Merge messages for release.
diff --git a/po/de.po b/po/de.po
index d99c4d2..a8a83e0 100644
--- a/po/de.po
+++ b/po/de.po
@@ -23,70 +23,70 @@
 "X-Generator: Poedit 2.0.1\n"
 "X-Poedit-SourceCharset: UTF-8\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr "Interner Fehler im Cache."
 
-#: cache.c:923
+#: cache.c:928
 #, c-format
 msgid "failed to load names from %s: %s"
 msgstr "Fehler beim Laden der Namen von %s: %s"
 
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, c-format
 msgid "bad address at %s line %d"
 msgstr "Fehlerhafte Adresse in %s Zeile %d"
 
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr "Fehlerhafter Name in %s Zeile %d"
 
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr "%s gelesen - %d Adressen"
 
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr "Cache geleert"
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr "Keine IPv4-Adresse für %s gefunden"
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr "%s ist ein CNAME, weise es der DHCP-Lease von %s nicht zu"
 
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr "Name %s wurde dem DHCP-Lease von %s nicht zugewiesen, da der Name in %s bereits mit Adresse %s existiert"
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr "Zeit %lu"
 
-#: cache.c:1414
+#: cache.c:1419
 #, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr "Cache Größe %d, %d/%d Cache-Einfügungen verwendeten nicht abgelaufene Cache-Einträge wieder."
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr "%u weitergeleitete Anfragen, %u lokal beantwortete Anfragen"
 
-#: cache.c:1419
+#: cache.c:1424
 #, c-format
 msgid "queries for authoritative zones %u"
 msgstr "Anfragen nach autoritativen Zonen %u"
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr "Server %s#%d: %u Anfragen gesendet, %u erneut versucht oder fehlgeschlagen"
@@ -100,22 +100,22 @@
 msgid "failed to allocate memory"
 msgstr "Konnte Speicher nicht belegen"
 
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr "Speicher nicht verfügbar"
 
-#: util.c:287
+#: util.c:291
 #, c-format
 msgid "cannot create pipe: %s"
 msgstr "Konnte Pipe nicht erzeugen: %s"
 
-#: util.c:295
+#: util.c:299
 #, c-format
 msgid "failed to allocate %d bytes"
 msgstr "Konnte %d Bytes nicht belegen"
 
 # @Simon: not perfect but I cannot get nearer right now.
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr "unendlich"
@@ -795,7 +795,7 @@
 msgid "interface can only be specified once"
 msgstr ""
 
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 msgid "bad interface name"
 msgstr "unzulässiger Schnittestellenname"
 
@@ -811,7 +811,7 @@
 msgid "bad IP address"
 msgstr "Fehlerhafte IP-Adresse"
 
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 msgid "bad IPv6 address"
 msgstr "Fehlerhafte IPv6-Adresse"
 
@@ -839,7 +839,7 @@
 msgid "illegal repeated keyword"
 msgstr "unzulässig wiederholtes Schlüsselwort"
 
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, c-format
 msgid "cannot access directory %s: %s"
 msgstr "Kann auf Verzeichnis %s nicht zugreifen: %s"
@@ -893,196 +893,196 @@
 msgid "bad port range"
 msgstr "unzulässiger Portbereich"
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr "unzulässige Brücken-Schnittstelle"
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr "nur eine Marke zulässig"
 
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr "unzulässiger DHCP-Bereich"
 
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr "inkonsistenter DHCP-Bereich"
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr "Die Präfixlenge muss genau 64 für RA Subnetze sein"
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr "Die Präfixlenge muss genau 64 für Subnet Konstruktoren sein"
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr "Die Präfixlänge muss mindestens 64 sein"
 
-#: option.c:2916
+#: option.c:2925
 msgid "inconsistent DHCPv6 range"
 msgstr "Inkonsistenter DHCPv6-Bereich"
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr "Prefix muss mit dem \"constructor:\" Argument Null sein"
 
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 msgid "bad hex constant"
 msgstr "Falscher Hexwert"
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr "Kann die Tags in --dhcp-host nicht abgleichen"
 
-#: option.c:3110
+#: option.c:3119
 #, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr "doppelte dhcp-host IP-Adresse %s"
 
-#: option.c:3168
+#: option.c:3177
 msgid "bad DHCP host name"
 msgstr "unzulässiger DHCP-Hostname"
 
-#: option.c:3250
+#: option.c:3259
 msgid "bad tag-if"
 msgstr "unzulässige bedingte Marke (tag-if)"
 
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr "unzulässige Portnummer"
 
-#: option.c:3669
+#: option.c:3678
 msgid "bad dhcp-proxy address"
 msgstr "Fehlerhafte DHCP-Proxy-Adresse"
 
-#: option.c:3695
+#: option.c:3704
 msgid "Bad dhcp-relay"
 msgstr "unzulässiger dhcp-relay"
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr "unzulässige RA-Parameter"
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr "unzulässige DUID"
 
-#: option.c:3787
+#: option.c:3796
 msgid "invalid alias range"
 msgstr "unzulässiger Alias-Bereich"
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr "unzulässiger CNAME"
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr "doppelter CNAME"
 
-#: option.c:3880
+#: option.c:3889
 msgid "bad PTR record"
 msgstr "unzulässiger PTR-Eintrag"
 
-#: option.c:3911
+#: option.c:3920
 msgid "bad NAPTR record"
 msgstr "unzulässiger NAPTR-Eintrag"
 
-#: option.c:3945
+#: option.c:3954
 msgid "bad RR record"
 msgstr "unzulässiger RR-Eintrag"
 
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr "unzulässiger TXT-Eintrag"
 
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr "unzulässiger SRV-Eintrag"
 
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr "unzulässiges SRV-Ziel"
 
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr "unzulässige Priorität"
 
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr "unzulässige Wichtung"
 
-#: option.c:4064
+#: option.c:4073
 msgid "Bad host-record"
 msgstr "unzulässiger host-record"
 
-#: option.c:4088
+#: option.c:4097
 msgid "Bad name in host-record"
 msgstr "Unzulässiger Name in host-record"
 
-#: option.c:4153
+#: option.c:4162
 msgid "bad trust anchor"
 msgstr "unzulässiger Vertrauensursprung (Trust Anchor)"
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr "unzulässiger Hexwert in Vertrauensursprung (Trust Anchor)"
 
-#: option.c:4177
+#: option.c:4186
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr "Nicht unterstützte Option (prüfen Sie, ob DNSMasq mit DHCP/TFTP/DNSSEC/DBus-Unterstützung übersetzt wurde)"
 
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr "fehlende \\\""
 
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr "unzulässige Option"
 
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr "überschüssiger Parameter"
 
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr "fehler Parameter"
 
-#: option.c:4300
+#: option.c:4309
 msgid "illegal option"
 msgstr "unzulässige Option"
 
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr "Fehler"
 
-#: option.c:4309
+#: option.c:4318
 #, c-format
 msgid " at line %d of %s"
 msgstr " in Zeile %d von %s"
 
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, c-format
 msgid "read %s"
 msgstr "%s gelesen"
 
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr "kann %s nicht lesen: %s"
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr "Mist in der Kommandozeile gefunden"
 
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr "Dnsmasq Version %s  %s\n"
 
-#: option.c:4712
+#: option.c:4730
 #, c-format
 msgid ""
 "Compile time options: %s\n"
@@ -1091,68 +1091,68 @@
 "Kompilierungs-Optionen %s\n"
 "\n"
 
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr "Für diese Software wird ABSOLUT KEINE GARANTIE gewährt.\n"
 
 # FIXME: this must be one long string! -- MA
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr "Dnsmasq ist freie Software, und du bist willkommen es weiter zu verteilen\n"
 
-#: option.c:4715
+#: option.c:4733
 #, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr "unter den Bedingungen der GNU General Public Lizenz, Version 2 oder 3.\n"
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr "versuchen Sie --help"
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr "versuchen Sie -w"
 
-#: option.c:4730
+#: option.c:4748
 #, c-format
 msgid "bad command line options: %s"
 msgstr "unzulässige Optionen auf der Befehlszeile: %s"
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr "kann Hostnamen nicht ermitteln: %s"
 
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr "mit -n/--no-poll ist nur eine resolv.conf-Datei zulässig."
 
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr "Um die Domäne zu lesen, muss genau eine resolv.conf-Datei verwendet werden."
 
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, c-format
 msgid "failed to read %s: %s"
 msgstr "konnte %s nicht lesen: %s"
 
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr "keine \"search\"-Anweisung in %s gefunden"
 
-#: option.c:4913
+#: option.c:4933
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr "Es muss eine standard Domain gesetzt sein, wenn --dhcp-fqdn gesetzt ist"
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr "Syntaxprüfung OK"
 
@@ -1161,25 +1161,30 @@
 msgid "failed to send packet: %s"
 msgstr "Fehlgeschlagen, folgendes Paket zu senden: %s"
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr "Verwerfe DNS Antwort: Subnetoption stimmt nicht überrein"
 
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr "Namensserver %s hat eine rekursive Anfrage verweigert"
 
-#: forward.c:683
+#: forward.c:684
 #, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr "möglichen DNS-Rebind-Angriff entdeckt: %s"
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr "Ignoriere Anfragen vom nicht lokalen Netzwerk"
 
-#: forward.c:2166
+#: forward.c:2184
 #, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr "Maximale Anzahl an nebenläufiger DNS-Anfragen erreicht (Max: %d)"
@@ -1217,373 +1222,374 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr "Versuche /proc/sys/net/core/optmem_max zu erhöhen"
 
-#: network.c:1322
+#: network.c:1337
 #, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr "konnte nicht an Server-Socket für %s binden: %s"
 
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr "ignoriere Namensserver %s - lokale Schnittstelle"
 
-#: network.c:1528
+#: network.c:1539
 #, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr "ignoriere Namensserver %s - kann Socket nicht erzeugen/binden: %s"
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr "(kein DNSSEC)"
 
 # FIXME: this isn't translatable - always provide full strings, do not assemble yourself! -- MA
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr "unqualifiziert"
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr "Namen"
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr "Standard"
 
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr "Domain"
 
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr "Benutze lokale Adressen nur für %s %s"
 
-#: network.c:1564
+#: network.c:1575
 #, c-format
 msgid "using standard nameservers for %s %s"
 msgstr "Benutze standard Namensserver für %s %s"
 
-#: network.c:1566
+#: network.c:1577
 #, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr "Benutze Namensserver %s#%d für %s %s %s"
 
-#: network.c:1570
+#: network.c:1581
 #, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr "Benutze Namensserver %s#%d NICHT - Anfragenschleife festgetellt"
 
-#: network.c:1573
+#: network.c:1584
 #, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr "Benutze Namensserver %s#%d(via %s)"
 
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr "Benutze Namensserver %s#%d"
 
-#: network.c:1580
+#: network.c:1591
 #, fuzzy, c-format
 msgid "using %d more local addresses"
 msgstr "Benutze %d mehr Namensserver"
 
-#: network.c:1582
+#: network.c:1593
 #, c-format
 msgid "using %d more nameservers"
 msgstr "Benutze %d mehr Namensserver"
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr "dhcp-hostsdir, dhcp-optsdir und hostsdir sind auf dieser Plattform nicht unterstüzt"
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr "Keine Root-Vertrauensursprünge (Root Trust Anchor) für DNSSEC verfügbar"
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr "Kann die Standard Cachegröße nicht verkleinern, wenn DNSSEC aktiviert ist"
 
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr "DNSSEC nicht verfügbar: setzen Sie HAVE_DNSSEC in src/config.h"
 
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr "TFTP-Server nicht verfügbar, setzen Sie HAVE_TFTP in src/config.h"
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 msgid "cannot use --conntrack AND --query-port"
 msgstr "Kann nicht --conntrack UND --query-port einsetzen"
 
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr "Conntrack-Unterstützung nicht verfügbar: Aktiviere HAVE_CONNTRACK in src/config.h"
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 msgid "asynchronous logging is not available under Solaris"
 msgstr "asynchrone Protokollierung unter Solaris nicht verfügbar"
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 msgid "asynchronous logging is not available under Android"
 msgstr "Asynchrone Protokollierung unter Android nicht verfügbar"
 
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr "Authoritatives DNS nicht verfügbar: Es muss HAVE_AUTH in src/config.h gesetzt sein"
 
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr "Loop-Erkennung nicht verfügbar, Aktiviere HAVE_LOOP in src/config.h"
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr "max_port darf nicht kleiner als min_port sein"
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr "Zonen Seriennummer muss mit --auth-soa konfiguriert werden"
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr "dhcp-range Konstruktor ist auf dieser Plattform nicht verfübar"
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr "Kann nicht --bind-interfaces und --bind-dynamic setzen"
 
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr "konnte Schnitstellenliste nicht beziehen: %s"
 
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr "unbekannte Schnittstelle %s"
 
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr "DBus-Fehler: %s"
 
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr "DBus nicht verfügbar: setzen Sie HAVE_DBUS in src/config.h"
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr "Unbekannter Benutzer oder Gruppe: %s"
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr "kann nicht ins Wurzelverzeichnis des Dateisystems wechseln: %s"
 
 # FIXME: this and the next would need commas after the version
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, c-format
 msgid "started, version %s DNS disabled"
 msgstr "gestartet, Version %s, DNS abgeschaltet"
 
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr "gestartet, Version %s, Cachegröße %d"
 
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr "Gestartet, Version %s Cache deaktiviert"
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr "DNS-Dienst auf lokale Subnetze eingeschränkt"
 
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr "Übersetzungsoptionen: %s"
 
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr "DBus-Unterstützung eingeschaltet: mit Systembus verbunden"
 
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr "DBus-Unterstützung eingeschaltet: warte auf Systembus-Verbindung"
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr "DNSSEC-Validierung aktiviert"
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+#, fuzzy
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr "DNSSEC Signatur-Zeitstempel werden erst ab dem ersten Neuladen des Caches überprüft"
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr "DNSSEC Signatur-Zeitstempel werden erst überprüft, sobald die Systemuhrzeit gültig ist"
 
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr "Warnung: konnte den Besitzer von %s nicht ändern: %s"
 
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr "Aktiviere --bind-interfaces wegen Einschränkungen des Betriebssystems"
 
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr "Warnung: Schnittstelle %s existiert derzeit nicht"
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr "Warnung: Ignoriere \"resolv-file\", weil \"no-resolv\" aktiv ist"
 
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 msgid "warning: no upstream servers configured"
 msgstr "Warnung: keine vorgelagerten (Upstream) Server konfiguriert"
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr "asynchrone Protokollierung eingeschaltet, Warteschlange fasst %d Nachrichten"
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr "IPv6-Router-Advertisement aktiviert"
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr "DHCP, Sockets exklusiv an das Interface %s gebunden"
 
 # FIXME: this and the next few must be full strings to be translatable - do not assemble in code"
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr "Wurzel ist "
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "enabled"
 msgstr "Aktiviert"
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr "sicherer Modus"
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr "Warnung: %s nicht zugreifbar"
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr "Warnung: Das TFTP-Verzeichnis %s ist nicht zugreifbar"
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr "Begrenze gleichzeitige TFTP-Übertragungen auf maximal %d"
 
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr "Mit System-DBus verbunden"
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr "kann nicht in den Hintergrund abspalten: %s"
 
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, c-format
 msgid "failed to create helper: %s"
 msgstr "kann Helfer nicht erzeugen: %s"
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, c-format
 msgid "setting capabilities failed: %s"
 msgstr "kann \"capabilities\" nicht setzen: %s"
 
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr "Kann nicht Benutzerrechte %s annehmen: %s"
 
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr "Kann nicht Gruppenrechte %s annehmen: %s"
 
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr "kann die Prozessidentifikations-(PID)-Datei %s nicht öffnen: %s"
 
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, c-format
 msgid "cannot open log %s: %s"
 msgstr "Kann Logdatei %s nicht öffnen: %s"
 
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, c-format
 msgid "failed to load Lua script: %s"
 msgstr "Konnte Lua-Script nicht laden: %s"
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr "Das TFTP-Verzeichnis %s ist nicht zugreifbar: %s"
 
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr "Kann keine timestamp-Datei %s erzeugen: %s "
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr "Prüfe jetzt DNSSEC Signatur-Zeitstempel"
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, c-format
 msgid "script process killed by signal %d"
 msgstr "Scriptprozess durch Signal %d getötet"
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, c-format
 msgid "script process exited with status %d"
 msgstr "Scriptprozess hat sich mit Status %d beendet"
 
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, c-format
 msgid "failed to execute %s: %s"
 msgstr "konnte %s nicht ausführen: %s"
 
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr "Prüfe jetzt DNSSEC Signatur-Zeitstempel"
+
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr "kann die mtime nicht auf %s aktualisieren: %s"
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr "beende nach Empfang von SIGTERM"
 
-#: dnsmasq.c:1414
+#: dnsmasq.c:1444
 #, c-format
 msgid "failed to access %s: %s"
 msgstr "konnte auf %s nicht zugreifen: %s"
 
-#: dnsmasq.c:1444
+#: dnsmasq.c:1474
 #, c-format
 msgid "reading %s"
 msgstr "lese %s"
 
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, c-format
 msgid "no servers found in %s, will retry"
 msgstr "keine Server in %s gefunden, werde es später neu versuchen"
@@ -1921,7 +1927,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr "Unbekannte Protokollversion vom Route Socket"
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr "Die Funktion lease() fehlt im Lua-Script"
 
@@ -2083,66 +2089,66 @@
 msgid "duplicate IP address %s (%s) in dhcp-config directive"
 msgstr "doppelte IP-Adresse %s (%s) in \"dhcp-config\"-Anweisung"
 
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr "kann SO_BINDTODEVICE für DHCP-Socket nicht aktivieren: %s"
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr "Bekannte DHCP-Optionen:\n"
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr "Bekannte DHCPv6-Optionen:\n"
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ", Prefix veraltet"
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ", Lease Zeit"
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr "%s stateless auf %s%.0s%.0s%s"
 
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr "%s, nur statische Leases auf %.0s%s%s%.0s"
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr "%s, Proxy im Subnetz %.0s%s%.0s%.0s"
 
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr "%s, IP-Bereich %s -- %s%s%.0s"
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr "DHCPv4-abgeleitete IPv6 Namen auf %s%s"
 
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, c-format
 msgid "router advertisement on %s%s"
 msgstr "Router-Advertisment auf %s%s"
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr "DHCP Weiterleitung von %s nach %s über %s"
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr "DHCP Weiterleitung von %s nach %s"
@@ -2172,7 +2178,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr "kann die mtime nicht auf %s aktualisieren: %s"
 
-#: dnssec.c:527
+#: dnssec.c:208
 #, fuzzy
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr "Prüfe jetzt DNSSEC Signatur-Zeitstempel"
@@ -2251,7 +2257,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr "fehlerhaftes dynamisches Verzeichnis %s: %s"
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr "inotify, neue oder geänderte Datei %s"
diff --git a/po/es.po b/po/es.po
index 0b30d98..bcca828 100644
--- a/po/es.po
+++ b/po/es.po
@@ -16,70 +16,70 @@
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr ""
 
-#: cache.c:923
+#: cache.c:928
 #, fuzzy, c-format
 msgid "failed to load names from %s: %s"
 msgstr "no se pudo cargar nombres desde %s: %s"
 
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, fuzzy, c-format
 msgid "bad address at %s line %d"
 msgstr "dirección errónea en %s línea %d"
 
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr "nombre erróneo en %s línea %d"
 
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr "direcciónes %s - %d leídas"
 
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr "el caché fue liberado"
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr ""
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr "%s es un CNAME, no se le está dando concesión DHCP de %s"
 
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr "no otorgando nombre %s a concesión DHCP de %s porque el nombre existe en %s con dirección %s"
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr "tiempo %lu"
 
-#: cache.c:1414
+#: cache.c:1419
 #, fuzzy, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr "tamaño de caché %d, %d/%d inserciónes de caché reutilizaron objetos no vencidos."
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr "búsquedas reenviadas %u, búsquedas respondidas localmente %u"
 
-#: cache.c:1419
+#: cache.c:1424
 #, fuzzy, c-format
 msgid "queries for authoritative zones %u"
 msgstr "Fijar TTL para respuestas autoritarias"
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr "servidor %s#%d: búsquedas enviadas %u, reintentadas o fallidas %u"
@@ -94,21 +94,21 @@
 msgid "failed to allocate memory"
 msgstr "no se pudo asignar memoria"
 
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr "no se pudo adquirir memoria"
 
-#: util.c:287
+#: util.c:291
 #, fuzzy, c-format
 msgid "cannot create pipe: %s"
 msgstr "no se puede crear pipe: %s"
 
-#: util.c:295
+#: util.c:299
 #, fuzzy, c-format
 msgid "failed to allocate %d bytes"
 msgstr "no se pudo asignar %d bytes"
 
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr "infinito"
@@ -821,7 +821,7 @@
 msgid "interface can only be specified once"
 msgstr ""
 
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 #, fuzzy
 msgid "bad interface name"
 msgstr "nombre de interfase erróneo"
@@ -839,7 +839,7 @@
 msgid "bad IP address"
 msgstr "dirección IP errónea"
 
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 #, fuzzy
 msgid "bad IPv6 address"
 msgstr "dirección IP errónea"
@@ -869,7 +869,7 @@
 msgid "illegal repeated keyword"
 msgstr "palabra clave repetida ilegal"
 
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, fuzzy, c-format
 msgid "cannot access directory %s: %s"
 msgstr "no se puede acceder a directorio %s: %s"
@@ -927,211 +927,211 @@
 msgid "bad port range"
 msgstr "rango de puertos erróneo"
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr "opción bridge-interface (interfase puente) errónea"
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr "solo una etiqueta permitida"
 
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr "opción dhcp-range (rango DHCP) errónea"
 
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr "rango DHCP inconsistente"
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr "la longitud del prefijo debe ser 64 exacto para subredes RA"
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr "la longitud del prefijo debe ser 64 exacto para subredes constructoras"
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr "la longitud del prefijo debe ser al menos 64"
 
-#: option.c:2916
+#: option.c:2925
 #, fuzzy
 msgid "inconsistent DHCPv6 range"
 msgstr "rango DHCP inconsistente"
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr "prefijo debe ser cero con argumento \"constructor:\""
 
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 #, fuzzy
 msgid "bad hex constant"
 msgstr "constante hexadecimal errónea"
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr "no coinciden etiquetas en --dhcp-host"
 
-#: option.c:3110
+#: option.c:3119
 #, fuzzy, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr "dirección IP duplicada %s en %s."
 
