diff --git a/src/dnsmasq.h b/src/dnsmasq.h
index a59bb19..6c62a52 100644
--- a/src/dnsmasq.h
+++ b/src/dnsmasq.h
@@ -56,6 +56,9 @@ typedef unsigned short u16;
 typedef unsigned int u32;
 typedef unsigned long long u64;
 
+#define countof(x)      (long)(sizeof(x) / sizeof(x[0]))
+#define MIN(a,b)        ((a) < (b) ? (a) : (b))
+
 #include "dns-protocol.h"
 #include "dhcp-protocol.h"
 #ifdef HAVE_DHCP6
diff --git a/src/dnssec.c b/src/dnssec.c
index 1c7bba8..1e95479 100644
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -8,9 +8,6 @@
 #define SERIAL_LT       -1
 #define SERIAL_GT        1
 
-#define countof(x)      (long)(sizeof(x) / sizeof(x[0]))
-#define MIN(a,b)        ((a) < (b) ? (a) : (b))
-
 /* Updated registry that merges various RFCs:
    https://www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.xml */
 static const VerifyAlg valgs[] =