Re: dnscache and oversized answers

>> Thanks, that works great.
>> 
>> From a security point of view, it'd probably be better to check the
>> irrelevant bit before falling back to TCP, but that seems like a minor
>> bug since at worst it'd provoke redundant lookups to the real server.
>
>Don't you need the whole packet (which has just been truncated) to call
>irrelevant()?

It might need a little work; irrelevant appears mostly to check the
serial number and the name which should be there even if it's
truncated, but to do it right you'd need to add more defensive code.

R's,
John