-#: option.c:3168
+#: option.c:3177
 #, fuzzy
 msgid "bad DHCP host name"
 msgstr "nombre de host DHCP erróneo"
 
-#: option.c:3250
+#: option.c:3259
 #, fuzzy
 msgid "bad tag-if"
 msgstr "etiqueta tag-if errónea"
 
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr "número de puerto inválido"
 
-#: option.c:3669
+#: option.c:3678
 #, fuzzy
 msgid "bad dhcp-proxy address"
 msgstr "dirección IP errónea"
 
-#: option.c:3695
+#: option.c:3704
 #, fuzzy
 msgid "Bad dhcp-relay"
 msgstr "opción dhcp-range (rango DHCP) errónea"
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr ""
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr "DUID erróneo"
 
-#: option.c:3787
+#: option.c:3796
 #, fuzzy
 msgid "invalid alias range"
 msgstr "rango alias inválido"
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr "CNAME erróneo"
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr "CNAME duplicado"
 
-#: option.c:3880
+#: option.c:3889
 #, fuzzy
 msgid "bad PTR record"
 msgstr "registro PTR erróneo"
 
-#: option.c:3911
+#: option.c:3920
 #, fuzzy
 msgid "bad NAPTR record"
 msgstr "registro NAPTR erróneo"
 
-#: option.c:3945
+#: option.c:3954
 #, fuzzy
 msgid "bad RR record"
 msgstr "registro PTR erróneo"
 
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr "registro TXT erróneo"
 
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr "registro SRV erróneo"
 
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr "destino SRV erróneo"
 
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr "prioridad inválida"
 
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr "peso inválido"
 
-#: option.c:4064
+#: option.c:4073
 #, fuzzy
 msgid "Bad host-record"
 msgstr "registro PTR erróneo"
 
-#: option.c:4088
+#: option.c:4097
 #, fuzzy
 msgid "Bad name in host-record"
 msgstr "nombre erróneo en %s"
 
-#: option.c:4153
+#: option.c:4162
 #, fuzzy
 msgid "bad trust anchor"
 msgstr "rango de puertos erróneo"
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr ""
 
-#: option.c:4177
+#: option.c:4186
 #, fuzzy
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr "opción no soportada (verificar que dnsmasq fue compilado con soporte para DHCP/TFTP/DBus)"
 
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr "falta \""
 
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr "opción errónea"
 
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr "parámetro extraño"
 
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr "parámetro ausente"
 
-#: option.c:4300
+#: option.c:4309
 #, fuzzy
 msgid "illegal option"
 msgstr "opción errónea"
 
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr "error"
 
-#: option.c:4309
+#: option.c:4318
 #, fuzzy, c-format
 msgid " at line %d of %s"
 msgstr "%s en línea %d de %%s"
 
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, fuzzy, c-format
 msgid "read %s"
 msgstr "lee %s"
 
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr "no se puede leer %s: %s"
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr "basura encontrada en linea de comando"
 
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr "Versión dnsmasq %s  %s\n"
 
-#: option.c:4712
+#: option.c:4730
 #, fuzzy, c-format
 msgid ""
 "Compile time options: %s\n"
@@ -1140,68 +1140,68 @@
 "Opciones de compilación %s\n"
 "\n"
 
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr "Este software viene SIN NINGUNA GARANTIA.\n"
 
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr "Dnsmasq es software libre, y usted está autorizado a redistribuirlo\n"
 
-#: option.c:4715
+#: option.c:4733
 #, fuzzy, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr "bajo los términos de la GNU General Public License, versión 2 o 3.\n"
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr "pruebe --help"
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr "pruebe -w"
 
-#: option.c:4730
+#: option.c:4748
 #, fuzzy, c-format
 msgid "bad command line options: %s"
 msgstr "opciones de línea de comandos erróneas: %s"
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr "no se puede obtener host-name (nombre de host): %s"
 
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr "solo un archivo resolv.conf está permitido en modo no-poll."
 
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr "debe haber exáctamente un resolv.conf desde donde leer dominio."
 
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, fuzzy, c-format
 msgid "failed to read %s: %s"
 msgstr "no se pudo leer %s: %s"
 
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr "ninguna directiva de búsqueda encontrada en %s"
 
-#: option.c:4913
+#: option.c:4933
 #, fuzzy
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr "debe haber un dominio predeterminado cuando --dhcp-fqdn está fijado"
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr "revisión de sintaxis OK"
 
@@ -1210,25 +1210,30 @@
 msgid "failed to send packet: %s"
 msgstr "no se pudo escuchar en socket: %s"
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr ""
 
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr "servidor DNS %s rechazó realizar una búsqueda recursiva"
 
-#: forward.c:683
+#: forward.c:684
 #, fuzzy, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr "posible ataque de revinculación DNS detectado"
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr ""
 
-#: forward.c:2166
+#: forward.c:2184
 #, fuzzy, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr "Número máximo de búsquedas DNS simultáneas alcanzado. (%s por predeterminado)"
@@ -1266,380 +1271,380 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr ""
 
-#: network.c:1322
+#: network.c:1337
 #, fuzzy, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr "no se pudo acoplar al zócalo del servidor para %s: %s"
 
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr "ignorando servidor DNS %s - interfase local"
 
-#: network.c:1528
+#: network.c:1539
 #, fuzzy, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr "ignorando servidor DNS %s - no se puede crear/acoplar zócalo: %s"
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr "no cualificado"
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr "nombres"
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr "predeterminado"
 
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr "dominio"
 
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr "usando direcciones locales solo para %s %s"
 
-#: network.c:1564
+#: network.c:1575
 #, fuzzy, c-format
 msgid "using standard nameservers for %s %s"
 msgstr "usando nombres estándar %s#%d para %s %s"
 
-#: network.c:1566
+#: network.c:1577
 #, fuzzy, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr "usando nombre de servidor %s#%d para %s %s"
 
-#: network.c:1570
+#: network.c:1581
 #, fuzzy, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr "usando nombre de servidor %s#%d para %s %s"
 
-#: network.c:1573
+#: network.c:1584
 #, fuzzy, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr "usando nombre de servidor %s#%d(vía %s)"
 
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr "usando nombre de servidor %s#%d"
 
-#: network.c:1580
+#: network.c:1591
 #, fuzzy, c-format
 msgid "using %d more local addresses"
 msgstr "usando nombre de servidor %s#%d"
 
-#: network.c:1582
+#: network.c:1593
 #, fuzzy, c-format
 msgid "using %d more nameservers"
 msgstr "usando nombre de servidor %s#%d"
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr ""
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr ""
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr ""
 
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 #, fuzzy
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr "DBus no disponible: fijar HAVE_DBUS en src/config.h"
 
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 #, fuzzy
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr "servidor TFTP no disponible: fijar HAVE_TFTP en src/config.h"
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 #, fuzzy
 msgid "cannot use --conntrack AND --query-port"
 msgstr "No puede usar --conntrack AND --query-port"
 
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 #, fuzzy
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr "servidor TFTP no disponible: fijar HAVE_TFTP en src/config.h"
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 #, fuzzy
 msgid "asynchronous logging is not available under Solaris"
 msgstr "registro asíncrono no está disponible bajo Solaris"
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 #, fuzzy
 msgid "asynchronous logging is not available under Android"
 msgstr "registro asíncrono no está disponible bajo Solaris"
 
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 #, fuzzy
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr "DBus no disponible: fijar HAVE_DBUS en src/config.h"
 
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 #, fuzzy
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr "servidor TFTP no disponible: fijar HAVE_TFTP en src/config.h"
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr ""
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr "zona serie debe ser configurada en --auth-soa"
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr "constructor rango dhcp no disponible en esta plataforma"
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr "no puede usar --bind-interfases y --bind-dynamic"
 
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr "no se pudo encontrar lista de interfases: %s"
 
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr "interfase desconocida %s"
 
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr "error DBus: %s"
 
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr "DBus no disponible: fijar HAVE_DBUS en src/config.h"
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr "usuario o grupo desconocido: %s"
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr "no se puede cambiar directorio a raíz de sistema de archivos: %s"
 
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, fuzzy, c-format
 msgid "started, version %s DNS disabled"
 msgstr "iniciado, versión %s DNS deshabilitado"
 
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr "iniciado, versión %s tamaño de caché %d"
 
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr "iniciado, versión %s caché deshabilitado"
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr ""
 
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr "opciones de compilación: %s"
 
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr "soporte DBus habilitado: conectado a bus de sistema"
 
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr "soporte DBus habilitado: conexión a bus pendiente"
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr ""
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr ""
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr ""
 
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, fuzzy, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr "advertencia: no se pudo cambiar propietario de %s: %s"
 
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr "fijando opción --bind-interfases debido a limitaciones de sistema operativo"
 
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr "advertencia: interfase %s no existe actualmente"
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr "advertencia: ignorando opción resolv-file porque no-resolv está fijado"
 
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 #, fuzzy
 msgid "warning: no upstream servers configured"
 msgstr "advertencia: ningún servidor de subida configurado"
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr "registro asíncrono habilitado, el límite de la cola es %d mensajes"
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr "Anuncio de router IPv6 habilitado"
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr "root está "
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 #, fuzzy
 msgid "enabled"
 msgstr "habilitado"
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr "modo seguro"
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, fuzzy, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr "directorio TFTP % inaccesible: %s"
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr "limitando número máximo de transferencias TFTP simultáneas a %d"
 
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr "conectado a DBus de sistema"
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr "no se puede hacer fork en background: %s"
 
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, fuzzy, c-format
 msgid "failed to create helper: %s"
 msgstr "no se pudo crear ayudante: %s"
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, fuzzy, c-format
 msgid "setting capabilities failed: %s"
 msgstr "configuración de capacidades ha fallado: %s"
 
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, fuzzy, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr "no se pudo cambiar user-id a %s: %s"
 
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, fuzzy, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr "no se pudo cambiar group-id a %s: %s"
 
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, fuzzy, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr "no se pudo abrir archivo PID %s: %s"
 
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, fuzzy, c-format
 msgid "cannot open log %s: %s"
 msgstr "no se puede abrir registro %s: %s"
 
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, fuzzy, c-format
 msgid "failed to load Lua script: %s"
 msgstr "no se pudo cargar script Lua %s: %s"
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr "directorio TFTP % inaccesible: %s"
 
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, fuzzy, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr "no se puede abrir o crear archivo de concesión %s: %s"
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr ""
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, fuzzy, c-format
 msgid "script process killed by signal %d"
 msgstr "proceso script eliminado por señal %d"
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, fuzzy, c-format
 msgid "script process exited with status %d"
 msgstr "proceso script salió con con estado %d"
 
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, fuzzy, c-format
 msgid "failed to execute %s: %s"
 msgstr "no se pudo ejecutar %s: %s"
 
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr ""
+
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, fuzzy, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr "no se pudo abrir archivo PID %s: %s"
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr "saliendo al recibir SIGTERM"
 
-#: dnsmasq.c:1414
+#: dnsmasq.c:1444
 #, fuzzy, c-format
 msgid "failed to access %s: %s"
 msgstr "no se pudo acceder %s: %s"
 
-#: dnsmasq.c:1444
+#: dnsmasq.c:1474
 #, c-format
 msgid "reading %s"
 msgstr "leyendo %s"
 
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, fuzzy, c-format
 msgid "no servers found in %s, will retry"
 msgstr "ningún servidor encontrado en %s, se reintentará"
@@ -1971,7 +1976,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr ""
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr "la función lease() no se encuentra en el script Lua"
 
@@ -2136,66 +2141,66 @@
 msgid "duplicate IP address %s (%s) in dhcp-config directive"
 msgstr "dirección IP duplicada %s (%s) en directiva dhcp-config"
 
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, fuzzy, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr "no se pudo fijar SO_REUSE{ADDR|PORT} en socket DHCP: %s"
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr "Opciones DHCP conocidas:\n"
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, fuzzy, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr "Opciones DHCP conocidas:\n"
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ", prefijo descartado"
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ", tiempo de concesión"
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr "%s apátrida en %s%.0s%.0s%s"
 
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, fuzzy, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr "DHCP, concesión estática solo en %.0s%s, tiempo de concesión %s"
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, fuzzy, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr "DHCP, proxy en subred %.0s%s%.0s"
 
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, fuzzy, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr "DHCP, rango de IPs %s -- %s, tiempo de concesión %s"
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr ""
 
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, fuzzy, c-format
 msgid "router advertisement on %s%s"
 msgstr "DHCP, concesión estáticos solo en %.0s%s, tiempo de concesión %s"
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr ""
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr ""
@@ -2225,7 +2230,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr "no se pudo abrir archivo PID %s: %s"
 
-#: dnssec.c:527
+#: dnssec.c:208
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr ""
 
@@ -2303,7 +2308,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr "no se puede acceder a directorio %s: %s"
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr ""
diff --git a/po/fi.po b/po/fi.po
index 0f35582..d3c54d7 100644
--- a/po/fi.po
+++ b/po/fi.po
@@ -16,70 +16,70 @@
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr ""
 
-#: cache.c:923
+#: cache.c:928
 #, c-format
 msgid "failed to load names from %s: %s"
 msgstr ""
 
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, c-format
 msgid "bad address at %s line %d"
 msgstr ""
 
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr ""
 
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr ""
 
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr ""
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr ""
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr ""
 
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr ""
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr ""
 
-#: cache.c:1414
+#: cache.c:1419
 #, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr ""
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr ""
 
-#: cache.c:1419
+#: cache.c:1424
 #, c-format
 msgid "queries for authoritative zones %u"
 msgstr ""
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr ""
@@ -93,21 +93,21 @@
 msgid "failed to allocate memory"
 msgstr ""
 
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr ""
 
-#: util.c:287
+#: util.c:291
 #, c-format
 msgid "cannot create pipe: %s"
 msgstr ""
 
-#: util.c:295
+#: util.c:299
 #, c-format
 msgid "failed to allocate %d bytes"
 msgstr ""
 
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr ""
@@ -778,7 +778,7 @@
 msgid "interface can only be specified once"
 msgstr ""
 
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 msgid "bad interface name"
 msgstr ""
 
@@ -794,7 +794,7 @@
 msgid "bad IP address"
 msgstr ""
 
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 msgid "bad IPv6 address"
 msgstr ""
 
@@ -822,7 +822,7 @@
 msgid "illegal repeated keyword"
 msgstr ""
 
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, c-format
 msgid "cannot access directory %s: %s"
 msgstr ""
@@ -876,263 +876,263 @@
 msgid "bad port range"
 msgstr ""
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr ""
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr ""
 
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr ""
 
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr ""
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr ""
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr ""
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr ""
 
-#: option.c:2916
+#: option.c:2925
 msgid "inconsistent DHCPv6 range"
 msgstr ""
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr ""
 
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 msgid "bad hex constant"
 msgstr ""
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr ""
 
-#: option.c:3110
+#: option.c:3119
 #, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr ""
 
-#: option.c:3168
+#: option.c:3177
 msgid "bad DHCP host name"
 msgstr ""
 
-#: option.c:3250
+#: option.c:3259
 msgid "bad tag-if"
 msgstr ""
 
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr ""
 
-#: option.c:3669
+#: option.c:3678
 msgid "bad dhcp-proxy address"
 msgstr ""
 
-#: option.c:3695
+#: option.c:3704
 msgid "Bad dhcp-relay"
 msgstr ""
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr ""
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr ""
 
-#: option.c:3787
+#: option.c:3796
 msgid "invalid alias range"
 msgstr ""
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr ""
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr ""
 
-#: option.c:3880
+#: option.c:3889
 msgid "bad PTR record"
 msgstr ""
 
-#: option.c:3911
+#: option.c:3920
 msgid "bad NAPTR record"
 msgstr ""
 
-#: option.c:3945
+#: option.c:3954
 msgid "bad RR record"
 msgstr ""
 
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr ""
 
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr ""
 
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr ""
 
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr ""
 
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr ""
 
-#: option.c:4064
+#: option.c:4073
 msgid "Bad host-record"
 msgstr ""
 
-#: option.c:4088
+#: option.c:4097
 msgid "Bad name in host-record"
 msgstr ""
 
-#: option.c:4153
+#: option.c:4162
 msgid "bad trust anchor"
 msgstr ""
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr ""
 
-#: option.c:4177
+#: option.c:4186
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr ""
 
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr ""
 
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr ""
 
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr ""
 
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr ""
 
-#: option.c:4300
+#: option.c:4309
 msgid "illegal option"
 msgstr ""
 
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr ""
 
-#: option.c:4309
+#: option.c:4318
 #, c-format
 msgid " at line %d of %s"
 msgstr ""
 
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, c-format
 msgid "read %s"
 msgstr ""
 
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr ""
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr ""
 
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr ""
 
-#: option.c:4712
+#: option.c:4730
 #, c-format
 msgid ""
 "Compile time options: %s\n"
 "\n"
 msgstr ""
 
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr ""
 
