|dnsmasq disable dnssec||0.13||0.6||9283||10|
If you do not require it, you need to explicitly disable it by setting port=0 . If dnsmasq will not be used as a local DNS resolver, you may also want to edit dnsmasq.service so that it does not pull in nss-lookup.target :What is dnsdnsmasq?
dnsmasq dnsmasq provides a DNS server, a DHCP server with support for DHCPv6 and PXE, and a TFTP server. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. dnsmasq can also be configured to cache DNS queries for improved DNS lookup speeds to previously visited sites.Does DNSSEC validation work with Dnsmasq?
The current Dnsmasq release at the time of writing (v2.80) contains far too many bugs to be usable with DNSSEC validation enabled. The good news is that all of the bugs I found are fixed in Git master.How do I enable DNSSEC on my domain?
Domain Name System Security Extensions (DNSSEC) is a set of additions to the dns protocol to make it more secure. It uses the domain’s signed requests to make sure they are actually valid. In the /etc/dnsmasq.conf add or uncomment these lines to enable DNSSEC.