerowrt-devel] [Dnsmasq-discuss] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014 X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 May 2014 22:27:23 -0000 On Thu, May 1, 2014 at 1:26 PM, Rich Brown wrote: > > On May 1, 2014, at 2:37 PM, Simon Kelley wrote: > >> On 30/04/14 18:26, Dave Taht wrote: >>> On Tue, Apr 29, 2014 at 1:57 PM, Phil Pennock >>> wrote: > > snip, snip snip... > >>> Is the consensus to not run with negative proofs on at this juncture? >> >> If you want stuff to just work, turn off negative proofs, if you want to >> push the envelope, leave them on and complain to domain-admins. >> >> I had some feeling that something like this might be a problem, hence >> the discrete controls. > > I apologize that I haven't been following this closely, but so I'm going = to ask a TL;DR question. > > Which places in the OpenWrt/CeroWrt GUI (or the config files) do I use to= wiggle these levers? There is no gui support as yet. enablement is via /etc/dnsmasq.conf I disabled (commented out) the negative proof checks in the 3.10.38-2 relea= se. > Thanks! > > Rich --=20 Dave T=C3=A4ht NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_= indecent.article