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr ""
 
-#: option.c:4715
+#: option.c:4733
 #, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr ""
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr ""
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr ""
 
-#: option.c:4730
+#: option.c:4748
 #, c-format
 msgid "bad command line options: %s"
 msgstr ""
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr ""
 
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr ""
 
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr ""
 
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, c-format
 msgid "failed to read %s: %s"
 msgstr ""
 
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr ""
 
-#: option.c:4913
+#: option.c:4933
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr ""
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr ""
 
@@ -1141,25 +1141,30 @@
 msgid "failed to send packet: %s"
 msgstr ""
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr ""
 
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr ""
 
-#: forward.c:683
+#: forward.c:684
 #, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr ""
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr ""
 
-#: forward.c:2166
+#: forward.c:2184
 #, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr ""
@@ -1197,370 +1202,370 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr ""
 
-#: network.c:1322
+#: network.c:1337
 #, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr ""
 
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr ""
 
-#: network.c:1528
+#: network.c:1539
 #, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr ""
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr ""
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr ""
 
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr ""
 
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr ""
 
-#: network.c:1564
+#: network.c:1575
 #, c-format
 msgid "using standard nameservers for %s %s"
 msgstr ""
 
-#: network.c:1566
+#: network.c:1577
 #, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr ""
 
-#: network.c:1570
+#: network.c:1581
 #, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr ""
 
-#: network.c:1573
+#: network.c:1584
 #, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr ""
 
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr ""
 
-#: network.c:1580
+#: network.c:1591
 #, c-format
 msgid "using %d more local addresses"
 msgstr ""
 
-#: network.c:1582
+#: network.c:1593
 #, c-format
 msgid "using %d more nameservers"
 msgstr ""
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr ""
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr ""
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr ""
 
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 msgid "cannot use --conntrack AND --query-port"
 msgstr ""
 
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 msgid "asynchronous logging is not available under Solaris"
 msgstr ""
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 msgid "asynchronous logging is not available under Android"
 msgstr ""
 
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr ""
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr ""
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr ""
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr ""
 
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr ""
 
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr ""
 
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr ""
 
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr ""
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr ""
 
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, c-format
 msgid "started, version %s DNS disabled"
 msgstr ""
 
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr ""
 
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr ""
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr ""
 
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr ""
 
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr ""
 
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr ""
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr ""
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr ""
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr ""
 
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr ""
 
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr ""
 
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr ""
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr ""
 
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 msgid "warning: no upstream servers configured"
 msgstr ""
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr ""
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr ""
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "enabled"
 msgstr ""
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr ""
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr ""
 
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr ""
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr ""
 
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, c-format
 msgid "failed to create helper: %s"
 msgstr ""
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, c-format
 msgid "setting capabilities failed: %s"
 msgstr ""
 
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, c-format
 msgid "cannot open log %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, c-format
 msgid "failed to load Lua script: %s"
 msgstr ""
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr ""
 
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr ""
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, c-format
 msgid "script process killed by signal %d"
 msgstr ""
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, c-format
 msgid "script process exited with status %d"
 msgstr ""
 
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, c-format
 msgid "failed to execute %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr ""
+
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr ""
 
-#: dnsmasq.c:1414
-#, c-format
-msgid "failed to access %s: %s"
-msgstr ""
-
 #: dnsmasq.c:1444
 #, c-format
+msgid "failed to access %s: %s"
+msgstr ""
+
+#: dnsmasq.c:1474
+#, c-format
 msgid "reading %s"
 msgstr ""
 
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, c-format
 msgid "no servers found in %s, will retry"
 msgstr ""
@@ -1892,7 +1897,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr ""
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr ""
 
@@ -2053,66 +2058,66 @@
 msgid "duplicate IP address %s (%s) in dhcp-config directive"
 msgstr ""
 
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr ""
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr ""
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr ""
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ""
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ""
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr ""
 
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr ""
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr ""
 
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr ""
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr ""
 
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, c-format
 msgid "router advertisement on %s%s"
 msgstr ""
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr ""
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr ""
@@ -2142,7 +2147,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr ""
 
-#: dnssec.c:527
+#: dnssec.c:208
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr ""
 
@@ -2220,7 +2225,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr ""
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr ""
diff --git a/po/fr.po b/po/fr.po
index 426e3d5..b532d4f 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -14,70 +14,70 @@
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr ""
 
-#: cache.c:923
+#: cache.c:928
 #, c-format
 msgid "failed to load names from %s: %s"
 msgstr "Impossible de charger les noms à partir de %s : %s"
 
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, c-format
 msgid "bad address at %s line %d"
 msgstr "mauvaise adresse dans %s ligne %d"
 
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr "mauvais nom dans %s ligne %d"
 
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr "lecture %s - %d adresses"
 
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr "cache vidé"
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr "Aucune adresse IPv4 trouvée pour %s"
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr "%s est un CNAME, il ne sera pas donné au bail DHCP de %s"
 
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr "ne donne pas de nom %s au bail DHCP de %s parce-que le nom existe dans %s avec l'adresse %s"
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr "horodatage %lu"
 
-#: cache.c:1414
+#: cache.c:1419
 #, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr "taille de cache %d, %d/%d insertions dans le cache entrées non-expirées réutilisées"
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr "requêtes transmises %u, requêtes résolues localement %u"
 
-#: cache.c:1419
+#: cache.c:1424
 #, fuzzy, c-format
 msgid "queries for authoritative zones %u"
 msgstr "Configure la durée de vie (Time To Live) pour les réponses faisant autorité"
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr "serveur %s#%d: requêtes envoyées %u, requêtes réessayées ou échouées %u"
@@ -91,21 +91,21 @@
 msgid "failed to allocate memory"
 msgstr "impossible d'allouer la mémoire"
 
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr "impossible d'allouer de la mémoire"
 
-#: util.c:287
+#: util.c:291
 #, c-format
 msgid "cannot create pipe: %s"
 msgstr "Ne peut pas créer le tube %s : %s"
 
-#: util.c:295
+#: util.c:299
 #, c-format
 msgid "failed to allocate %d bytes"
 msgstr "impossible d'allouer %d octets"
 
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr "illimité(e)"
@@ -811,7 +811,7 @@
 msgstr ""
 
 #
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 msgid "bad interface name"
 msgstr "nom d'interface invalide"
 
@@ -829,7 +829,7 @@
 msgstr "mauvaise adresse IP"
 
 #
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 msgid "bad IPv6 address"
 msgstr "mauvaise adresse IPv6"
 
@@ -859,7 +859,7 @@
 msgid "illegal repeated keyword"
 msgstr "Mot-clef ne pouvant être répété"
 
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, c-format
 msgid "cannot access directory %s: %s"
 msgstr "Ne peut pas lire le répertoire %s : %s"
@@ -914,207 +914,207 @@
 msgid "bad port range"
 msgstr "gamme de ports incorrecte"
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr "interface-pont incorrecte"
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr "une seule étiquette est autorisée"
 
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr "plage d'adresses DHCP (dhcp-range) incorrecte"
 
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr "plage d'adresses DHCP incohérente"
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr "la taille du préfixe doit être exactement 64 pour les sous-réseaux d'annonces de routeurs (RA)"
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr "la taille du préfixe doit être exactement 64 pour le constructeur de sous-réseaux"
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr "la taille de préfixe doit être au minimum 64"
 
-#: option.c:2916
+#: option.c:2925
 msgid "inconsistent DHCPv6 range"
 msgstr "plage d'adresses DHCPv6 incohérente"
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr "le préfixe doit avoir une taille de 0 lorsque l'argument \"constructor:\" est utilisé"
 
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 msgid "bad hex constant"
 msgstr "mauvaise constante hexadecimale"
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr "L'utilisation de labels est prohibée dans --dhcp-host"
 
-#: option.c:3110
+#: option.c:3119
 #, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr "adresse IP dhcp-host dupliquée dans %s."
 
 #
-#: option.c:3168
+#: option.c:3177
 msgid "bad DHCP host name"
 msgstr "nom d'hôte DHCP incorrect"
 
-#: option.c:3250
+#: option.c:3259
 msgid "bad tag-if"
 msgstr "mauvaise étiquette tag-if"
 
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr "numéro de port invalide"
 
 #
-#: option.c:3669
+#: option.c:3678
 msgid "bad dhcp-proxy address"
 msgstr "adresse dhcp-proxy incorrecte"
 
-#: option.c:3695
+#: option.c:3704
 msgid "Bad dhcp-relay"
 msgstr "valeur incorrecte pour le relais DHCP (dhcp-relay)"
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr ""
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr "mauvais identifiant unique DHCP (DUID)"
 
 #
-#: option.c:3787
+#: option.c:3796
 msgid "invalid alias range"
 msgstr "poids invalide"
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr "mauvais CNAME"
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr "ce CNAME existe déja"
 
 #
-#: option.c:3880
+#: option.c:3889
 msgid "bad PTR record"
 msgstr "mauvais champ PTR"
 
 #
-#: option.c:3911
+#: option.c:3920
 msgid "bad NAPTR record"
 msgstr "mauvais champ NAPTR"
 
 #
-#: option.c:3945
+#: option.c:3954
 msgid "bad RR record"
 msgstr "mauvais enregistrement RR"
 
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr "champ TXT invalide"
 
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr "champ SRV invalide"
 
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr "cible SRV invalide"
 
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr "priorité invalide"
 
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr "poids invalide"
 
 #
-#: option.c:4064
+#: option.c:4073
 msgid "Bad host-record"
 msgstr "mauvais champ host-record"
 
-#: option.c:4088
+#: option.c:4097
 msgid "Bad name in host-record"
 msgstr "mauvais nom dans le champ host-record"
 
 #
-#: option.c:4153
+#: option.c:4162
 #, fuzzy
 msgid "bad trust anchor"
 msgstr "gamme de ports incorrecte"
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr ""
 
-#: option.c:4177
+#: option.c:4186
 #, fuzzy
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr "option non supportée (vérifier que Dnsmasq a été compilé avec le support DHCP/TFTP/DBus)"
 
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr "il manque \""
 
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr "mauvaise option"
 
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr "paramètre en trop"
 
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr "paramètre manquant"
 
-#: option.c:4300
+#: option.c:4309
 #, fuzzy
 msgid "illegal option"
 msgstr "mauvaise option"
 
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr "erreur"
 
-#: option.c:4309
+#: option.c:4318
 #, c-format
 msgid " at line %d of %s"
 msgstr "à la ligne %d de %s"
 
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, c-format
 msgid "read %s"
 msgstr "Lecture de %s"
 
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr "Ne peut pas lire %s : %s"
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr "la ligne de commande contient des éléments indésirables ou incompréhensibles"
 
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr "Version de Dnsmasq %s  %s\n"
 
-#: option.c:4712
+#: option.c:4730
 #, c-format
 msgid ""
 "Compile time options: %s\n"
@@ -1123,67 +1123,67 @@
 "Options à la compilation %s\n"
 "\n"
 
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr "Ce logiciel est fourni sans AUCUNE GARANTIE.\n"
 
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr "Dnsmasq est un logiciel libre, il vous est permis de le redistribuer\n"
 
-#: option.c:4715
+#: option.c:4733
 #, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr "sous les termes de la licence GPL (GNU General Public License), version 2 ou 3.\n"
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr "essayez avec --help"
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr "essayez avec -w"
 
-#: option.c:4730
+#: option.c:4748
 #, c-format
 msgid "bad command line options: %s"
 msgstr "mauvaises options en ligne de commande : %s."
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr "ne peut pas obtenir le nom de la machine : %s"
 
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr "seul un fichier resolv.conf est autorisé dans le mode no-poll"
 
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr "un fichier resolv.conf (et un seul) est nécessaire pour y récuperer le nom de domaine."
 
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, c-format
 msgid "failed to read %s: %s"
 msgstr "impossible de lire %s : %s"
 
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr "pas de directive de recherche trouvée dans %s"
 
-#: option.c:4913
+#: option.c:4933
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr "un domaine par défaut doit être spécifié lorsque l'option --dhcp-fqdn est utilisée"
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr "vérification de syntaxe OK"
 
@@ -1192,25 +1192,30 @@
 msgid "failed to send packet: %s"
 msgstr "impossible d'envoyer le paquet : %s"
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr ""
 
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr "le serveur de nom %s a refusé de faire une recherche récursive"
 
-#: forward.c:683
+#: forward.c:684
 #, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr "détection d'une possible attaque de type DNS-rebind: %s"
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr ""
 
-#: forward.c:2166
+#: forward.c:2184
 #, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr "Nombre maximum de requêtes DNS concurrentes atteint (maximum : %d)."
@@ -1248,380 +1253,380 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr ""
 
-#: network.c:1322
+#: network.c:1337
 #, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr "impossible de lier la socket de serveur pour %s : %s"
 
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr "ignore le serveur de nom %s - interface locale"
 
-#: network.c:1528
+#: network.c:1539
 #, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr "ignore le serveur de nom %s - ne peut construire/lier la socket : %m"
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr "non-qualifié(e)"
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr "noms"
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr "défaut"
 
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr "domaine"
 
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr "utilise les adresses locales seulement pour %s %s"
 
-#: network.c:1564
+#: network.c:1575
 #, c-format
 msgid "using standard nameservers for %s %s"
 msgstr "utilisation des serveurs de nom standards pour %s %s"
 
-#: network.c:1566
+#: network.c:1577
 #, fuzzy, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr "utilise le serveur de nom %s#%d pour %s %s"
 
-#: network.c:1570
+#: network.c:1581
 #, fuzzy, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr "utilise le serveur de nom %s#%d pour %s %s"
 
-#: network.c:1573
+#: network.c:1584
 #, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr "utilise le serveur de nom %s#%d (via %s)"
 
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr "utilise le serveur de nom %s#%d"
 
-#: network.c:1580
+#: network.c:1591
 #, fuzzy, c-format
 msgid "using %d more local addresses"
 msgstr "utilise le serveur de nom %s#%d"
 
-#: network.c:1582
+#: network.c:1593
 #, fuzzy, c-format
 msgid "using %d more nameservers"
 msgstr "utilise le serveur de nom %s#%d"
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr ""
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr ""
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr ""
 
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 #, fuzzy
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr "DBus n'est pas disponible : activez HAVE_DBUS dans src/config.h"
 
 #
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr "TFTP n'est pas disponible : activez HAVE_TFTP dans src/config.h"
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 #, fuzzy
 msgid "cannot use --conntrack AND --query-port"
 msgstr "impossible d'utiliser conjointement --conntrack et --query-port"
 
 #
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 #, fuzzy
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr "Support de suivi de connexion non disponible : activez HAVE_CONNTRACK dans src/config.h"
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 msgid "asynchronous logging is not available under Solaris"
 msgstr "l'écriture de traces en mode asynchrone n'est pas disponible sous Solaris."
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 msgid "asynchronous logging is not available under Android"
 msgstr "l'écriture de traces en mode asynchrone n'est pas disponible sous Android."
 
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr "le mode « autorité DNS » n'est pas disponible : activez HAVE_AUTH dans src/config.h"
 
 #
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 #, fuzzy
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr "TFTP n'est pas disponible : activez HAVE_TFTP dans src/config.h"
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr ""
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr "le numéro de série de la zone doit être configuré dans --auth-soa"
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr "le constructeur de plage dhcp n'est pas disponible sur cette plate-forme"
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr "--bind-interfaces et --bind-dynamic sont mutuellement exclusives"
 
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr "impossible de trouver la liste des interfaces : %s"
 
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr "interface %s inconnue"
 
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr "Erreur DBus : %s"
 
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr "DBus n'est pas disponible : activez HAVE_DBUS dans src/config.h"
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr "utilisateur ou groupe inconnu : %s"
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr "Ne peut effectuer un 'chdir' à la racine du système de fichier : %s"
 
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, c-format
 msgid "started, version %s DNS disabled"
 msgstr "démarrage avec le DNS désactivé (version %s)"
 
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr "demarré, version %s (taille de cache %d)"
 
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr "démarrage avec le cache désactivé (version %s)"
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr ""
 
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr "options à la compilation : %s"
 
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr "Support DBus autorisé : connecté au bus système"
 
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr "Support DBus autorisé : connexion au bus en attente"
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr ""
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr ""
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr ""
 
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr "Impossible de changer pour l'utilisateur %s : %s"
 
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr "active l'option --bind-interfaces à cause de limitations dans le système d'exploitation"
 
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr "attention : l'interface %s n'existe pas actuellement"
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr "attention : l'option « resolv-file » sera ignorée car « no-resolv » a été spécifié"
 
 #
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 msgid "warning: no upstream servers configured"
 msgstr "attention : aucun serveur amont n'est configuré"
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr "mode asynchrone d'écriture de traces, la taille maximum de la queue est de %d messages."
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr "annonces de routeur IPv6 activées"
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr "root est"
 
 #
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "enabled"
 msgstr "activé"
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr "mode sécurisé"
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, fuzzy, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr "répertoire TFTP %s inaccessible : %s"
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr "le nombre maximum de transferts TFTP simultanés sera restreint à %d"
 
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr "connecté au systeme DBus"
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr "Ne peut se lancer en tâche de fond : %s"
 
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, c-format
 msgid "failed to create helper: %s"
 msgstr "impossible de créer le 'helper' : %s"
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, c-format
 msgid "setting capabilities failed: %s"
 msgstr "impossible de configurer la capacité %s"
 
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr "Impossible de changer l'identifiant utilisateur pour %s : %s"
 
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr "Impossible de changer l'identifiant de groupe pour %s : %s"
 
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr "impossible de lire le fichier de PID %s : %s"
 
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, c-format
 msgid "cannot open log %s: %s"
 msgstr "Ne peut ouvrir le fichier de log %s : %s"
 
 #
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, c-format
 msgid "failed to load Lua script: %s"
 msgstr "impossible de charger le script Lua : %s"
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr "répertoire TFTP %s inaccessible : %s"
 
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, fuzzy, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr "ne peut ouvrir ou créer le fichiers de baux %s : %s"
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr ""
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, c-format
 msgid "script process killed by signal %d"
 msgstr "Le script a été terminé par le signal %d"
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, c-format
 msgid "script process exited with status %d"
 msgstr "Le script s'est terminé avec le statut %d"
 
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, c-format
 msgid "failed to execute %s: %s"
 msgstr "impossible d'exécuter à %s : %s"
 
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr ""
+
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, fuzzy, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr "impossible de lire le fichier de PID %s : %s"
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr "sortie sur réception du signal SIGTERM"
 
-#: dnsmasq.c:1414
+#: dnsmasq.c:1444
 #, c-format
 msgid "failed to access %s: %s"
 msgstr "impossible d'accéder à %s : %s"
 
-#: dnsmasq.c:1444
+#: dnsmasq.c:1474
 #, c-format
 msgid "reading %s"
 msgstr "Lecture de %s"
 
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, c-format
 msgid "no servers found in %s, will retry"
 msgstr "aucun serveur trouvé dans %s, va réessayer"
@@ -1953,7 +1958,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr ""
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr "la fonction lease() est absente du script Lua"
 
@@ -2114,66 +2119,66 @@
 msgid "duplicate IP address %s (%s) in dhcp-config directive"
 msgstr "adresse IP %s (%s) dupliquée dans la directive dhcp-config."
 
