From: Remi Gacogne Date: Wed, 14 Jun 2017 12:26:18 +0000 (+0200) Subject: rec: Disable use-incoming-edns-subnet by default X-Git-Tag: rec-4.0.6~10^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F5405%2Fhead;p=thirdparty%2Fpdns.git rec: Disable use-incoming-edns-subnet by default (cherry picked from commit a16c4536496ab0d3cf959bcb45e7a6cf41d02e3e) --- diff --git a/pdns/pdns_recursor.cc b/pdns/pdns_recursor.cc index b3b0fe205c..67c9aedd46 100644 --- a/pdns/pdns_recursor.cc +++ b/pdns/pdns_recursor.cc @@ -3080,7 +3080,7 @@ int main(int argc, char **argv) ::arg().set("ecs-ipv4-bits", "Number of bits of IPv4 address to pass for EDNS Client Subnet")="24"; ::arg().set("ecs-ipv6-bits", "Number of bits of IPv6 address to pass for EDNS Client Subnet")="56"; ::arg().set("edns-subnet-whitelist", "List of netmasks and domains that we should enable EDNS subnet for")=""; - ::arg().setSwitch( "use-incoming-edns-subnet", "Pass along received EDNS Client Subnet information")=""; + ::arg().setSwitch( "use-incoming-edns-subnet", "Pass along received EDNS Client Subnet information")="no"; ::arg().setSwitch( "pdns-distributes-queries", "If PowerDNS itself should distribute queries over threads")=""; ::arg().setSwitch( "root-nx-trust", "If set, believe that an NXDOMAIN from the root means the TLD does not exist")="yes"; ::arg().setSwitch( "any-to-tcp","Answer ANY queries with tc=1, shunting to TCP" )="no";