Minimum safe size is recommended to be 1232. See https://dnsflagday.net/2020/
[commit 43082362626dc85a8ea2ba7af2db091f4482932b upstream]
Change-Id: Ia2c264bb74b1a8a13020daaa105b9aa71a53403c
Signed-off-by: DL6ER <dl6er@dl6er.de>
diff --git a/src/config.h b/src/config.h
index 45b1c4c..3f016c4 100644
--- a/src/config.h
+++ b/src/config.h
@@ -20,7 +20,7 @@
#define TCP_MAX_QUERIES 100 /* Maximum number of queries per incoming TCP connection */
#define TCP_BACKLOG 32 /* kernel backlog limit for TCP connections */
#define EDNS_PKTSZ 4096 /* default max EDNS.0 UDP packet from RFC5625 */
-#define SAFE_PKTSZ 1280 /* "go anywhere" UDP packet size */
+#define SAFE_PKTSZ 1232 /* "go anywhere" UDP packet size, see https://dnsflagday.net/2020/ */
#define KEYBLOCK_LEN 40 /* choose to minimise fragmentation when storing DNSSEC keys */
#define DNSSEC_WORK 50 /* Max number of queries to validate one question */
#define TIMEOUT 10 /* drop UDP queries after TIMEOUT seconds */