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr "impossible de déclarer SO_BINDTODEVICE sur la socket DHCP : %s"
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr "Options DHCP connues :\n"
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr "Options DHCPv6 connues :\n"
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ", préfixe obsolète"
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ", durée de bail "
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr "%s sans état (stateless) sur %s%.0s%.0s%s"
 
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr "%s, baux statiques seulement sur %.0s%s%s%.0s"
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr "%s, proxy sur le sous-réseau %.0s%s%.0s"
 
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr "%s, plage d'adresses IP %s -- %s%s%.0s"
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr "noms IPv6 dérivés de DHCPv4 sur %s%s"
 
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, c-format
 msgid "router advertisement on %s%s"
 msgstr "annonces de routeurs sur %s%s"
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr "Relais DHCP de %s à %s via %s"
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr "Relais DHCP de %s à %s"
@@ -2203,7 +2208,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr "impossible de lire le fichier de PID %s : %s"
 
-#: dnssec.c:527
+#: dnssec.c:208
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr ""
 
@@ -2282,7 +2287,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr "Ne peut pas lire le répertoire %s : %s"
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr ""
diff --git a/po/id.po b/po/id.po
index 60556c0..3634add 100644
--- a/po/id.po
+++ b/po/id.po
@@ -15,77 +15,77 @@
 "Content-Type: text/plain; charset=ASCII\n"
 "Content-Transfer-Encoding: 8bit\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr ""
 
 # OK
-#: cache.c:923
+#: cache.c:928
 #, fuzzy, c-format
 msgid "failed to load names from %s: %s"
 msgstr "gagal memuat nama-nama dari %s: %s"
 
 # OK
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, fuzzy, c-format
 msgid "bad address at %s line %d"
 msgstr "kesalahan nama pada %s baris %d"
 
 # OK
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr "kesalahan nama pada %s baris %d"
 
 # OK
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr "membaca %s - %d alamat"
 
 # OK
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr "cache telah dihapus"
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr ""
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr ""
 
 # OK
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr "tidak memberikan nama %s kepada lease DHCP %s karena nama telah ada dalam %sdengan alamat %s"
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr ""
 
 # OK
-#: cache.c:1414
+#: cache.c:1419
 #, fuzzy, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr "ukuran cache %d, %d/%d penyisipan cache menimpa cache yang belum kadaluwarsa"
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr ""
 
-#: cache.c:1419
+#: cache.c:1424
 #, c-format
 msgid "queries for authoritative zones %u"
 msgstr ""
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr ""
@@ -103,24 +103,24 @@
 msgstr "gagal memuat %S: %m"
 
 # OK
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr "tidak bisa mendapatkan memory"
 
 # OK
-#: util.c:287
+#: util.c:291
 #, fuzzy, c-format
 msgid "cannot create pipe: %s"
 msgstr "tidak bisa membaca %s: %s"
 
 # OK
-#: util.c:295
+#: util.c:299
 #, fuzzy, c-format
 msgid "failed to allocate %d bytes"
 msgstr "gagal memuat %S: %m"
 
 # OK
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr "tak terbatas"
@@ -906,7 +906,7 @@
 msgstr ""
 
 # OK
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 #, fuzzy
 msgid "bad interface name"
 msgstr "nama MX salah"
@@ -927,7 +927,7 @@
 msgstr "membaca %s - %d alamat"
 
 # OK
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 #, fuzzy
 msgid "bad IPv6 address"
 msgstr "membaca %s - %d alamat"
@@ -961,7 +961,7 @@
 msgstr ""
 
 # OK
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, fuzzy, c-format
 msgid "cannot access directory %s: %s"
 msgstr "tidak bisa membaca %s: %s"
@@ -1023,243 +1023,243 @@
 msgid "bad port range"
 msgstr "port salah"
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr ""
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr ""
 
 # OK
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr "dhcp-range salah"
 
 # OK
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr "jangkauan DHCP tidak konsisten"
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr ""
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr ""
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr ""
 
 # OK
-#: option.c:2916
+#: option.c:2925
 #, fuzzy
 msgid "inconsistent DHCPv6 range"
 msgstr "jangkauan DHCP tidak konsisten"
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr ""
 
 # OK
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 #, fuzzy
 msgid "bad hex constant"
 msgstr "dhcp-host salah"
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr ""
 
 # OK
-#: option.c:3110
+#: option.c:3119
 #, fuzzy, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr "alamat IP kembar %s dalam direktif dhcp-config"
 
 # OK
-#: option.c:3168
+#: option.c:3177
 #, fuzzy
 msgid "bad DHCP host name"
 msgstr "nama MX salah"
 
 # OK
-#: option.c:3250
+#: option.c:3259
 #, fuzzy
 msgid "bad tag-if"
 msgstr "target MX salah"
 
 # OK
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr "nomor port tidak benar"
 
 # OK
-#: option.c:3669
+#: option.c:3678
 #, fuzzy
 msgid "bad dhcp-proxy address"
 msgstr "membaca %s - %d alamat"
 
 # OK
-#: option.c:3695
+#: option.c:3704
 #, fuzzy
 msgid "Bad dhcp-relay"
 msgstr "dhcp-range salah"
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr ""
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr ""
 
 # OK
-#: option.c:3787
+#: option.c:3796
 #, fuzzy
 msgid "invalid alias range"
 msgstr "weight tidak benar"
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr ""
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr ""
 
 # OK
-#: option.c:3880
+#: option.c:3889
 #, fuzzy
 msgid "bad PTR record"
 msgstr "rekord SRV salah"
 
 # OK
-#: option.c:3911
+#: option.c:3920
 #, fuzzy
 msgid "bad NAPTR record"
 msgstr "rekord SRV salah"
 
 # OK
-#: option.c:3945
+#: option.c:3954
 #, fuzzy
 msgid "bad RR record"
 msgstr "rekord SRV salah"
 
 # OK
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr "rekord TXT salah"
 
 # OK
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr "rekord SRV salah"
 
 # OK
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr "target SRV salah"
 
 # OK
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr "prioritas tidak benar"
 
 # OK
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr "weight tidak benar"
 
 # OK
-#: option.c:4064
+#: option.c:4073
 #, fuzzy
 msgid "Bad host-record"
 msgstr "rekord SRV salah"
 
 # OK
-#: option.c:4088
+#: option.c:4097
 #, fuzzy
 msgid "Bad name in host-record"
 msgstr "kesalahan nama di %s"
 
 # OK
-#: option.c:4153
+#: option.c:4162
 #, fuzzy
 msgid "bad trust anchor"
 msgstr "port salah"
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr ""
 
-#: option.c:4177
+#: option.c:4186
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr ""
 
 # OK
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr "kurang \""
 
 # OK
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr "pilihan salah"
 
 # OK
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr "parameter berlebihan"
 
 # OK
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr "parameter kurang"
 
 # OK
-#: option.c:4300
+#: option.c:4309
 #, fuzzy
 msgid "illegal option"
 msgstr "pilihan salah"
 
 # OK
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr "kesalahan"
 
 # OK
-#: option.c:4309
+#: option.c:4318
 #, fuzzy, c-format
 msgid " at line %d of %s"
 msgstr "%s pada baris %d dari %%s"
 
 # OK
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, fuzzy, c-format
 msgid "read %s"
 msgstr "membaca %s"
 
 # OK
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr "tidak bisa membaca %s: %s"
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr ""
 
 # OK
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr "Dnsmasq versi %s  %s\n"
 
 # OK
-#: option.c:4712
+#: option.c:4730
 #, fuzzy, c-format
 msgid ""
 "Compile time options: %s\n"
@@ -1269,75 +1269,75 @@
 "\n"
 
 # OK
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr "Perangkat lunak ini tersedia TANPA JAMINAN SEDIKITPUN.\n"
 
 # OK
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr "Dnsdmasq adalah perangkat lunak bebas, dan Anda dipersilahkan untuk membagikannya\n"
 
 # OK
-#: option.c:4715
+#: option.c:4733
 #, fuzzy, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr "dengan aturan GNU General Public License, versi 2.\n"
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr ""
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr ""
 
 # OK
-#: option.c:4730
+#: option.c:4748
 #, fuzzy, c-format
 msgid "bad command line options: %s"
 msgstr "pilihan baris perintah salah: %s."
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
 # OK
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr "tidak bisa mendapatkan host-name: %s"
 
 # OK
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr "hanya satu file resolv.conf yang diperbolehkan dalam modus no-poll."
 
 # OK
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr "harus mempunyai tepat satu resolv.conf untuk mendapatkan nama domain."
 
 # OK
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, fuzzy, c-format
 msgid "failed to read %s: %s"
 msgstr "gagal membaca %s: %s"
 
 # OK
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr "tidak ditemukan direktif search di %s"
 
-#: option.c:4913
+#: option.c:4933
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr ""
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr ""
 
@@ -1347,27 +1347,32 @@
 msgid "failed to send packet: %s"
 msgstr "gagal mendengarkan di socket: %s"
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr ""
 
 # OK
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr "nameserver %s menolak melakukan resolusi rekursif"
 
-#: forward.c:683
+#: forward.c:684
 #, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr ""
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr ""
 
 # OK
-#: forward.c:2166
+#: forward.c:2184
 #, fuzzy, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr "Sebutkan jumlah maksimum lease DHCP (default %s)."
@@ -1409,422 +1414,422 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr ""
 
-#: network.c:1322
+#: network.c:1337
 #, fuzzy, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr "gagal mem-bind socket untuk mendengarkan %s: %s"
 
 # OK
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr "mengabaikan nameserver %s - antarmuka lokal"
 
 # OK
-#: network.c:1528
+#: network.c:1539
 #, fuzzy, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr "mengabaikan nameserver %s - tak dapat membuat/mem-bind socket: %s"
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr ""
 
 # OK
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr "tidak memenuhi syarat"
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr ""
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr ""
 
 # OK
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr "domain"
 
 # OK
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr "menggunakan alamat lokal saja untuk %s %s"
 
 # OK
-#: network.c:1564
+#: network.c:1575
 #, fuzzy, c-format
 msgid "using standard nameservers for %s %s"
 msgstr "menggunakan nameserver %s#%d untuk %s %s"
 
 # OK
-#: network.c:1566
+#: network.c:1577
 #, fuzzy, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr "menggunakan nameserver %s#%d untuk %s %s"
 
 # OK
-#: network.c:1570
+#: network.c:1581
 #, fuzzy, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr "menggunakan nameserver %s#%d untuk %s %s"
 
 # OK
-#: network.c:1573
+#: network.c:1584
 #, fuzzy, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr "menggunakan nameserver %s#%d"
 
 # OK
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr "menggunakan nameserver %s#%d"
 
 # OK
-#: network.c:1580
+#: network.c:1591
 #, fuzzy, c-format
 msgid "using %d more local addresses"
 msgstr "menggunakan nameserver %s#%d"
 
 # OK
-#: network.c:1582
+#: network.c:1593
 #, fuzzy, c-format
 msgid "using %d more nameservers"
 msgstr "menggunakan nameserver %s#%d"
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr ""
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr ""
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr ""
 
 # OK
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 #, fuzzy
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr "DBus tidak tersedia: setel HAVE_DBUS dalam src/config.h"
 
 # OK
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 #, fuzzy
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr "DBus tidak tersedia: setel HAVE_DBUS dalam src/config.h"
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 msgid "cannot use --conntrack AND --query-port"
 msgstr ""
 
 # OK
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 #, fuzzy
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr "DBus tidak tersedia: setel HAVE_DBUS dalam src/config.h"
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 msgid "asynchronous logging is not available under Solaris"
 msgstr ""
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 msgid "asynchronous logging is not available under Android"
 msgstr ""
 
 # OK
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 #, fuzzy
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr "DBus tidak tersedia: setel HAVE_DBUS dalam src/config.h"
 
 # OK
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 #, fuzzy
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr "DBus tidak tersedia: setel HAVE_DBUS dalam src/config.h"
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr ""
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr ""
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr ""
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr ""
 
 # OK
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr "gagal mendapatkan daftar antarmuka: %s"
 
 # OK
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr "antarmuka tidak dikenal %s"
 
 # OK
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr "DBus error: %s"
 
 # OK
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr "DBus tidak tersedia: setel HAVE_DBUS dalam src/config.h"
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr ""
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr ""
 
 # OK
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, fuzzy, c-format
 msgid "started, version %s DNS disabled"
 msgstr "dimulai, cache versi %s di disable"
 
 # OK
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr "dimulai, versi %s ukuran cache %d"
 
 # OK
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr "dimulai, cache versi %s di disable"
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr ""
 
 # OK
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr "pilihan-pilihan saat kompilasi: %s"
 
 # OK
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr "dukungan DBus dimungkinkan: terkoneksi pada bus sistem"
 
 # OK
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr "dukungan DBus dimungkinkan: koneksi bus ditunda"
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr ""
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr ""
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr ""
 
 # OK
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, fuzzy, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr "gagal memuat nama-nama dari %s: %s"
 
 # OK
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr "setelan opsi --bind-interfaces disebabkan keterbatasan OS"
 
 # OK
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr "peringatan: antarmuka %s tidak ada"
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr ""
 
 # OK
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 #, fuzzy
 msgid "warning: no upstream servers configured"
 msgstr "menyetel server-server di atas dengan DBus"
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr ""
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr ""
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr ""
 
 # OK
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 #, fuzzy
 msgid "enabled"
 msgstr "di disable"
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr ""
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr ""
 
 # OK
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr "terhubung ke sistem DBus"
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr ""
 
 # OK
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, fuzzy, c-format
 msgid "failed to create helper: %s"
 msgstr "gagal membaca %s: %s"
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, c-format
 msgid "setting capabilities failed: %s"
 msgstr ""
 
 # OK
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, fuzzy, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr "gagal memuat nama-nama dari %s: %s"
 
 # OK
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, fuzzy, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr "gagal memuat nama-nama dari %s: %s"
 
 # OK
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, fuzzy, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr "gagal membaca %s: %s"
 
 # OK
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, fuzzy, c-format
 msgid "cannot open log %s: %s"
 msgstr "tidak bisa membuka %s:%s"
 
 # OK
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, fuzzy, c-format
 msgid "failed to load Lua script: %s"
 msgstr "gagal memuat %S: %s"
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr ""
 
 # OK
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, fuzzy, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr "tidak dapat membuka atau membuat file lease: %s"
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr ""
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, c-format
 msgid "script process killed by signal %d"
 msgstr ""
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, c-format
 msgid "script process exited with status %d"
 msgstr ""
 
 # OK
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, fuzzy, c-format
 msgid "failed to execute %s: %s"
 msgstr "gagal mengakses %s: %s"
 
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr ""
+
 # OK
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, fuzzy, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr "gagal membaca %s: %s"
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr "keluar karena menerima SIGTERM"
 
 # OK
-#: dnsmasq.c:1414
+#: dnsmasq.c:1444
 #, fuzzy, c-format
 msgid "failed to access %s: %s"
 msgstr "gagal mengakses %s: %s"
 
 # OK
-#: dnsmasq.c:1444
+#: dnsmasq.c:1474
 #, c-format
 msgid "reading %s"
 msgstr "membaca %s"
 
 # OK
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, fuzzy, c-format
 msgid "no servers found in %s, will retry"
 msgstr "tidak ditemukan direktif search di %s"
@@ -2200,7 +2205,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr ""
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr ""
 
@@ -2383,69 +2388,69 @@
 msgstr "alamat IP kembar %s (%s) dalam direktif dhcp-config"
 
 # OK
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, fuzzy, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr "gagal menyetel SO_REUSEADDR pada socket DHCP: %s"
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr ""
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr ""
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ""
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ""
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr ""
 
 # OK
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, fuzzy, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr "DHCP, lease static pada %.0s%s, waktu lease %s"
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr ""
 
 # OK
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, fuzzy, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr "DHCP, jangkaun IP %s -- %s, waktu lease %s"
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr ""
 
 # OK
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, fuzzy, c-format
 msgid "router advertisement on %s%s"
 msgstr "DHCP, lease static pada %.0s%s, waktu lease %s"
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr ""
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr ""
@@ -2479,7 +2484,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr "gagal membaca %s: %s"
 
-#: dnssec.c:527
+#: dnssec.c:208
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr ""
 
@@ -2566,7 +2571,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr "tidak bisa membaca %s: %s"
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr ""
diff --git a/po/it.po b/po/it.po
index 5bb0c57..aafc9b6 100644
--- a/po/it.po
+++ b/po/it.po
@@ -16,70 +16,70 @@
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr ""
 
-#: cache.c:923
+#: cache.c:928
 #, c-format
 msgid "failed to load names from %s: %s"
 msgstr ""
 
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, c-format
 msgid "bad address at %s line %d"
 msgstr ""
 
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr ""
 
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr ""
 
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr ""
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr ""
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr ""
 
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr ""
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr ""
 
-#: cache.c:1414
+#: cache.c:1419
 #, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr ""
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr ""
 
-#: cache.c:1419
+#: cache.c:1424
 #, c-format
 msgid "queries for authoritative zones %u"
 msgstr ""
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr ""
@@ -93,21 +93,21 @@
 msgid "failed to allocate memory"
 msgstr ""
 
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr ""
 
-#: util.c:287
+#: util.c:291
 #, c-format
 msgid "cannot create pipe: %s"
 msgstr ""
 
-#: util.c:295
+#: util.c:299
 #, c-format
 msgid "failed to allocate %d bytes"
 msgstr ""
 
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr ""
@@ -778,7 +778,7 @@
 msgid "interface can only be specified once"
 msgstr ""
 
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 msgid "bad interface name"
 msgstr ""
 
@@ -794,7 +794,7 @@
 msgid "bad IP address"
 msgstr ""
 
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 msgid "bad IPv6 address"
 msgstr ""
 
@@ -822,7 +822,7 @@
 msgid "illegal repeated keyword"
 msgstr ""
 
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, c-format
 msgid "cannot access directory %s: %s"
 msgstr ""
@@ -876,263 +876,263 @@
 msgid "bad port range"
 msgstr ""
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr ""
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr ""
 
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr ""
 
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr ""
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr ""
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr ""
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr ""
 
-#: option.c:2916
+#: option.c:2925
 msgid "inconsistent DHCPv6 range"
 msgstr ""
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr ""
 
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 msgid "bad hex constant"
 msgstr ""
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr ""
 
-#: option.c:3110
+#: option.c:3119
 #, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr ""
 
-#: option.c:3168
+#: option.c:3177
 msgid "bad DHCP host name"
 msgstr ""
 
-#: option.c:3250
+#: option.c:3259
 msgid "bad tag-if"
 msgstr ""
 
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr ""
 
-#: option.c:3669
+#: option.c:3678
 msgid "bad dhcp-proxy address"
 msgstr ""
 
-#: option.c:3695
+#: option.c:3704
 msgid "Bad dhcp-relay"
 msgstr ""
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr ""
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr ""
 
-#: option.c:3787
+#: option.c:3796
 msgid "invalid alias range"
 msgstr ""
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr ""
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr ""
 
-#: option.c:3880
+#: option.c:3889
 msgid "bad PTR record"
 msgstr ""
 
-#: option.c:3911
+#: option.c:3920
 msgid "bad NAPTR record"
 msgstr ""
 
-#: option.c:3945
+#: option.c:3954
 msgid "bad RR record"
 msgstr ""
 
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr ""
 
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr ""
 
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr ""
 
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr ""
 
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr ""
 
-#: option.c:4064
+#: option.c:4073
 msgid "Bad host-record"
 msgstr ""
 
-#: option.c:4088
+#: option.c:4097
 msgid "Bad name in host-record"
 msgstr ""
 
-#: option.c:4153
+#: option.c:4162
 msgid "bad trust anchor"
 msgstr ""
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr ""
 
-#: option.c:4177
+#: option.c:4186
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr ""
 
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr ""
 
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr ""
 
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr ""
 
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr ""
 
-#: option.c:4300
+#: option.c:4309
 msgid "illegal option"
 msgstr ""
 
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr ""
 
-#: option.c:4309
+#: option.c:4318
 #, c-format
 msgid " at line %d of %s"
 msgstr ""
 
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, c-format
 msgid "read %s"
 msgstr ""
 
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr ""
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr ""
 
