Return EDE OTHER error when DNSSEC validation abandoned.

This distinguishes the case where we found a message was bogus
from cases where the process failed.
This commit is contained in:
Simon Kelley
2025-01-12 16:00:09 +00:00
parent f162d344c0
commit b58276a73c
2 changed files with 14 additions and 4 deletions

View File

@@ -18,7 +18,7 @@
#define MAX_PROCS 20 /* default max no children for TCP requests */
#define CHILD_LIFETIME 150 /* secs 'till terminated (RFC1035 suggests > 120s) */
#define TCP_MAX_QUERIES 100 /* Maximum number of queries per incoming TCP connection */
#define TCP_TIMEOUT 5 /* timeout waiting to connect to an upstream server - double this for answer */
#define TCP_TIMEOUT 1 /* timeout waiting to connect to an upstream server - double this for answer */
#define TCP_BACKLOG 32 /* kernel backlog limit for TCP connections */
#define EDNS_PKTSZ 1232 /* default max EDNS.0 UDP packet from from /dnsflagday.net/2020 */
#define KEYBLOCK_LEN 40 /* choose to minimise fragmentation when storing DNSSEC keys */