From c27b38b437fa82a2227d554f4855c116395995ce Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 13 Feb 2019 17:45:05 +0000 Subject: [PATCH] dns: Always enable EDNS0 This is for all DNS queries originating from the firewall. Since we have had DNS Flag Day, we are expecting all DNS servers to support this now. If not, then you are very unlucky. Signed-off-by: Michael Tremer --- src/functions/functions.dns | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/functions/functions.dns b/src/functions/functions.dns index 4cd5cb4c..890f1aca 100644 --- a/src/functions/functions.dns +++ b/src/functions/functions.dns @@ -245,6 +245,9 @@ dns_generate_resolvconf() { config_header "resolver configutation file" > ${file} + # Always enable EDNS0 + print "option edns0\n" >> "${file}" + if enabled DNS_RANDOMIZE; then print "option rotate\n" >> ${file} fi -- 2.39.2