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr ""
 
-#: option.c:4712
+#: option.c:4730
 #, c-format
 msgid ""
 "Compile time options: %s\n"
 "\n"
 msgstr ""
 
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr ""
 
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr ""
 
-#: option.c:4715
+#: option.c:4733
 #, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr ""
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr ""
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr ""
 
-#: option.c:4730
+#: option.c:4748
 #, c-format
 msgid "bad command line options: %s"
 msgstr ""
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr ""
 
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr ""
 
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr ""
 
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, c-format
 msgid "failed to read %s: %s"
 msgstr ""
 
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr ""
 
-#: option.c:4913
+#: option.c:4933
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr ""
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr ""
 
@@ -1141,25 +1141,30 @@
 msgid "failed to send packet: %s"
 msgstr ""
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr ""
 
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr ""
 
-#: forward.c:683
+#: forward.c:684
 #, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr ""
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr ""
 
-#: forward.c:2166
+#: forward.c:2184
 #, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr ""
@@ -1197,370 +1202,370 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr ""
 
-#: network.c:1322
+#: network.c:1337
 #, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr ""
 
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr ""
 
-#: network.c:1528
+#: network.c:1539
 #, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr ""
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr ""
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr ""
 
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr ""
 
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr ""
 
-#: network.c:1564
+#: network.c:1575
 #, c-format
 msgid "using standard nameservers for %s %s"
 msgstr ""
 
-#: network.c:1566
+#: network.c:1577
 #, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr ""
 
-#: network.c:1570
+#: network.c:1581
 #, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr ""
 
-#: network.c:1573
+#: network.c:1584
 #, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr ""
 
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr ""
 
-#: network.c:1580
+#: network.c:1591
 #, c-format
 msgid "using %d more local addresses"
 msgstr ""
 
-#: network.c:1582
+#: network.c:1593
 #, c-format
 msgid "using %d more nameservers"
 msgstr ""
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr ""
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr ""
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr ""
 
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 msgid "cannot use --conntrack AND --query-port"
 msgstr ""
 
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 msgid "asynchronous logging is not available under Solaris"
 msgstr ""
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 msgid "asynchronous logging is not available under Android"
 msgstr ""
 
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr ""
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr ""
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr ""
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr ""
 
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr ""
 
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr ""
 
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr ""
 
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr ""
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr ""
 
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, c-format
 msgid "started, version %s DNS disabled"
 msgstr ""
 
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr ""
 
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr ""
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr ""
 
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr ""
 
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr ""
 
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr ""
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr ""
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr ""
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr ""
 
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr ""
 
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr ""
 
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr ""
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr ""
 
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 msgid "warning: no upstream servers configured"
 msgstr ""
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr ""
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr ""
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "enabled"
 msgstr ""
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr ""
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr ""
 
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr ""
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr ""
 
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, c-format
 msgid "failed to create helper: %s"
 msgstr ""
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, c-format
 msgid "setting capabilities failed: %s"
 msgstr ""
 
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, c-format
 msgid "cannot open log %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, c-format
 msgid "failed to load Lua script: %s"
 msgstr ""
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr ""
 
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr ""
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, c-format
 msgid "script process killed by signal %d"
 msgstr ""
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, c-format
 msgid "script process exited with status %d"
 msgstr ""
 
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, c-format
 msgid "failed to execute %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr ""
+
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr ""
 
-#: dnsmasq.c:1414
-#, c-format
-msgid "failed to access %s: %s"
-msgstr ""
-
 #: dnsmasq.c:1444
 #, c-format
+msgid "failed to access %s: %s"
+msgstr ""
+
+#: dnsmasq.c:1474
+#, c-format
 msgid "reading %s"
 msgstr ""
 
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, c-format
 msgid "no servers found in %s, will retry"
 msgstr ""
@@ -1892,7 +1897,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr ""
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr ""
 
@@ -2053,66 +2058,66 @@
 msgid "duplicate IP address %s (%s) in dhcp-config directive"
 msgstr ""
 
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr ""
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr ""
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr ""
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ""
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ""
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr ""
 
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr ""
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr ""
 
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr ""
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr ""
 
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, c-format
 msgid "router advertisement on %s%s"
 msgstr ""
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr ""
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr ""
@@ -2142,7 +2147,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr ""
 
-#: dnssec.c:527
+#: dnssec.c:208
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr ""
 
@@ -2220,7 +2225,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr ""
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr ""
diff --git a/po/no.po b/po/no.po
index bf952d0..2718648 100644
--- a/po/no.po
+++ b/po/no.po
@@ -18,70 +18,70 @@
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr ""
 
-#: cache.c:923
+#: cache.c:928
 #, fuzzy, c-format
 msgid "failed to load names from %s: %s"
 msgstr "feilet å laste navn fra %s: %s"
 
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, c-format
 msgid "bad address at %s line %d"
 msgstr "dårlig adresse ved %s linje %d"
 
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr "dårlig navn ved %s linje %d"
 
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr "les %s - %d adresser"
 
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr "mellomlager tømt"
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr ""
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr ""
 
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr "gir ikke navnet %s til DHCP leien for %s fordi navnet eksisterer i %s med adressen %s"
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr ""
 
-#: cache.c:1414
+#: cache.c:1419
 #, fuzzy, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr "mellomlager størrelse %d, %d/%d mellomlager innsettinger re-bruker mellomlager plasser som ikke er utløpt"
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr ""
 
-#: cache.c:1419
+#: cache.c:1424
 #, c-format
 msgid "queries for authoritative zones %u"
 msgstr ""
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr ""
@@ -96,21 +96,21 @@
 msgid "failed to allocate memory"
 msgstr "feilet å laste %d bytes"
 
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr "kunne ikke få minne"
 
-#: util.c:287
+#: util.c:291
 #, fuzzy, c-format
 msgid "cannot create pipe: %s"
 msgstr "kan ikke lese %s: %s"
 
-#: util.c:295
+#: util.c:299
 #, fuzzy, c-format
 msgid "failed to allocate %d bytes"
 msgstr "feilet å laste %d bytes"
 
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr "uendelig"
@@ -812,7 +812,7 @@
 msgid "interface can only be specified once"
 msgstr ""
 
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 #, fuzzy
 msgid "bad interface name"
 msgstr "dårlig MX navn"
@@ -830,7 +830,7 @@
 msgid "bad IP address"
 msgstr "les %s - %d adresser"
 
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 #, fuzzy
 msgid "bad IPv6 address"
 msgstr "les %s - %d adresser"
@@ -860,7 +860,7 @@
 msgid "illegal repeated keyword"
 msgstr ""
 
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, fuzzy, c-format
 msgid "cannot access directory %s: %s"
 msgstr "kan ikke lese %s: %s"
@@ -916,210 +916,210 @@
 msgid "bad port range"
 msgstr "dårlig port"
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr ""
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr ""
 
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr "dårlig dhcp-område"
 
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr "ikke konsistent DHCP område"
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr ""
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr ""
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr ""
 
-#: option.c:2916
+#: option.c:2925
 #, fuzzy
 msgid "inconsistent DHCPv6 range"
 msgstr "ikke konsistent DHCP område"
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr ""
 
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 #, fuzzy
 msgid "bad hex constant"
 msgstr "dårlig dhcp-vert"
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr ""
 
-#: option.c:3110
+#: option.c:3119
 #, fuzzy, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr "dubliserte IP adresser i %s dhcp-config direktiv."
 
-#: option.c:3168
+#: option.c:3177
 #, fuzzy
 msgid "bad DHCP host name"
 msgstr "dårlig MX navn"
 
-#: option.c:3250
+#: option.c:3259
 #, fuzzy
 msgid "bad tag-if"
 msgstr "dårlig MX mål"
 
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr "ugyldig portnummer"
 
-#: option.c:3669
+#: option.c:3678
 #, fuzzy
 msgid "bad dhcp-proxy address"
 msgstr "les %s - %d adresser"
 
-#: option.c:3695
+#: option.c:3704
 #, fuzzy
 msgid "Bad dhcp-relay"
 msgstr "dårlig dhcp-område"
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr ""
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr ""
 
-#: option.c:3787
+#: option.c:3796
 #, fuzzy
 msgid "invalid alias range"
 msgstr "ugyldig vekt"
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr ""
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr ""
 
-#: option.c:3880
+#: option.c:3889
 #, fuzzy
 msgid "bad PTR record"
 msgstr "dårlig SRV post"
 
-#: option.c:3911
+#: option.c:3920
 #, fuzzy
 msgid "bad NAPTR record"
 msgstr "dårlig SRV post"
 
-#: option.c:3945
+#: option.c:3954
 #, fuzzy
 msgid "bad RR record"
 msgstr "dårlig SRV post"
 
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr "dårlig TXT post"
 
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr "dårlig SRV post"
 
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr "dårlig SRV mål"
 
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr "ugyldig prioritet"
 
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr "ugyldig vekt"
 
-#: option.c:4064
+#: option.c:4073
 #, fuzzy
 msgid "Bad host-record"
 msgstr "dårlig SRV post"
 
-#: option.c:4088
+#: option.c:4097
 #, fuzzy
 msgid "Bad name in host-record"
 msgstr "dårlig navn i %s"
 
-#: option.c:4153
+#: option.c:4162
 #, fuzzy
 msgid "bad trust anchor"
 msgstr "dårlig port"
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr ""
 
-#: option.c:4177
+#: option.c:4186
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr ""
 
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr "mangler \""
 
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr "dårlig opsjon"
 
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr "overflødig parameter"
 
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr "mangler parameter"
 
-#: option.c:4300
+#: option.c:4309
 #, fuzzy
 msgid "illegal option"
 msgstr "dårlig opsjon"
 
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr "feil"
 
-#: option.c:4309
+#: option.c:4318
 #, fuzzy, c-format
 msgid " at line %d of %s"
 msgstr "%s på linje %d av %%s"
 
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, fuzzy, c-format
 msgid "read %s"
 msgstr "leser %s"
 
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr "kan ikke lese %s: %s"
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr ""
 
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr "Dnsmasq versjon %s %s\n"
 
-#: option.c:4712
+#: option.c:4730
 #, fuzzy, c-format
 msgid ""
 "Compile time options: %s\n"
@@ -1128,67 +1128,67 @@
 "Kompileringsopsjoner %s\n"
 "\n"
 
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr "Denne programvaren kommer med ABSOLUTT INGEN GARANTI.\n"
 
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr "DNsmasq er fri programvare, du er velkommen til å redistribuere den\n"
 
-#: option.c:4715
+#: option.c:4733
 #, fuzzy, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr "under vilkårene gitt i GNU General Public License, versjon 2.\n"
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr ""
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr ""
 
-#: option.c:4730
+#: option.c:4748
 #, fuzzy, c-format
 msgid "bad command line options: %s"
 msgstr "dårlige kommandlinje opsjoner: %s."
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr "klarer ikke å få vertsnavn: %s"
 
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr "kun en resolv.conf fil tillat i no-poll modus."
 
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr "må ha nøyaktig en resolv.conf å lese domene fra."
 
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, fuzzy, c-format
 msgid "failed to read %s: %s"
 msgstr "feilet å lese %s: %s"
 
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr "intet søke direktiv funnet i %s"
 
-#: option.c:4913
+#: option.c:4933
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr ""
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr ""
 
@@ -1197,25 +1197,30 @@
 msgid "failed to send packet: %s"
 msgstr "feilet å lytte på socket: %s"
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr ""
 
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr "navnetjener %s nektet å gjøre et rekursivt oppslag"
 
-#: forward.c:683
+#: forward.c:684
 #, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr ""
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr ""
 
-#: forward.c:2166
+#: forward.c:2184
 #, fuzzy, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr "Spesifiser maksimum antall DHCP leier (standard er %s)"
@@ -1253,377 +1258,377 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr ""
 
-#: network.c:1322
+#: network.c:1337
 #, fuzzy, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr "feilet å binde lytte socket for %s: %s"
 
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr "ignorerer navnetjener %s - lokal tilknytning"
 
-#: network.c:1528
+#: network.c:1539
 #, fuzzy, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr "ignorerer navnetjener %s - kan ikke lage/dinde socket: %s"
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr "ikke kvalifisert"
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr ""
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr ""
 
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr "domene"
 
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr "benytter lokale adresser kun for %s %s"
 
-#: network.c:1564
+#: network.c:1575
 #, fuzzy, c-format
 msgid "using standard nameservers for %s %s"
 msgstr "benytter navnetjener %s#%d for %s %s"
 
-#: network.c:1566
+#: network.c:1577
 #, fuzzy, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr "benytter navnetjener %s#%d for %s %s"
 
-#: network.c:1570
+#: network.c:1581
 #, fuzzy, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr "benytter navnetjener %s#%d for %s %s"
 
-#: network.c:1573
+#: network.c:1584
 #, fuzzy, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr "benytter navnetjener %s#%d"
 
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr "benytter navnetjener %s#%d"
 
-#: network.c:1580
+#: network.c:1591
 #, fuzzy, c-format
 msgid "using %d more local addresses"
 msgstr "benytter navnetjener %s#%d"
 
-#: network.c:1582
+#: network.c:1593
 #, fuzzy, c-format
 msgid "using %d more nameservers"
 msgstr "benytter navnetjener %s#%d"
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr ""
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr ""
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr ""
 
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 #, fuzzy
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr "DBus ikke tilgjengelig: sett HAVE_DBUS i src/config.h"
 
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 #, fuzzy
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr "DBus ikke tilgjengelig: sett HAVE_DBUS i src/config.h"
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 msgid "cannot use --conntrack AND --query-port"
 msgstr ""
 
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 #, fuzzy
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr "DBus ikke tilgjengelig: sett HAVE_DBUS i src/config.h"
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 msgid "asynchronous logging is not available under Solaris"
 msgstr ""
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 msgid "asynchronous logging is not available under Android"
 msgstr ""
 
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 #, fuzzy
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr "DBus ikke tilgjengelig: sett HAVE_DBUS i src/config.h"
 
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 #, fuzzy
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr "DBus ikke tilgjengelig: sett HAVE_DBUS i src/config.h"
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr ""
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr ""
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr ""
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr ""
 
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr "feilet å finne liste av tilknytninger (interfaces): %s"
 
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr "ukjent tilknytning (interface) %s"
 
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr "DBus feil: %s"
 
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr "DBus ikke tilgjengelig: sett HAVE_DBUS i src/config.h"
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr ""
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr ""
 
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, fuzzy, c-format
 msgid "started, version %s DNS disabled"
 msgstr "startet, versjon %s mellomlager deaktivert"
 
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr "startet, versjon %s mellomlager størrelse %d"
 
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr "startet, versjon %s mellomlager deaktivert"
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr ""
 
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr "kompilerings opsjoner: %s"
 
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr "DBus støtte aktivert: koblet til system buss"
 
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr "DBus støtte aktivert: avventer buss tilkobling"
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr ""
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr ""
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr ""
 
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, fuzzy, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr "feilet å laste navn fra %s: %s"
 
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr "setter --bind-interfaces opsjon på grunn av OS begrensninger"
 
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr "advarsel: nettverkskort %s eksisterer ikke for tiden"
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr ""
 
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 #, fuzzy
 msgid "warning: no upstream servers configured"
 msgstr "setter oppstrøms tjener fra DBus"
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr ""
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr ""
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 #, fuzzy
 msgid "enabled"
 msgstr "deaktivert"
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr ""
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr ""
 
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr "tilkoblet til system DBus"
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr ""
 
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, fuzzy, c-format
 msgid "failed to create helper: %s"
 msgstr "feilet å lese %s: %s"
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, c-format
 msgid "setting capabilities failed: %s"
 msgstr ""
 
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, fuzzy, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr "feilet å laste navn fra %s: %s"
 
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, fuzzy, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr "feilet å laste navn fra %s: %s"
 
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, fuzzy, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr "feilet å lese %s: %s"
 
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, fuzzy, c-format
 msgid "cannot open log %s: %s"
 msgstr "kan ikke åpne %s:%s"
 
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, fuzzy, c-format
 msgid "failed to load Lua script: %s"
 msgstr "feilet å laste %s: %s"
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr ""
 
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, fuzzy, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr "kan ikke åpne eller lage leie fil: %s"
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr ""
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, c-format
 msgid "script process killed by signal %d"
 msgstr ""
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, c-format
 msgid "script process exited with status %d"
 msgstr ""
 
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, fuzzy, c-format
 msgid "failed to execute %s: %s"
 msgstr "feilet å få tilgang til %s: %s"
 
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr ""
+
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, fuzzy, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr "feilet å lese %s: %s"
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr "avslutter etter mottak av SIGTERM"
 
-#: dnsmasq.c:1414
+#: dnsmasq.c:1444
 #, fuzzy, c-format
 msgid "failed to access %s: %s"
 msgstr "feilet å få tilgang til %s: %s"
 
-#: dnsmasq.c:1444
+#: dnsmasq.c:1474
 #, c-format
 msgid "reading %s"
 msgstr "leser %s"
 
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, fuzzy, c-format
 msgid "no servers found in %s, will retry"
 msgstr "intet søke direktiv funnet i %s"
@@ -1955,7 +1960,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr ""
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr ""
 
@@ -2120,66 +2125,66 @@
 msgid "duplicate IP address %s (%s) in dhcp-config directive"
 msgstr "dubliserte IP adresser i %s (%s) i dhcp-config direktiv"
 
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, fuzzy, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr "feilet å sette SO_REUSEADDR på DHCP socket: %s"
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr ""
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr ""
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ""
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ""
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr ""
 
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, fuzzy, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr "DHCP, statisk leie kun på %.0s%s, leie tid %s"
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr ""
 
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, fuzzy, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr "DHCP, IP område %s -- %s, leie tid %s"
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr ""
 
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, fuzzy, c-format
 msgid "router advertisement on %s%s"
 msgstr "DHCP, statisk leie kun på %.0s%s, leie tid %s"
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr ""
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr ""
@@ -2209,7 +2214,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr "feilet å lese %s: %s"
 
-#: dnssec.c:527
+#: dnssec.c:208
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr ""
 
@@ -2287,7 +2292,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr "kan ikke lese %s: %s"
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr ""
diff --git a/po/pl.po b/po/pl.po
index 0bf4173..33f0d5a 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -21,70 +21,70 @@
 "X-Generator: Poedit 1.8.7\n"
 "X-Language: pl_PL\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr "Wewnętrzny błąd w pamięci podręcznej."
 
