From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx.etorok.net (mx.etorok.net [62.113.205.31]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "mx.etorok.net", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 3F89921F0F0 for ; Tue, 18 Mar 2014 12:24:11 -0700 (PDT) Received: by mx.etorok.net (OpenSMTPD) with ESMTP id d9ebaa23; for ; Tue, 18 Mar 2014 21:24:08 +0200 (EET) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=etorok.net; h= message-id:date:from:mime-version:to:references:in-reply-to :content-type:content-transfer-encoding; s=ml; l=4929; bh=CHOYzm 3YTZusms8EbAZUM+ima8U=; b=X/X62V7AXXG3c566C0KntiMmkwoZJjxuafZWo1 bwtI91ViKBKuRU/3blBQDio3pNPpB/7TAebhlaGfG/M3mBP9O2H/IcppoNGu7+54 SL9cOfWSgXNA5nIk3o70AkMebW6+Wkgvs0D5x+FfLit7BF3l5GarNHiHnvSyURFy BH/gQ= Received: by mx.etorok.net (OpenSMTPD) with ESMTPSA id cbdda394; TLS version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-SHA bits=128 verify=NO; for ; Tue, 18 Mar 2014 21:24:08 +0200 (EET) Message-ID: <53289D57.5000404@etorok.net> Date: Tue, 18 Mar 2014 21:24:07 +0200 From: =?ISO-8859-1?Q?T=F6r=F6k_Edwin?= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Icedove/24.3.0 MIME-Version: 1.0 To: cerowrt-devel@lists.bufferbloat.net References: <9177F7AA-7E9F-4356-849C-13D654F579A6@gmail.com> In-Reply-To: <9177F7AA-7E9F-4356-849C-13D654F579A6@gmail.com> X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Re: [Cerowrt-devel] CeroWrt 3.10 Release Notes page updated for 3.10.32-9 X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Mar 2014 19:24:12 -0000 On 03/18/2014 07:56 PM, Rich Brown wrote: > Folks, > > I have updated the 3.10 Release Note page to match my understanding of the 3.10.32-9 release of 14 March 2014. It would be good to get more eyes on the page to look for inconsistencies, outright errors, omissions, etc. It's at: http://www.bufferbloat.net/projects/cerowrt/wiki/CeroWrt_310_Release_Notes > > Questions: > > - Please review the Features items. Any missing? Is DNSSEC enabled now? Good question. If I run 'dig test.dnssec-or-not.net TXT' 3 times in succession it tells me it is supported. Try again a minute later, and the query times out again. Well might be just my ISP's DNS servers being problematic. 1st one times out (after about 18s): $ dig test.dnssec-or-not.net TXT ; <<>> DiG 9.9.5-2-Debian <<>> test.dnssec-or-not.net TXT ;; global options: +cmd ;; connection timed out; no servers could be reached Second gives me no results: $ dig test.dnssec-or-not.net TXT ; <<>> DiG 9.9.5-2-Debian <<>> test.dnssec-or-not.net TXT ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 51755 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;test.dnssec-or-not.net. IN TXT ;; Query time: 748 msec ;; SERVER: 172.30.42.1#53(172.30.42.1) ;; WHEN: Tue Mar 18 21:17:13 EET 2014 ;; MSG SIZE rcvd: 51 Third tells me its good: dig test.dnssec-or-not.net TXT ; <<>> DiG 9.9.5-2-Debian <<>> test.dnssec-or-not.net TXT ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35187 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 8, AUTHORITY: 3, ADDITIONAL: 5 