I've already posted about -15, though not with dnsdir hat.  So, I see nothing wrong with the current version. (The complaint about DF=1 in current implementations has been addressed.)