From: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed, 13 Feb 2019 17:45:05 +0000 (+0000)
Subject: dns: Always enable EDNS0
X-Git-Url: http://git.ipfire.org/?p=network.git;a=commitdiff_plain;h=c27b38b437fa82a2227d554f4855c116395995ce

dns: Always enable EDNS0

This is for all DNS queries originating from the firewall.

Since we have had DNS Flag Day, we are expecting all DNS servers
to support this now. If not, then you are very unlucky.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/functions/functions.dns b/src/functions/functions.dns
index 4cd5cb4c..890f1aca 100644
--- a/src/functions/functions.dns
+++ b/src/functions/functions.dns
@@ -245,6 +245,9 @@ dns_generate_resolvconf() {
 
 	config_header "resolver configutation file" > ${file}
 
+	# Always enable EDNS0
+	print "option edns0\n" >> "${file}"
+
 	if enabled DNS_RANDOMIZE; then
 		print "option rotate\n" >> ${file}
 	fi