From: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed, 13 Feb 2019 17:45:05 +0000 (+0000)
Subject: dns: Always enable EDNS0
X-Git-Url: http://git.ipfire.org/?p=people%2Fms%2Fnetwork.git;a=commitdiff_plain;h=c27b38b437fa82a2227d554f4855c116395995ce;hp=eb6b47dcc7d5d541064ad90787ae55df3c3a8453

dns: Always enable EDNS0

This is for all DNS queries originating from the firewall.

Since we have had DNS Flag Day, we are expecting all DNS servers
to support this now. If not, then you are very unlucky.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/functions/functions.dns b/src/functions/functions.dns
index 4cd5cb4c..890f1aca 100644
--- a/src/functions/functions.dns
+++ b/src/functions/functions.dns
@@ -245,6 +245,9 @@ dns_generate_resolvconf() {
 
 	config_header "resolver configutation file" > ${file}
 
+	# Always enable EDNS0
+	print "option edns0\n" >> "${file}"
+
 	if enabled DNS_RANDOMIZE; then
 		print "option rotate\n" >> ${file}
 	fi