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;test.dnssec-or-not.net. IN TXT ;; ANSWER SECTION: test.dnssec-or-not.net. 35 IN CNAME test.ad1b63b5bebca893.dnssec-or-not.net. test.dnssec-or-not.net. 35 IN RRSIG CNAME 5 3 60 20140417191653 20140318191653 2256 dnssec-or-not.net. m/Sg8YHkFV4iQW0W20G3iLVi+z+g4p+4919Ihq4hPrzQV6YRUNyzl1vm pjM1pxG2mPgpqkDIRROUJtoF7k4yz2F6QzJAhbV7o7En2/MBHTRO2BuU WoUrmBneWNxq43nbZXwYL01s7le0ff9MpQvtv14egOODa3zNuX++3htt W/Y= test.ad1b63b5bebca893.dnssec-or-not.net. 36 IN CNAME test.x.ad1b63b5bebca893.dnssec-or-not.net. test.ad1b63b5bebca893.dnssec-or-not.net. 36 IN RRSIG CNAME 5 4 60 20140417191654 20140318191654 35475 ad1b63b5bebca893.dnssec-or-not.net. PEudHM05Qsa7zfQtuXHSKP0n3RQttJeFa6ZE3IhYZcD1vP3ffxKDMxF0 TynSCirU2dpgI1pdW0VIwUZkkFeBZw7RGub2znAXqxieRqVE2pE1DGcq FAZyzy7BpvwIklBrnxidgngMdKJuXqq9ih+Kw2QrA03jFXTWIDhC/8Wq cM0= test.x.ad1b63b5bebca893.dnssec-or-not.net. 37 IN CNAME test.x.x.ad1b63b5bebca893.dnssec-or-not.net. test.x.ad1b63b5bebca893.dnssec-or-not.net. 37 IN RRSIG CNAME 5 5 60 20140417191654 20140318191654 51156 x.ad1b63b5bebca893.dnssec-or-not.net. rfm+D0Loe5hf3Qp6Qv6lypqlz/CXjcOqdCA3uxWnn/Sp8JBG//4bU7Kn +WZUAkz5DVnrb6Wj6j8UDVKjKeFbNoV6ypOMZvnDVjaZiyFIjZn5OKVb /Py4IaT1aazfuO+s30ymQrtGvlrR+nrBHsziEwxCoSFhfNLcysNsYHXL ycA= test.x.x.ad1b63b5bebca893.dnssec-or-not.net. 55 IN TXT "Yes, you are using DNSSEC" test.x.x.ad1b63b5bebca893.dnssec-or-not.net. 55 IN RRSIG TXT 5 6 60 20140417191712 20140318191712 52056 x.x.ad1b63b5bebca893.dnssec-or-not.net. CDxbTfIF7kD9XCZbQDNSjfnAAMkivDqKaXCVJGc1yusQuXbQqp1oWt9k chXbbv5osmkJQ60Ril113OEC63zHght+VNyCeigJvs8blUyjRs2GTC0e smDKUamlfT4xL5nC1LlXbKp7aMCjoyg1HV8cRZvJFWCTKMa5DLNCjcYX 2z4= ;; AUTHORITY SECTION: x.x.ad1b63b5bebca893.dnssec-or-not.net. 54 IN NS ns1.x.x.ad1b63b5bebca893.dnssec-or-not.net. x.x.ad1b63b5bebca893.dnssec-or-not.net. 54 IN NS ns0.x.x.ad1b63b5bebca893.dnssec-or-not.net. x.x.ad1b63b5bebca893.dnssec-or-not.net. 54 IN RRSIG NS 5 5 60 20140417191712 20140318191712 52056 x.x.ad1b63b5bebca893.dnssec-or-not.net. BkGyDiDy8xKUDQSTh01zdStU8H8FgxxTzhSnMw0tyuwg4dpPw/THlymB Ubk4a8x1p3OlrtFh2IBub2om7vg+jxYo5joi10fX8aNgRPF3UuV+62ve CFJ2IAfvmUvKVEWouY/Yv5kvoYNGqn/imxqE7Ni0U93VW9FuXkn1Y2tP hes= ;; ADDITIONAL SECTION: ns0.x.x.ad1b63b5bebca893.dnssec-or-not.net. 54 IN A 72.13.58.79 ns1.x.x.ad1b63b5bebca893.dnssec-or-not.net. 54 IN A 72.13.58.99 ns0.x.x.ad1b63b5bebca893.dnssec-or-not.net. 54 IN RRSIG A 5 6 60 20140417191712 20140318191712 52056 x.x.ad1b63b5bebca893.dnssec-or-not.net. FXg2lrSMdJ9WV5mVgON313mCyBnRkGVZRv8BlQCNty6bKhlc12/Fpamf LMmjSy5padZm17ocqOhC6jRFaaj+qeWjLDnArMTddqYk9ecwRTvlIpLL XNqUz/VphdWrXidfUftY8Chz/KVzJOM3FE/GDAFUAGoRaCBLalaYDFM6 1fM= ns1.x.x.ad1b63b5bebca893.dnssec-or-not.net. 54 IN RRSIG A 5 6 60 20140417191712 20140318191712 52056 x.x.ad1b63b5bebca893.dnssec-or-not.net. RrkstBIGWeZ1faMrn12mUap4eGeDnY492/dFISOmP3C/Ffo9mqBQc54x ELBZ7CCyLNIPp+o25fGvS+N8NJO5IqB2hsb+ShSqZzIGYVxCbHB8/OFN EqivXTRsygaoMXfIjIxK0IcefOSLs/MOV5PCjNjEw31OZsq8Gp4nQLWt V4c= ;; Query time: 20 msec ;; SERVER: 172.30.42.1#53(172.30.42.1) ;; WHEN: Tue Mar 18 21:17:19 EET 2014 ;; MSG SIZE rcvd: 1594