Re: lwdnsq(8)

| From: Michael Richardson <[email protected]>

I had a quick glance at this man page.

|        If the --single option is given, then the program will not
|        attempt  to execute concurrent queries, but will serialize
|        all input and output.

Perhaps "--single" would be better called "--serial" or "--serialize"
(be lead by the description).

|        ID     this  is the queryid value that was provided in the
|        --
|               query. It is repeated on every line to  permit  the
|               replies to be properly associated with the query.

When the response is not ascribed to a query, a queryid of "0" is
used.

|        All of the replies which include resource records use  the
|        standard  presentation  format (with no line feeds or car­
|        riage returns) in their answer.

I understand that standard presentation format requires strings to be
less than 256 characters so TXT records we use would have multiple
strings.  But I think that lwdnsq always shows this as a single
string.

| OE DIRECTIVES
|        If  the file /etc/ipsec.d/lwdnsq.conf exists, and contains
|        a line like
| 
| 
|        queryany=false
| 
|         then instead of doing an ALL query when  looking  for  OE
|        delegation records, lwdnsq will do a series of queries. It
|        will first look for IPSECKEY, and then TXT record.  If  it
|        finds  neither,  it  will then look for KEY records of all
|        kinds, although they do not  contain  delegation  informa­
|        tion.

I'm still not convinced ANY works the way you think it does.


This man page needs a FILES section listing /etc/ipsec.d/lwdnsq.conf.

Hugh Redelmeier
[email protected]  voice: +1 416 482-8253