-#: cache.c:923
+#: cache.c:928
 #, c-format
 msgid "failed to load names from %s: %s"
 msgstr "nie potrafię wczytać nazw z %s: %s"
 
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, c-format
 msgid "bad address at %s line %d"
 msgstr "błędny adres w pliku %s, w linii %d"
 
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr "błędna nazwa w pliku %s, w linii %d"
 
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr "wczytałem %s - %d adresów"
 
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr "wyczyszczono pamięć podręczną"
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr "Nie znalazłem adresu IPv4 komputera %s"
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr "%s to nazwa CNAME, nie przypisuję jej dzierżawie DHCP %s"
 
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr "nazwa %s nie została nadana dzierżawie DHCP %s, ponieważ nazwa istnieje w %s i ma już adres %s"
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr "czas %lu"
 
-#: cache.c:1414
+#: cache.c:1419
 #, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr "wielkość pamięci podręcznej: %d; %d z %d miejsc aktualnych wpisów użyto ponownie."
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr "%u zapytań przesłanych dalej, %u odpowiedzi udzielonych samodzielnie"
 
-#: cache.c:1419
+#: cache.c:1424
 #, c-format
 msgid "queries for authoritative zones %u"
 msgstr "zapytań do stref autorytatywnych %u"
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr "serwer %s#%d: %u zapytań wysłanych, %u ponowionych lub nieudanych"
@@ -98,21 +98,21 @@
 msgid "failed to allocate memory"
 msgstr "nie udało się przydzielić pamięci"
 
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr "nie można dostać pamięci"
 
-#: util.c:287
+#: util.c:291
 #, c-format
 msgid "cannot create pipe: %s"
 msgstr "błąd podczas próby utworzenia potoku: %s"
 
-#: util.c:295
+#: util.c:299
 #, c-format
 msgid "failed to allocate %d bytes"
 msgstr "niemożliwość przydzielenia %d bajtów pamięci"
 
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr "nieskończona"
@@ -788,7 +788,7 @@
 msgid "interface can only be specified once"
 msgstr ""
 
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 msgid "bad interface name"
 msgstr "nieprawidłowa nazwa interfejsu"
 
@@ -804,7 +804,7 @@
 msgid "bad IP address"
 msgstr "zły adres IP"
 
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 msgid "bad IPv6 address"
 msgstr "zły adres IPv6"
 
@@ -832,7 +832,7 @@
 msgid "illegal repeated keyword"
 msgstr "wielokrotne użycie opcji niedozwolone (pojawiła się wsześniej w pliku konfiguracyjnym)"
 
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, c-format
 msgid "cannot access directory %s: %s"
 msgstr "brak dostępu do katalogu %s: %s"
@@ -886,196 +886,196 @@
 msgid "bad port range"
 msgstr "nieprawidłowy zakres numerów portów"
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr "nieprawidłowa nazwa urządzenia w bridge-interface"
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr "można wskazać tylko jeden znacznik sieci"
 
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr "nieprawidłowy zakres dhcp-range"
 
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr "niespójny zakres adresów DHCP"
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr "długość prefiksu musi wynosić dokładnie 64 dla podsieci RA"
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr "długość prefiksu musi wynosić dokładnie 64 dla konstruktorów podsieci"
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr "długość prefiksu musi wynosić co najmniej 64"
 
-#: option.c:2916
+#: option.c:2925
 msgid "inconsistent DHCPv6 range"
 msgstr "niespójny zakres adresów DHCPv6"
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr "prefiks musi wynosić zero z argumentem \"constructor:\""
 
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 msgid "bad hex constant"
 msgstr "zapis niezgodny z formatem szesnastkowym"
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr "--dhcp-host nie dopuszcza dopasowywania na podstawie znaczników"
 
-#: option.c:3110
+#: option.c:3119
 #, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr "powtórzony adres IP %s w specyfikacji dhcp-host"
 
-#: option.c:3168
+#: option.c:3177
 msgid "bad DHCP host name"
 msgstr "niedopuszczalna nazwa komputera w dhcp-host"
 
-#: option.c:3250
+#: option.c:3259
 msgid "bad tag-if"
 msgstr "nieprawidłowa składnia 'tag-if'"
 
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr "nieprawidłowy numer portu"
 
-#: option.c:3669
+#: option.c:3678
 msgid "bad dhcp-proxy address"
 msgstr "zły adres dhcp-proxy"
 
-#: option.c:3695
+#: option.c:3704
 msgid "Bad dhcp-relay"
 msgstr "zły dhcp-relay"
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr "nieprawidłowe argumenty RA"
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr "zły DUID"
 
-#: option.c:3787
+#: option.c:3796
 msgid "invalid alias range"
 msgstr "nieprawidłowy zakres adresów w --alias"
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr "zła CNAME"
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr "powtórzona CNAME"
 
-#: option.c:3880
+#: option.c:3889
 msgid "bad PTR record"
 msgstr "nieprawidłowy zapis rekordu PTR"
 
-#: option.c:3911
+#: option.c:3920
 msgid "bad NAPTR record"
 msgstr "nieprawidłowy zapis rekordu NAPTR"
 
-#: option.c:3945
+#: option.c:3954
 msgid "bad RR record"
 msgstr "nieprawidłowy zapis rekordu RR"
 
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr "nieprawidłowy zapis rekordu TXT"
 
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr "nieprawidłowy zapis rekordu SRV"
 
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr "nieprawidłowa wartość celu SRV"
 
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr "nieprawidłowy priorytet"
 
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr "nieprawidłowa waga"
 
-#: option.c:4064
+#: option.c:4073
 msgid "Bad host-record"
 msgstr "nieprawidłowy zapis host-record"
 
-#: option.c:4088
+#: option.c:4097
 msgid "Bad name in host-record"
 msgstr "niedopuszczalna nazwa w host-record"
 
-#: option.c:4153
+#: option.c:4162
 msgid "bad trust anchor"
 msgstr "nieprawidłowa specyfikacja punktu zaufania"
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr "zły zapis szesnastkowy"
 
-#: option.c:4177
+#: option.c:4186
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr "nieobsługiwana opcja (sprawdź, czy obsługa DHCP/TFTP/DNSSEC/DBus została wkompilowana)"
 
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr "brakuje \""
 
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr "nieprawidłowa opcja"
 
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr "nadwyżkowy parametr"
 
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr "brak parametru"
 
-#: option.c:4300
+#: option.c:4309
 msgid "illegal option"
 msgstr "niedopuszczalna opcja"
 
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr "błąd"
 
-#: option.c:4309
+#: option.c:4318
 #, c-format
 msgid " at line %d of %s"
 msgstr " w linii %d pliku %s"
 
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, c-format
 msgid "read %s"
 msgstr "przeczytałem %s"
 
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr "błąd odczytu z pliku %s: %s"
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr "jakieś śmieci w linii poleceń"
 
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr "Dnsmasq, wersja %s  %s\n"
 
-#: option.c:4712
+#: option.c:4730
 #, c-format
 msgid ""
 "Compile time options: %s\n"
@@ -1084,67 +1084,67 @@
 "Wkompilowane opcje %s\n"
 "\n"
 
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr "Autor nie daje ŻADNYCH GWARANCJI egzekwowalnych prawnie.\n"
 
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr "Dnsmasq jest wolnym oprogramowaniem, możesz go rozprowadzać\n"
 
-#: option.c:4715
+#: option.c:4733
 #, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr "na warunkach określonych w GNU General Public Licence, w wersji 2 lub 3.\n"
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr "spróbuj: --help"
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr "spróbuj: -w"
 
-#: option.c:4730
+#: option.c:4748
 #, c-format
 msgid "bad command line options: %s"
 msgstr "nieprawidłowa opcja w linii poleceń %s"
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr "nie można pobrać nazwy hosta: %s"
 
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr "w trybie no-poll można wskazać najwyżej jeden plik resolv.conf."
 
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr "musisz mieć dokładnie jeden plik resolv.conf do odczytu domen."
 
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, c-format
 msgid "failed to read %s: %s"
 msgstr "nie udało się odczytać %s: %s"
 
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr "brak wytycznych wyszukiwania w %s"
 
-#: option.c:4913
+#: option.c:4933
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr "w przypadku używania --dhcp-fqdn trzeba wskazać domyślną domenę"
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr "składnia sprawdzona, jest prawidłowa"
 
@@ -1153,25 +1153,30 @@
 msgid "failed to send packet: %s"
 msgstr "wysyłanie pakietu nie powiodło się: %s"
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr "odrzucam odpowiedź DNS: nie zgadza się specyfikacja podsieci"
 
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr "serwer nazw %s odmawia wykonania zapytania rekurencyjnego"
 
-#: forward.c:683
+#: forward.c:684
 #, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr "prawdopodobnie wykryto atak DNS-rebind: %s"
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr "Ignorowanie zapytań z sieci pozalokalnych."
 
-#: forward.c:2166
+#: forward.c:2184
 #, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr "Osiągnięto graniczną ilość jednocześnie obsługiwanych zapytań DNS (maks: %d)"
@@ -1209,370 +1214,371 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr "spróbuj podwyższyć /proc/sys/net/core/optmem_max"
 
-#: network.c:1322
+#: network.c:1337
 #, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr "błąd przy przyznawaniu nazwy gniazdu serwera %s: %s"
 
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr "ignorowanie serwera nazw %s - interfejs lokalny"
 
-#: network.c:1528
+#: network.c:1539
 #, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr "ignorowanie serwera nazw %s - nie można utworzyć/dowiązać gniazda: %s"
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr "(brak obsługi DNSSEC)"
 
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr "niekwalifikowane(-a)"
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr "nazwy"
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr "domyślne"
 
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr "domeny"
 
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr "używam adresów lokalnych tylko dla %s %s"
 
-#: network.c:1564
+#: network.c:1575
 #, c-format
 msgid "using standard nameservers for %s %s"
 msgstr "używam standardowych serwerów nazw dla %s %s"
 
-#: network.c:1566
+#: network.c:1577
 #, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr "używam serwera nazw %s#%d dla %s %s %s"
 
-#: network.c:1570
+#: network.c:1581
 #, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr "NIE używam serwera nazw %s#%d - wykryto pętlę zapytań"
 
-#: network.c:1573
+#: network.c:1584
 #, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr "używam serwera nazw %s#%d (przez %s)"
 
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr "używam serwera nazw %s#%d"
 
-#: network.c:1580
+#: network.c:1591
 #, fuzzy, c-format
 msgid "using %d more local addresses"
 msgstr "używam o %d serwerów nazw więcej"
 
-#: network.c:1582
+#: network.c:1593
 #, c-format
 msgid "using %d more nameservers"
 msgstr "używam o %d serwerów nazw więcej"
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr "dhcp-hostsdir, dhcp-optsdir i hostsdir nie znajdują zastosowania na tej platformie"
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr "nie wskazano punktów zaufania dla DNSSEC"
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr "brak możliwości zmniejszenia pamięci podręcznej poniżej wielkości domyślnej w przypadku używania DNSSEC"
 
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr "obsługa DNSSEC niedostępna - ustaw HAVE_DNSSEC w src/config.h"
 
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr "Serwer TFTP nie został wkompilowany -- ustaw HAVE_TFTP w src/config.h"
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 msgid "cannot use --conntrack AND --query-port"
 msgstr "--conntrack i --query-port wzajemnie się wykluczają"
 
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr "wsparcie przekazywania znaczników połączeń (conntrack) nie zostało wkompilowane - ustaw HAVE_CONNTRACK w src/config.h"
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 msgid "asynchronous logging is not available under Solaris"
 msgstr "zapis do logów w trybie asynchronicznym nie jest dostępny w Solarisie"
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 msgid "asynchronous logging is not available under Android"
 msgstr "zapis do logów w trybie asynchronicznym nie jest dostępny w Androidzie"
 
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr "tryb autorytatywny DNS-a niedostępny - ustaw HAVE_AUTH w src/config.h"
 
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr "wykrywanie pętli zapytań nie zostało wkompilowane - ustaw HAVE_LOOP w src/config.h"
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr "max_port nie może być niższy niż min_port"
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr "za pomocą --auth-soa musi zostać ustawiony numer seryjny strefy"
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr "konstrukcja dhcp-range nie jest dostępna w tym systemie"
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr "--bind-interfaces i --bind-dynamic wzajemnie się wykluczają"
 
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr "błąd podczas tworzenia listy interfejsów sieciowych: %s"
 
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr "nieznany interfejs %s"
 
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr "błąd DBus: %s"
 
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr "Obsługa DBus nie została wkompilowana -- ustaw HAVE_DBUS w src/config.h"
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr "nieznany użytkownik lub grupa: %s"
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr "nie potrafię wejść do głównego katalogu: %s"
 
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, c-format
 msgid "started, version %s DNS disabled"
 msgstr "uruchomiony, wersja %s, DNS wyłączony"
 
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr "uruchomiony, wersja %s, %d miejsc w pamięci podręcznej"
 
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr "uruchomiony, wersja %s, pamięć podręczna wyłączona"
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr "usługa DNS ograniczona do lokalnych podsieci"
 
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr "opcje kompilacji: %s"
 
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr "obsługa DBus włączona, podłączono do serwera DBus"
 
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr "obsługa DBus włączona, trwa podłączanie do serwera DBus"
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr "walidacja DNSSEC włączona"
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+#, fuzzy
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr "sprawdzanie sygnatur czasowych DNSSEC wyłączone do czasu przeładowania pamięci podręcznej"
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr "sprawdzanie sygnatur czasowych DNSSEC wyłączone do czasu zsynchronizowania się zegara systemowego"
 
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr "uwaga: nie udało się zmienić użytkownika pliku %s: %s"
 
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr "ustawiam --bind-interfaces z powodu ograniczeń systemu operacyjnego"
 
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr "uwaga: interfejs %s nie jest włączony"
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr "uwaga: ignoruję opcję resolv-file, ponieważ wybrano tryb no-resolv"
 
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 msgid "warning: no upstream servers configured"
 msgstr "uwaga: nie wskazano nadrzędnych serwerów DNS"
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr "włączono asynchroniczny tryb zapisu do logów z kolejką na %d komunikatów"
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr "anonsowanie rutera IPv6 włączone"
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr "DHCP, gniazda dowiązane na wyłączność interfejsowi %s"
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr "z głównym katalogiem w "
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "enabled"
 msgstr "włączony"
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr "w trybie bezpiecznym"
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr "uwaga: %s niedostępny"
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr "uwaga: katalog TFTP %s nie jest dostępny"
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr "ograniczam ilość jednoczesnych przesłań TFTP do %d"
 
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr "podłączono do DBus-a"
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr "nie potrafię przełączyć się do pracy w tle: %s"
 
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, c-format
 msgid "failed to create helper: %s"
 msgstr "nie udało się utworzyć procesu pomocniczego: %s"
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, c-format
 msgid "setting capabilities failed: %s"
 msgstr "nie powiodło się ustawianie ograniczeń (capabilities): %s"
 
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr "nie udało się zmienić użytkownika procesu na %s: %s"
 
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr "nie udało się zmienić grupy procesu na %s: %s"
 
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr "nie udało się otworzyć pliku z PID-em %s: %s"
 
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, c-format
 msgid "cannot open log %s: %s"
 msgstr "nie udało się otworzyć logu %s: %s"
 
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, c-format
 msgid "failed to load Lua script: %s"
 msgstr "nie udało się wczytać skryptu Lua: %s"
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr "katalog TFTP %s nie jest dostępny: %s"
 
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr "nie potrafię utworzyć pliku znacznika czasu %s: %s"
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr "trwa sprawdzanie sygnatur czasowych podpisów DNSSEC"
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, c-format
 msgid "script process killed by signal %d"
 msgstr "skrypt został zabity sygnałem %d"
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, c-format
 msgid "script process exited with status %d"
 msgstr "skrypt zakończył się z kodem powrotu %d"
 
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, c-format
 msgid "failed to execute %s: %s"
 msgstr "nie udało się uruchomić %s: %s"
 
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr "trwa sprawdzanie sygnatur czasowych podpisów DNSSEC"
+
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr "nie udało się uaktualnić znacznika czasu pliku %s: %s"
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr "zakończyłem działanie z powodu odebrania SIGTERM"
 
-#: dnsmasq.c:1414
+#: dnsmasq.c:1444
 #, c-format
 msgid "failed to access %s: %s"
 msgstr "brak dostępu do %s: %s"
 
-#: dnsmasq.c:1444
+#: dnsmasq.c:1474
 #, c-format
 msgid "reading %s"
 msgstr "czytanie %s"
 
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, c-format
 msgid "no servers found in %s, will retry"
 msgstr "w %s nie znalazłem serwerów, spróbuję ponownie później"
@@ -1904,7 +1910,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr "Nieznana wersja protokołu."
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr "w skrypcie Lua brak funkcji lease()"
 
@@ -2065,66 +2071,66 @@
 msgid "duplicate IP address %s (%s) in dhcp-config directive"
 msgstr "powtórzenie adresu IP %s (%s) w opcji dhcp-config"
 
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr "nie udało się ustawić SO_BINDTODEVICE gniazda DHCP: %s"
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr "Znane opcje DHCP:\n"
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr "Rozpoznawane opcje DHCPv6:\n"
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ", przestarzały prefiks"
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ", czas dzierżawy "
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr "%s bezstanowy na %s%.0s%.0s%s"
 
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr "%s, wyłącznie statyczne dzierżawy na %.0s%s%s%.0s"
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr "%s, wykryto pośrednika na podsieci %.0s%s%.0s%.0s"
 
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr "%s, zakres IP %s -- %s%s%.0s"
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr "pochodzące z DHCPv4 nazwy IPv6 na %s%s"
 
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, c-format
 msgid "router advertisement on %s%s"
 msgstr "anonsowanie rutera na %s%s"
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr "przekazywanie DHCP z %s do %s za pomocą %s"
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr "przekazywanie DHCP z %s do %s"
@@ -2154,7 +2160,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr "nie udało się uaktualnić znacznika czasu pliku %s: %s"
 
-#: dnssec.c:527
+#: dnssec.c:208
 #, fuzzy
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr "trwa sprawdzanie sygnatur czasowych podpisów DNSSEC"
@@ -2233,7 +2239,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr "zły katalog dynamiczny %s: %s"
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr "inotify: pojawił się lub uległ zmianie plik %s"
diff --git a/po/pt_BR.po b/po/pt_BR.po
index c985a9b..cbaea31 100644
--- a/po/pt_BR.po
+++ b/po/pt_BR.po
@@ -16,70 +16,70 @@
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr ""
 
-#: cache.c:923
+#: cache.c:928
 #, c-format
 msgid "failed to load names from %s: %s"
 msgstr ""
 
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, c-format
 msgid "bad address at %s line %d"
 msgstr ""
 
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr ""
 
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr ""
 
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr ""
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr ""
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr ""
 
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr ""
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr ""
 
-#: cache.c:1414
+#: cache.c:1419
 #, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr ""
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr ""
 
-#: cache.c:1419
+#: cache.c:1424
 #, c-format
 msgid "queries for authoritative zones %u"
 msgstr ""
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr ""
@@ -93,21 +93,21 @@
 msgid "failed to allocate memory"
 msgstr ""
 
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr ""
 
-#: util.c:287
+#: util.c:291
 #, c-format
 msgid "cannot create pipe: %s"
 msgstr ""
 
-#: util.c:295
+#: util.c:299
 #, c-format
 msgid "failed to allocate %d bytes"
 msgstr ""
 
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr ""
@@ -778,7 +778,7 @@
 msgid "interface can only be specified once"
 msgstr ""
 
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 msgid "bad interface name"
 msgstr ""
 
@@ -794,7 +794,7 @@
 msgid "bad IP address"
 msgstr ""
 
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 msgid "bad IPv6 address"
 msgstr ""
 
@@ -822,7 +822,7 @@
 msgid "illegal repeated keyword"
 msgstr ""
 
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, c-format
 msgid "cannot access directory %s: %s"
 msgstr ""
@@ -876,263 +876,263 @@
 msgid "bad port range"
 msgstr ""
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr ""
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr ""
 
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr ""
 
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr ""
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr ""
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr ""
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr ""
 
-#: option.c:2916
+#: option.c:2925
 msgid "inconsistent DHCPv6 range"
 msgstr ""
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr ""
 
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 msgid "bad hex constant"
 msgstr ""
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr ""
 
-#: option.c:3110
+#: option.c:3119
 #, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr ""
 
-#: option.c:3168
+#: option.c:3177
 msgid "bad DHCP host name"
 msgstr ""
 
-#: option.c:3250
+#: option.c:3259
 msgid "bad tag-if"
 msgstr ""
 
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr ""
 
-#: option.c:3669
+#: option.c:3678
 msgid "bad dhcp-proxy address"
 msgstr ""
 
-#: option.c:3695
+#: option.c:3704
 msgid "Bad dhcp-relay"
 msgstr ""
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr ""
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr ""
 
-#: option.c:3787
+#: option.c:3796
 msgid "invalid alias range"
 msgstr ""
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr ""
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr ""
 
