Sample Header Ad - 728x90

Pihole warning elaboration: "reducing DNS packet size for nameserver ADDRESS to SAFE_PKTSZ"

3 votes
1 answer
5088 views
Could anyone elaborate a little on this warning? Reading the unbound comment it references, I guess it's some configuration in place for security reasons (?), but I'm not clear on what the _tradeoffs_ really are if you "get rid of" this warning by adding the config file mentioned below. > reducing DNS packet size for nameserver ADDRESS to SAFE_PKTSZ > > When receiving answers from upstream only with a smaller maximum DNS packet size, dnsmasq warns about this and remembers this decision per server for some time (defaulting to 60 seconds). > > If you see this message continuously, you are affected by some unusual truncation on the path from your Pi-hole to the configured upstream server. You can get rid of the warning by adding a config file like /etc/dnsmasq.d/99-edns.conf and adding > > > edns-packet-max=1232 > After running pihole restartdns your Pi-hole will not even try larger packet sizes (the default is 4096). Check out our [unbound guide](https://docs.pi-hole.net/guides/dns/unbound/) for a comment about the particular value of 1232. >
Asked by Manius (171 rep)
Apr 4, 2022, 06:53 PM
Last activity: Jan 16, 2023, 07:03 PM