DNS spf and DKIM record

[arga]

Hi,

i found dhcp.@txt-record[0]=txt-record by running uci show dhcp.

i try the following command

uci add dhcp txt-record
uci set dhcp.@txt-record[-1]="v=spf1 mx ~all"

my syntaxe seems to be wrong

uci: Invalid argument

how can i set txt-record ?

regards

[eduardo010174]

You install dnsmasq-full?
This config probably it's only possible write directly to dnsmasq.conf ...

[trendy]

I don't see the TXT in the list of examples. @vgaetera is it possible?

[arga]

I have the standard package : dnsmasq - 2.80-16.3.

Should i install "dnsmasq-full" ?
I am not sure to understand the difference between the both package as the description package only add "This is a fully configurable variant with DHCPv4, DHCPv6, DNSSEC, Authoritative DNS\ and IPset, Conntrack support & NO_ID enabled by default." for dnsmasq-full.

What is the best practice ? Install dnsmasq-full ?

Regards

[vgaetera]

There's nothing TXT-related in the Dnsmasq init script, so the advice of @eduardo010174 makes sense.

[arga]

theoretically, it's possible to set spf and DKIM in /etc/dnsmasq.conf with something like txt-record=example.com,"v=spf1 a ~all"

i will look at how to switch from dnsmasq to dnsmasq-full.

Thanks

[arga]

According to https://openwrt.org/docs/guide-user/base-system/dhcp, dnsmasq-full is only mandatory to DNSSEC and IPsets. in any way, DNSSEC will be my next step so i must install it.

i am not sure if i can run opkg install dnsmasq-full or if i should do something with dnsmasq before. dnsmasq-full package description link no conflict whith dnsmasq.

thank's for your help

[trendy]

Better remove the simple one first before installing the full.
However the dnsmasq is part of the image, so it won't be actually erased.

[arga]

opkg remove dnsmasq breaks the configuration. so you have to temporary add a nameserver in /etc/resolv.conf to be able to run opkg update and opkg install dnsmasq-full

[vgaetera]

It's fine if you stop the service before removing the package.