-#: option.c:3880
+#: option.c:3889
 msgid "bad PTR record"
 msgstr ""
 
-#: option.c:3911
+#: option.c:3920
 msgid "bad NAPTR record"
 msgstr ""
 
-#: option.c:3945
+#: option.c:3954
 msgid "bad RR record"
 msgstr ""
 
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr ""
 
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr ""
 
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr ""
 
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr ""
 
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr ""
 
-#: option.c:4064
+#: option.c:4073
 msgid "Bad host-record"
 msgstr ""
 
-#: option.c:4088
+#: option.c:4097
 msgid "Bad name in host-record"
 msgstr ""
 
-#: option.c:4153
+#: option.c:4162
 msgid "bad trust anchor"
 msgstr ""
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr ""
 
-#: option.c:4177
+#: option.c:4186
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr ""
 
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr ""
 
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr ""
 
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr ""
 
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr ""
 
-#: option.c:4300
+#: option.c:4309
 msgid "illegal option"
 msgstr ""
 
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr ""
 
-#: option.c:4309
+#: option.c:4318
 #, c-format
 msgid " at line %d of %s"
 msgstr ""
 
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, c-format
 msgid "read %s"
 msgstr ""
 
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr ""
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr ""
 
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr ""
 
-#: option.c:4712
+#: option.c:4730
 #, c-format
 msgid ""
 "Compile time options: %s\n"
 "\n"
 msgstr ""
 
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr ""
 
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr ""
 
-#: option.c:4715
+#: option.c:4733
 #, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr ""
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr ""
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr ""
 
-#: option.c:4730
+#: option.c:4748
 #, c-format
 msgid "bad command line options: %s"
 msgstr ""
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr ""
 
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr ""
 
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr ""
 
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, c-format
 msgid "failed to read %s: %s"
 msgstr ""
 
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr ""
 
-#: option.c:4913
+#: option.c:4933
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr ""
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr ""
 
@@ -1141,25 +1141,30 @@
 msgid "failed to send packet: %s"
 msgstr ""
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr ""
 
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr ""
 
-#: forward.c:683
+#: forward.c:684
 #, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr ""
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr ""
 
-#: forward.c:2166
+#: forward.c:2184
 #, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr ""
@@ -1197,370 +1202,370 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr ""
 
-#: network.c:1322
+#: network.c:1337
 #, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr ""
 
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr ""
 
-#: network.c:1528
+#: network.c:1539
 #, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr ""
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr ""
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr ""
 
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr ""
 
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr ""
 
-#: network.c:1564
+#: network.c:1575
 #, c-format
 msgid "using standard nameservers for %s %s"
 msgstr ""
 
-#: network.c:1566
+#: network.c:1577
 #, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr ""
 
-#: network.c:1570
+#: network.c:1581
 #, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr ""
 
-#: network.c:1573
+#: network.c:1584
 #, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr ""
 
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr ""
 
-#: network.c:1580
+#: network.c:1591
 #, c-format
 msgid "using %d more local addresses"
 msgstr ""
 
-#: network.c:1582
+#: network.c:1593
 #, c-format
 msgid "using %d more nameservers"
 msgstr ""
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr ""
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr ""
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr ""
 
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 msgid "cannot use --conntrack AND --query-port"
 msgstr ""
 
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 msgid "asynchronous logging is not available under Solaris"
 msgstr ""
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 msgid "asynchronous logging is not available under Android"
 msgstr ""
 
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr ""
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr ""
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr ""
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr ""
 
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr ""
 
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr ""
 
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr ""
 
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr ""
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr ""
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr ""
 
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, c-format
 msgid "started, version %s DNS disabled"
 msgstr ""
 
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr ""
 
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr ""
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr ""
 
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr ""
 
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr ""
 
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr ""
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr ""
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr ""
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr ""
 
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr ""
 
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr ""
 
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr ""
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr ""
 
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 msgid "warning: no upstream servers configured"
 msgstr ""
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr ""
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr ""
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "enabled"
 msgstr ""
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr ""
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr ""
 
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr ""
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr ""
 
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, c-format
 msgid "failed to create helper: %s"
 msgstr ""
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, c-format
 msgid "setting capabilities failed: %s"
 msgstr ""
 
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, c-format
 msgid "cannot open log %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, c-format
 msgid "failed to load Lua script: %s"
 msgstr ""
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr ""
 
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr ""
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, c-format
 msgid "script process killed by signal %d"
 msgstr ""
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, c-format
 msgid "script process exited with status %d"
 msgstr ""
 
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, c-format
 msgid "failed to execute %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr ""
+
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr ""
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr ""
 
-#: dnsmasq.c:1414
-#, c-format
-msgid "failed to access %s: %s"
-msgstr ""
-
 #: dnsmasq.c:1444
 #, c-format
+msgid "failed to access %s: %s"
+msgstr ""
+
+#: dnsmasq.c:1474
+#, c-format
 msgid "reading %s"
 msgstr ""
 
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, c-format
 msgid "no servers found in %s, will retry"
 msgstr ""
@@ -1892,7 +1897,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr ""
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr ""
 
@@ -2053,66 +2058,66 @@
 msgid "duplicate IP address %s (%s) in dhcp-config directive"
 msgstr ""
 
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr ""
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr ""
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr ""
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ""
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ""
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr ""
 
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr ""
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr ""
 
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr ""
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr ""
 
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, c-format
 msgid "router advertisement on %s%s"
 msgstr ""
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr ""
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr ""
@@ -2142,7 +2147,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr ""
 
-#: dnssec.c:527
+#: dnssec.c:208
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr ""
 
@@ -2220,7 +2225,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr ""
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr ""
diff --git a/po/ro.po b/po/ro.po
index fa29557..f84d0bc 100644
--- a/po/ro.po
+++ b/po/ro.po
@@ -15,71 +15,71 @@
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 
-#: cache.c:513
+#: cache.c:518
 msgid "Internal error in cache."
 msgstr ""
 
 # for compatibility purposes the letters â, ă, ş, ţ and î can be written as their look-alike correspondent.
-#: cache.c:923
+#: cache.c:928
 #, fuzzy, c-format
 msgid "failed to load names from %s: %s"
 msgstr "încărcarea numelor din %s: %s a eşuat"
 
-#: cache.c:949 dhcp.c:867
+#: cache.c:954 dhcp.c:867
 #, c-format
 msgid "bad address at %s line %d"
 msgstr "adresă greşită în %s, linia %d"
 
-#: cache.c:1002 dhcp.c:883
+#: cache.c:1007 dhcp.c:883
 #, c-format
 msgid "bad name at %s line %d"
 msgstr "nume greşit în %s linia %d"
 
-#: cache.c:1011 dhcp.c:958
+#: cache.c:1016 dhcp.c:958
 #, c-format
 msgid "read %s - %d addresses"
 msgstr "citesc %s - %d adrese"
 
-#: cache.c:1124
+#: cache.c:1129
 msgid "cleared cache"
 msgstr "memoria temporară a fost ştearsă"
 
-#: cache.c:1153
+#: cache.c:1158
 #, c-format
 msgid "No IPv4 address found for %s"
 msgstr ""
 
-#: cache.c:1232
+#: cache.c:1237
 #, c-format
 msgid "%s is a CNAME, not giving it to the DHCP lease of %s"
 msgstr ""
 
-#: cache.c:1256
+#: cache.c:1261
 #, c-format
 msgid "not giving name %s to the DHCP lease of %s because the name exists in %s with address %s"
 msgstr "nu pot da numele %s împrumutului de adresă DHCP a lui %s deoarece numeleexistă în %s cu adresa %s"
 
-#: cache.c:1413
+#: cache.c:1418
 #, c-format
 msgid "time %lu"
 msgstr ""
 
-#: cache.c:1414
+#: cache.c:1419
 #, fuzzy, c-format
 msgid "cache size %d, %d/%d cache insertions re-used unexpired cache entries."
 msgstr "cantitate de memorie temporară %d, %d/%d stocări temporare aureutilizat locaţii neexpirate."
 
-#: cache.c:1416
+#: cache.c:1421
 #, c-format
 msgid "queries forwarded %u, queries answered locally %u"
 msgstr ""
 
-#: cache.c:1419
+#: cache.c:1424
 #, c-format
 msgid "queries for authoritative zones %u"
 msgstr ""
 
-#: cache.c:1445
+#: cache.c:1450
 #, c-format
 msgid "server %s#%d: queries sent %u, retried or failed %u"
 msgstr ""
@@ -94,21 +94,21 @@
 msgid "failed to allocate memory"
 msgstr "nu pot încărca %d bytes"
 
-#: util.c:277 option.c:619
+#: util.c:281 option.c:619
 msgid "could not get memory"
 msgstr "nu am putut aloca memorie"
 
-#: util.c:287
+#: util.c:291
 #, fuzzy, c-format
 msgid "cannot create pipe: %s"
 msgstr "nu pot citi %s: %s"
 
-#: util.c:295
+#: util.c:299
 #, fuzzy, c-format
 msgid "failed to allocate %d bytes"
 msgstr "nu pot încărca %d bytes"
 
-#: util.c:464
+#: util.c:468
 #, c-format
 msgid "infinite"
 msgstr "infinit"
@@ -810,7 +810,7 @@
 msgid "interface can only be specified once"
 msgstr ""
 
-#: option.c:835 option.c:3800
+#: option.c:835 option.c:3809
 #, fuzzy
 msgid "bad interface name"
 msgstr "nume MX invalid"
@@ -828,7 +828,7 @@
 msgid "bad IP address"
 msgstr "citesc %s - %d adrese"
 
-#: option.c:1147 option.c:1286 option.c:3070
+#: option.c:1147 option.c:1286 option.c:3079
 #, fuzzy
 msgid "bad IPv6 address"
 msgstr "citesc %s - %d adrese"
@@ -858,7 +858,7 @@
 msgid "illegal repeated keyword"
 msgstr ""
 
-#: option.c:1593 option.c:4434
+#: option.c:1593 option.c:4443
 #, fuzzy, c-format
 msgid "cannot access directory %s: %s"
 msgstr "nu pot citi %s: %s"
@@ -914,210 +914,210 @@
 msgid "bad port range"
 msgstr "port invalid"
 
-#: option.c:2738
+#: option.c:2739
 msgid "bad bridge-interface"
 msgstr ""
 
-#: option.c:2798
+#: option.c:2807
 msgid "only one tag allowed"
 msgstr ""
 
-#: option.c:2818 option.c:2830 option.c:2939 option.c:2944 option.c:2983
+#: option.c:2827 option.c:2839 option.c:2948 option.c:2953 option.c:2992
 msgid "bad dhcp-range"
 msgstr "dhcp-range invalid"
 
-#: option.c:2845
+#: option.c:2854
 msgid "inconsistent DHCP range"
 msgstr "domeniu DHCP inconsistent"
 
-#: option.c:2907
+#: option.c:2916
 msgid "prefix length must be exactly 64 for RA subnets"
 msgstr ""
 
-#: option.c:2909
+#: option.c:2918
 msgid "prefix length must be exactly 64 for subnet constructors"
 msgstr ""
 
-#: option.c:2913
+#: option.c:2922
 msgid "prefix length must be at least 64"
 msgstr ""
 
-#: option.c:2916
+#: option.c:2925
 #, fuzzy
 msgid "inconsistent DHCPv6 range"
 msgstr "domeniu DHCP inconsistent"
 
-#: option.c:2927
+#: option.c:2936
 msgid "prefix must be zero with \"constructor:\" argument"
 msgstr ""
 
-#: option.c:3040 option.c:3088
+#: option.c:3049 option.c:3097
 #, fuzzy
 msgid "bad hex constant"
 msgstr "dhcp-host invalid"
 
-#: option.c:3062
+#: option.c:3071
 msgid "cannot match tags in --dhcp-host"
 msgstr ""
 
-#: option.c:3110
+#: option.c:3119
 #, fuzzy, c-format
 msgid "duplicate dhcp-host IP address %s"
 msgstr "adresă IP duplicat %s în declaraţia dhcp-config."
 
-#: option.c:3168
+#: option.c:3177
 #, fuzzy
 msgid "bad DHCP host name"
 msgstr "nume MX invalid"
 
-#: option.c:3250
+#: option.c:3259
 #, fuzzy
 msgid "bad tag-if"
 msgstr "ţintă MX invalidă"
 
-#: option.c:3607 option.c:4030
+#: option.c:3616 option.c:4039
 msgid "invalid port number"
 msgstr "număr de port invalid"
 
-#: option.c:3669
+#: option.c:3678
 #, fuzzy
 msgid "bad dhcp-proxy address"
 msgstr "citesc %s - %d adrese"
 
-#: option.c:3695
+#: option.c:3704
 #, fuzzy
 msgid "Bad dhcp-relay"
 msgstr "dhcp-range invalid"
 
-#: option.c:3736
+#: option.c:3745
 msgid "bad RA-params"
 msgstr ""
 
-#: option.c:3745
+#: option.c:3754
 msgid "bad DUID"
 msgstr ""
 
-#: option.c:3787
+#: option.c:3796
 #, fuzzy
 msgid "invalid alias range"
 msgstr "pondere invalidă"
 
-#: option.c:3841 option.c:3853
+#: option.c:3850 option.c:3862
 msgid "bad CNAME"
 msgstr ""
 
-#: option.c:3857
+#: option.c:3866
 msgid "duplicate CNAME"
 msgstr ""
 
-#: option.c:3880
+#: option.c:3889
 #, fuzzy
 msgid "bad PTR record"
 msgstr "înregistrare SRV invalidă"
 
-#: option.c:3911
+#: option.c:3920
 #, fuzzy
 msgid "bad NAPTR record"
 msgstr "înregistrare SRV invalidă"
 
-#: option.c:3945
+#: option.c:3954
 #, fuzzy
 msgid "bad RR record"
 msgstr "înregistrare SRV invalidă"
 
-#: option.c:3975
+#: option.c:3984
 msgid "bad TXT record"
 msgstr "înregistrare TXT invalidă"
 
-#: option.c:4016
+#: option.c:4025
 msgid "bad SRV record"
 msgstr "înregistrare SRV invalidă"
 
-#: option.c:4023
+#: option.c:4032
 msgid "bad SRV target"
 msgstr "ţintă SRV invalidă"
 
-#: option.c:4037
+#: option.c:4046
 msgid "invalid priority"
 msgstr "prioritate invalidă"
 
-#: option.c:4040
+#: option.c:4049
 msgid "invalid weight"
 msgstr "pondere invalidă"
 
-#: option.c:4064
+#: option.c:4073
 #, fuzzy
 msgid "Bad host-record"
 msgstr "înregistrare SRV invalidă"
 
-#: option.c:4088
+#: option.c:4097
 #, fuzzy
 msgid "Bad name in host-record"
 msgstr "nume invalid în %s"
 
-#: option.c:4153
+#: option.c:4162
 #, fuzzy
 msgid "bad trust anchor"
 msgstr "port invalid"
 
-#: option.c:4167
+#: option.c:4176
 msgid "bad HEX in trust anchor"
 msgstr ""
 
-#: option.c:4177
+#: option.c:4186
 msgid "unsupported option (check that dnsmasq was compiled with DHCP/TFTP/DNSSEC/DBus support)"
 msgstr ""
 
-#: option.c:4237
+#: option.c:4246
 msgid "missing \""
 msgstr "lipseşte \""
 
-#: option.c:4294
+#: option.c:4303
 msgid "bad option"
 msgstr "opţiune invalidă"
 
-#: option.c:4296
+#: option.c:4305
 msgid "extraneous parameter"
 msgstr "parametru nerecunoscut"
 
-#: option.c:4298
+#: option.c:4307
 msgid "missing parameter"
 msgstr "parametru lipsa"
 
-#: option.c:4300
+#: option.c:4309
 #, fuzzy
 msgid "illegal option"
 msgstr "opţiune invalidă"
 
-#: option.c:4307
+#: option.c:4316
 msgid "error"
 msgstr "eroare"
 
-#: option.c:4309
+#: option.c:4318
 #, fuzzy, c-format
 msgid " at line %d of %s"
 msgstr "%s la linia %d din %%s"
 
-#: option.c:4324 option.c:4571 option.c:4607
+#: option.c:4333 option.c:4580 option.c:4616
 #, fuzzy, c-format
 msgid "read %s"
 msgstr "citesc %s"
 
-#: option.c:4387 option.c:4510 tftp.c:715
+#: option.c:4396 option.c:4519 tftp.c:715
 #, c-format
 msgid "cannot read %s: %s"
 msgstr "nu pot citi %s: %s"
 
-#: option.c:4676
+#: option.c:4688
 msgid "junk found in command line"
 msgstr ""
 
-#: option.c:4711
+#: option.c:4729
 #, c-format
 msgid "Dnsmasq version %s  %s\n"
 msgstr "dnsmasq versiunea %s  %s\n"
 
-#: option.c:4712
+#: option.c:4730
 #, fuzzy, c-format
 msgid ""
 "Compile time options: %s\n"
@@ -1126,67 +1126,67 @@
 "Opţiuni cu care a fost compilat %s\n"
 "\n"
 
-#: option.c:4713
+#: option.c:4731
 #, c-format
 msgid "This software comes with ABSOLUTELY NO WARRANTY.\n"
 msgstr "Acest program vine FĂRĂ NICI O GARANŢIE.\n"
 
-#: option.c:4714
+#: option.c:4732
 #, c-format
 msgid "Dnsmasq is free software, and you are welcome to redistribute it\n"
 msgstr "Dnsmasq este un program gratuit, sunteţi invitaţi să-l redistribuiţi\n"
 
-#: option.c:4715
+#: option.c:4733
 #, fuzzy, c-format
 msgid "under the terms of the GNU General Public License, version 2 or 3.\n"
 msgstr "în termenii Licenţei publice generale GNU, versiunea 2.\n"
 
-#: option.c:4726
+#: option.c:4744
 msgid "try --help"
 msgstr ""
 
-#: option.c:4728
+#: option.c:4746
 msgid "try -w"
 msgstr ""
 
-#: option.c:4730
+#: option.c:4748
 #, fuzzy, c-format
 msgid "bad command line options: %s"
 msgstr "opţiuni în linie de comandă invalide: %s."
 
-#: option.c:4798
+#: option.c:4818
 #, c-format
 msgid "CNAME loop involving %s"
 msgstr ""
 
-#: option.c:4834
+#: option.c:4854
 #, c-format
 msgid "cannot get host-name: %s"
 msgstr "nu pot citi numele maşinii: %s"
 
-#: option.c:4862
+#: option.c:4882
 msgid "only one resolv.conf file allowed in no-poll mode."
 msgstr "se permite un singur fişier resolv.conf în modul no-poll"
 
-#: option.c:4872
+#: option.c:4892
 msgid "must have exactly one resolv.conf to read domain from."
 msgstr "am nevoie de un singur resolv.conf din care să citesc numele domeniului."
 
