DNSSEC validation require EDNS0, force larger packet size.
diff --git a/src/dnsmasq.c b/src/dnsmasq.c
index 71d4412..d8686a7 100644
--- a/src/dnsmasq.c
+++ b/src/dnsmasq.c
@@ -76,9 +76,10 @@
umask(022); /* known umask, create leases and pid files as 0644 */
read_opts(argc, argv, compile_opts);
-
+ if (option_bool(OPT_DNSSEC_VALIDATE))
+ if (daemon->doctors) exit(1); /* TODO */
if (daemon->edns_pktsz < PACKETSZ)
- daemon->edns_pktsz = PACKETSZ;
+ daemon->edns_pktsz = option_bool(OPT_DNSSEC_VALIDATE) ? EDNS_PKTSZ : PACKETSZ;
daemon->packet_buff_sz = daemon->edns_pktsz > DNSMASQ_PACKETSZ ?
daemon->edns_pktsz : DNSMASQ_PACKETSZ;
daemon->packet = safe_malloc(daemon->packet_buff_sz);