-#: option.c:4875 network.c:1612 dhcp.c:816
+#: option.c:4895 network.c:1623 dhcp.c:816
 #, fuzzy, c-format
 msgid "failed to read %s: %s"
 msgstr "nu pot citi %s: %s"
 
-#: option.c:4892
+#: option.c:4912
 #, c-format
 msgid "no search directive found in %s"
 msgstr "nu s-a găsit nici un criteriu de căutare în %s"
 
-#: option.c:4913
+#: option.c:4933
 msgid "there must be a default domain when --dhcp-fqdn is set"
 msgstr ""
 
-#: option.c:4922
+#: option.c:4942
 msgid "syntax check OK"
 msgstr ""
 
@@ -1195,25 +1195,30 @@
 msgid "failed to send packet: %s"
 msgstr "ascultarea pe socket a eşuat: %s"
 
-#: forward.c:597
+#: forward.c:598
 msgid "discarding DNS reply: subnet option mismatch"
 msgstr ""
 
-#: forward.c:651
+#: forward.c:652
 #, c-format
 msgid "nameserver %s refused to do a recursive query"
 msgstr "serverul DNS %s refuză interogările recursive"
 
-#: forward.c:683
+#: forward.c:684
 #, c-format
 msgid "possible DNS-rebind attack detected: %s"
 msgstr ""
 
-#: forward.c:1244 forward.c:1681
+#: forward.c:870
+#, c-format
+msgid "reducing DNS packet size for nameserver %s to %d"
+msgstr ""
+
+#: forward.c:1266 forward.c:1704
 msgid "Ignoring query from non-local network"
 msgstr ""
 
-#: forward.c:2166
+#: forward.c:2184
 #, fuzzy, c-format
 msgid "Maximum number of concurrent DNS queries reached (max: %d)"
 msgstr "Specifică numărul maxim de împrumuturi DHCP (implicit %s)."
@@ -1251,380 +1256,380 @@
 msgid "try increasing /proc/sys/net/core/optmem_max"
 msgstr ""
 
-#: network.c:1322
+#: network.c:1337
 #, fuzzy, c-format
 msgid "failed to bind server socket for %s: %s"
 msgstr "activarea socket-ului de ascultare pentru %s a eşuat: %s"
 
-#: network.c:1517
+#: network.c:1528
 #, c-format
 msgid "ignoring nameserver %s - local interface"
 msgstr "ignorăm serverul DNS %s - interfaţă locală"
 
-#: network.c:1528
+#: network.c:1539
 #, fuzzy, c-format
 msgid "ignoring nameserver %s - cannot make/bind socket: %s"
 msgstr "ignorăm serverul DNS %s - nu pot creea/activa socket-ul: %s"
 
-#: network.c:1548
+#: network.c:1559
 msgid "(no DNSSEC)"
 msgstr ""
 
-#: network.c:1551
+#: network.c:1562
 msgid "unqualified"
 msgstr "invalid"
 
-#: network.c:1551
+#: network.c:1562
 msgid "names"
 msgstr ""
 
-#: network.c:1553
+#: network.c:1564
 msgid "default"
 msgstr ""
 
-#: network.c:1555
+#: network.c:1566
 msgid "domain"
 msgstr "domeniu"
 
-#: network.c:1561
+#: network.c:1572
 #, c-format
 msgid "using local addresses only for %s %s"
 msgstr "folosim adresele locale doar pentru %S %s"
 
-#: network.c:1564
+#: network.c:1575
 #, fuzzy, c-format
 msgid "using standard nameservers for %s %s"
 msgstr "folosim serverul DNS %s#%d pentru %s %s"
 
-#: network.c:1566
+#: network.c:1577
 #, fuzzy, c-format
 msgid "using nameserver %s#%d for %s %s %s"
 msgstr "folosim serverul DNS %s#%d pentru %s %s"
 
-#: network.c:1570
+#: network.c:1581
 #, fuzzy, c-format
 msgid "NOT using nameserver %s#%d - query loop detected"
 msgstr "folosim serverul DNS %s#%d pentru %s %s"
 
-#: network.c:1573
+#: network.c:1584
 #, fuzzy, c-format
 msgid "using nameserver %s#%d(via %s)"
 msgstr "folosim serverul DNS %s#%d"
 
-#: network.c:1575
+#: network.c:1586
 #, c-format
 msgid "using nameserver %s#%d"
 msgstr "folosim serverul DNS %s#%d"
 
-#: network.c:1580
+#: network.c:1591
 #, fuzzy, c-format
 msgid "using %d more local addresses"
 msgstr "folosim serverul DNS %s#%d"
 
-#: network.c:1582
+#: network.c:1593
 #, fuzzy, c-format
 msgid "using %d more nameservers"
 msgstr "folosim serverul DNS %s#%d"
 
-#: dnsmasq.c:166
+#: dnsmasq.c:171
 msgid "dhcp-hostsdir, dhcp-optsdir and hostsdir are not supported on this platform"
 msgstr ""
 
-#: dnsmasq.c:181
+#: dnsmasq.c:186
 msgid "no root trust anchor provided for DNSSEC"
 msgstr ""
 
-#: dnsmasq.c:184
+#: dnsmasq.c:189
 msgid "cannot reduce cache size from default when DNSSEC enabled"
 msgstr ""
 
-#: dnsmasq.c:186
+#: dnsmasq.c:191
 #, fuzzy
 msgid "DNSSEC not available: set HAVE_DNSSEC in src/config.h"
 msgstr "DBus nu este disponibil: puneţi HAVE_DBUS in src/config.h"
 
-#: dnsmasq.c:192
+#: dnsmasq.c:197
 #, fuzzy
 msgid "TFTP server not available: set HAVE_TFTP in src/config.h"
 msgstr "DBus nu este disponibil: puneţi HAVE_DBUS in src/config.h"
 
-#: dnsmasq.c:197
+#: dnsmasq.c:202
 msgid "cannot use --conntrack AND --query-port"
 msgstr ""
 
-#: dnsmasq.c:200
+#: dnsmasq.c:205
 #, fuzzy
 msgid "conntrack support not available: set HAVE_CONNTRACK in src/config.h"
 msgstr "DBus nu este disponibil: puneţi HAVE_DBUS in src/config.h"
 
-#: dnsmasq.c:205
+#: dnsmasq.c:210
 msgid "asynchronous logging is not available under Solaris"
 msgstr ""
 
-#: dnsmasq.c:210
+#: dnsmasq.c:215
 msgid "asynchronous logging is not available under Android"
 msgstr ""
 
-#: dnsmasq.c:215
+#: dnsmasq.c:220
 #, fuzzy
 msgid "authoritative DNS not available: set HAVE_AUTH in src/config.h"
 msgstr "DBus nu este disponibil: puneţi HAVE_DBUS in src/config.h"
 
-#: dnsmasq.c:220
+#: dnsmasq.c:225
 #, fuzzy
 msgid "loop detection not available: set HAVE_LOOP in src/config.h"
 msgstr "DBus nu este disponibil: puneţi HAVE_DBUS in src/config.h"
 
-#: dnsmasq.c:227
+#: dnsmasq.c:229
 msgid "max_port cannot be smaller than min_port"
 msgstr ""
 
-#: dnsmasq.c:234
+#: dnsmasq.c:236
 msgid "zone serial must be configured in --auth-soa"
 msgstr ""
 
-#: dnsmasq.c:252
+#: dnsmasq.c:254
 msgid "dhcp-range constructor not available on this platform"
 msgstr ""
 
-#: dnsmasq.c:298
+#: dnsmasq.c:300
 msgid "cannot set --bind-interfaces and --bind-dynamic"
 msgstr ""
 
-#: dnsmasq.c:301
+#: dnsmasq.c:303
 #, c-format
 msgid "failed to find list of interfaces: %s"
 msgstr "enumerarea interfeţelor a eşuat: %s"
 
-#: dnsmasq.c:310
+#: dnsmasq.c:312
 #, c-format
 msgid "unknown interface %s"
 msgstr "interfaţă necunoscută %s"
 
-#: dnsmasq.c:374 dnsmasq.c:1037
+#: dnsmasq.c:377 dnsmasq.c:1054
 #, c-format
 msgid "DBus error: %s"
 msgstr "eroare DBus: %s"
 
-#: dnsmasq.c:377
+#: dnsmasq.c:380
 msgid "DBus not available: set HAVE_DBUS in src/config.h"
 msgstr "DBus nu este disponibil: puneţi HAVE_DBUS in src/config.h"
 
-#: dnsmasq.c:405
+#: dnsmasq.c:410
 #, c-format
 msgid "unknown user or group: %s"
 msgstr ""
 
-#: dnsmasq.c:460
+#: dnsmasq.c:465
 #, c-format
 msgid "cannot chdir to filesystem root: %s"
 msgstr ""
 
-#: dnsmasq.c:716
+#: dnsmasq.c:730
 #, fuzzy, c-format
 msgid "started, version %s DNS disabled"
 msgstr "am pornit, versiunea %s memorie temporară dezactivată"
 
-#: dnsmasq.c:720
+#: dnsmasq.c:734
 #, c-format
 msgid "started, version %s cachesize %d"
 msgstr "am ponit, versiunea %s memorie temporară %d"
 
-#: dnsmasq.c:722
+#: dnsmasq.c:736
 #, c-format
 msgid "started, version %s cache disabled"
 msgstr "am pornit, versiunea %s memorie temporară dezactivată"
 
-#: dnsmasq.c:725
+#: dnsmasq.c:739
 msgid "DNS service limited to local subnets"
 msgstr ""
 
-#: dnsmasq.c:728
+#: dnsmasq.c:742
 #, c-format
 msgid "compile time options: %s"
 msgstr "compilat cu opţiunile: %s"
 
-#: dnsmasq.c:734
+#: dnsmasq.c:751
 msgid "DBus support enabled: connected to system bus"
 msgstr "suportul DBus activ: sunt conectat la magistrala sistem"
 
-#: dnsmasq.c:736
+#: dnsmasq.c:753
 msgid "DBus support enabled: bus connection pending"
 msgstr "suportul DBus activ: aştept conexiunea la magistrală"
 
-#: dnsmasq.c:754
+#: dnsmasq.c:771
 msgid "DNSSEC validation enabled"
 msgstr ""
 
-#: dnsmasq.c:758
-msgid "DNSSEC signature timestamps not checked until first cache reload"
+#: dnsmasq.c:775
+msgid "DNSSEC signature timestamps not checked until receipt of SIGINT"
 msgstr ""
 
-#: dnsmasq.c:761
+#: dnsmasq.c:778
 msgid "DNSSEC signature timestamps not checked until system time valid"
 msgstr ""
 
 # for compatibility purposes the letters â, ă, ş, ţ and î can be written as their look-alike correspondent.
-#: dnsmasq.c:766
+#: dnsmasq.c:783
 #, fuzzy, c-format
 msgid "warning: failed to change owner of %s: %s"
 msgstr "încărcarea numelor din %s: %s a eşuat"
 
-#: dnsmasq.c:770
+#: dnsmasq.c:787
 msgid "setting --bind-interfaces option because of OS limitations"
 msgstr "specific opţiunea --bind-interfaces din cauza limitărilor SO"
 
-#: dnsmasq.c:782
+#: dnsmasq.c:799
 #, c-format
 msgid "warning: interface %s does not currently exist"
 msgstr "atenţie: interfaţa %s nu există momentan"
 
-#: dnsmasq.c:787
+#: dnsmasq.c:804
 msgid "warning: ignoring resolv-file flag because no-resolv is set"
 msgstr ""
 
-#: dnsmasq.c:790
+#: dnsmasq.c:807
 #, fuzzy
 msgid "warning: no upstream servers configured"
 msgstr "configurăm serverele superioare prin Dbus"
 
-#: dnsmasq.c:794
+#: dnsmasq.c:811
 #, c-format
 msgid "asynchronous logging enabled, queue limit is %d messages"
 msgstr ""
 
-#: dnsmasq.c:815
+#: dnsmasq.c:832
 msgid "IPv6 router advertisement enabled"
 msgstr ""
 
-#: dnsmasq.c:820
+#: dnsmasq.c:837
 #, c-format
 msgid "DHCP, sockets bound exclusively to interface %s"
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 msgid "root is "
 msgstr ""
 
-#: dnsmasq.c:834
+#: dnsmasq.c:851
 #, fuzzy
 msgid "enabled"
 msgstr "dezactivat"
 
-#: dnsmasq.c:836
+#: dnsmasq.c:853
 msgid "secure mode"
 msgstr ""
 
-#: dnsmasq.c:839
+#: dnsmasq.c:856
 #, c-format
 msgid "warning: %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:843
+#: dnsmasq.c:860
 #, c-format
 msgid "warning: TFTP directory %s inaccessible"
 msgstr ""
 
-#: dnsmasq.c:869
+#: dnsmasq.c:886
 #, c-format
 msgid "restricting maximum simultaneous TFTP transfers to %d"
 msgstr ""
 
-#: dnsmasq.c:1039
+#: dnsmasq.c:1056
 msgid "connected to system DBus"
 msgstr "magistrala sistem Dbus conectată"
 
-#: dnsmasq.c:1189
+#: dnsmasq.c:1215
 #, c-format
 msgid "cannot fork into background: %s"
 msgstr ""
 
-#: dnsmasq.c:1192
+#: dnsmasq.c:1218
 #, fuzzy, c-format
 msgid "failed to create helper: %s"
 msgstr "nu pot citi %s: %s"
 
-#: dnsmasq.c:1195
+#: dnsmasq.c:1221
 #, c-format
 msgid "setting capabilities failed: %s"
 msgstr ""
 
 # for compatibility purposes the letters â, ă, ş, ţ and î can be written as their look-alike correspondent.
-#: dnsmasq.c:1198
+#: dnsmasq.c:1224
 #, fuzzy, c-format
 msgid "failed to change user-id to %s: %s"
 msgstr "încărcarea numelor din %s: %s a eşuat"
 
 # for compatibility purposes the letters â, ă, ş, ţ and î can be written as their look-alike correspondent.
-#: dnsmasq.c:1201
+#: dnsmasq.c:1227
 #, fuzzy, c-format
 msgid "failed to change group-id to %s: %s"
 msgstr "încărcarea numelor din %s: %s a eşuat"
 
-#: dnsmasq.c:1204
+#: dnsmasq.c:1230
 #, fuzzy, c-format
 msgid "failed to open pidfile %s: %s"
 msgstr "nu pot citi %s: %s"
 
-#: dnsmasq.c:1207
+#: dnsmasq.c:1233
 #, fuzzy, c-format
 msgid "cannot open log %s: %s"
 msgstr "nu pot deschide %s:%s"
 
-#: dnsmasq.c:1210
+#: dnsmasq.c:1236
 #, fuzzy, c-format
 msgid "failed to load Lua script: %s"
 msgstr "nu pot încărca %s: %s"
 
-#: dnsmasq.c:1213
+#: dnsmasq.c:1239
 #, c-format
 msgid "TFTP directory %s inaccessible: %s"
 msgstr ""
 
-#: dnsmasq.c:1216
+#: dnsmasq.c:1242
 #, fuzzy, c-format
 msgid "cannot create timestamp file %s: %s"
 msgstr "nu pot creea sau deschide fişierul cu împrumuturi: %s"
 
-#: dnsmasq.c:1239
-msgid "now checking DNSSEC signature timestamps"
-msgstr ""
-
-#: dnsmasq.c:1307
+#: dnsmasq.c:1326
 #, c-format
 msgid "script process killed by signal %d"
 msgstr ""
 
-#: dnsmasq.c:1311
+#: dnsmasq.c:1330
 #, c-format
 msgid "script process exited with status %d"
 msgstr ""
 
-#: dnsmasq.c:1315
+#: dnsmasq.c:1334
 #, fuzzy, c-format
 msgid "failed to execute %s: %s"
 msgstr "accesarea serverului %s a eşuat: %s"
 
-#: dnsmasq.c:1379 dnssec.c:479 dnssec.c:525
+#: dnsmasq.c:1374
+msgid "now checking DNSSEC signature timestamps"
+msgstr ""
+
+#: dnsmasq.c:1409 dnssec.c:160 dnssec.c:206
 #, fuzzy, c-format
 msgid "failed to update mtime on %s: %s"
 msgstr "nu pot citi %s: %s"
 
-#: dnsmasq.c:1386
+#: dnsmasq.c:1416
 msgid "exiting on receipt of SIGTERM"
 msgstr "am primit SIGTERM, am terminat"
 
-#: dnsmasq.c:1414
+#: dnsmasq.c:1444
 #, fuzzy, c-format
 msgid "failed to access %s: %s"
 msgstr "accesarea serverului %s a eşuat: %s"
 
-#: dnsmasq.c:1444
+#: dnsmasq.c:1474
 #, c-format
 msgid "reading %s"
 msgstr "citesc %s"
 
-#: dnsmasq.c:1455
+#: dnsmasq.c:1485
 #, fuzzy, c-format
 msgid "no servers found in %s, will retry"
 msgstr "nu s-a găsit nici un criteriu de căutare în %s"
@@ -1956,7 +1961,7 @@
 msgid "Unknown protocol version from route socket"
 msgstr ""
 
-#: helper.c:153
+#: helper.c:154
 msgid "lease() function missing in Lua script"
 msgstr ""
 
@@ -2121,66 +2126,66 @@
 msgid "duplicate IP address %s (%s) in dhcp-config directive"
 msgstr "adresă IP duplicat %s (%s) în declaraţia dhcp-config."
 
-#: dhcp-common.c:494
+#: dhcp-common.c:491
 #, fuzzy, c-format
 msgid "failed to set SO_BINDTODEVICE on DHCP socket: %s"
 msgstr "configurarea SO_REUSEADDR pe socket-ul DHCP a eşuat: %s"
 
-#: dhcp-common.c:615
+#: dhcp-common.c:612
 #, c-format
 msgid "Known DHCP options:\n"
 msgstr ""
 
-#: dhcp-common.c:626
+#: dhcp-common.c:623
 #, c-format
 msgid "Known DHCPv6 options:\n"
 msgstr ""
 
-#: dhcp-common.c:823
+#: dhcp-common.c:820
 msgid ", prefix deprecated"
 msgstr ""
 
-#: dhcp-common.c:826
+#: dhcp-common.c:823
 #, c-format
 msgid ", lease time "
 msgstr ""
 
-#: dhcp-common.c:868
+#: dhcp-common.c:865
 #, c-format
 msgid "%s stateless on %s%.0s%.0s%s"
 msgstr ""
 
-#: dhcp-common.c:870
+#: dhcp-common.c:867
 #, fuzzy, c-format
 msgid "%s, static leases only on %.0s%s%s%.0s"
 msgstr "DHCP, împrumuturi statice doar către  %.0s%s, timpul reînoirii %s"
 
-#: dhcp-common.c:872
+#: dhcp-common.c:869
 #, c-format
 msgid "%s, proxy on subnet %.0s%s%.0s%.0s"
 msgstr ""
 
-#: dhcp-common.c:873
+#: dhcp-common.c:870
 #, fuzzy, c-format
 msgid "%s, IP range %s -- %s%s%.0s"
 msgstr "DHCP, domeniu IP %s -- %s, timpul reînoirii %s"
 
-#: dhcp-common.c:886
+#: dhcp-common.c:883
 #, c-format
 msgid "DHCPv4-derived IPv6 names on %s%s"
 msgstr ""
 
-#: dhcp-common.c:889
+#: dhcp-common.c:886
 #, fuzzy, c-format
 msgid "router advertisement on %s%s"
 msgstr "DHCP, împrumuturi statice doar către  %.0s%s, timpul reînoirii %s"
 
-#: dhcp-common.c:900
+#: dhcp-common.c:897
 #, c-format
 msgid "DHCP relay from %s to %s via %s"
 msgstr ""
 
-#: dhcp-common.c:902
+#: dhcp-common.c:899
 #, c-format
 msgid "DHCP relay from %s to %s"
 msgstr ""
@@ -2210,7 +2215,7 @@
 msgid "failed to update ipset %s: %s"
 msgstr "nu pot citi %s: %s"
 
-#: dnssec.c:527
+#: dnssec.c:208
 msgid "system time considered valid, now checking DNSSEC signature timestamps."
 msgstr ""
 
@@ -2288,7 +2293,7 @@
 msgid "bad dynamic directory %s: %s"
 msgstr "nu pot citi %s: %s"
 
-#: inotify.c:255
+#: inotify.c:257
 #, c-format
 msgid "inotify, new or changed file %s"
 msgstr ""