From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-we0-x230.google.com (mail-we0-x230.google.com [IPv6:2a00:1450:400c:c03::230]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 9214221F1C3 for ; Thu, 10 Apr 2014 08:19:01 -0700 (PDT) Received: by mail-we0-f176.google.com with SMTP id x48so4139315wes.35 for ; Thu, 10 Apr 2014 08:18:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; bh=jQaoUF1TxkzxxH0Y7sb8I72sDl/ibT59MaPYDOjm9M4=; b=qq88gerSNSypfLOLD1zcuCSvAsD3cFy3JqCm7+iWhO2zWgunQgP+hVDxmfuEFXRIXu Lm8k5O8CXrOFju/PHY+OPlGl/GKVQhz+FR8BHZgiL5351VYJ1tJfUzhx1GLj93lOrPRP YNn/w68CtjwVCBho8fXJQt4q8LVhO8ZduCZSnBlEZnhtsEK709PE0oJbhmalk4oJFQ73 VrBxI2KSEy/KybFUBMzO9dmbUAL054DlBPSB5JzoVSLwke3oiBEttNBfuglIS7vwklH9 x9K/bf0KEWNXEUx+JQun/DMjlR3Y/91/+/uEPx6LVSBYvr8BJ3RioiJ4GD2jjNOSMDOx hCeg== X-Received: by 10.180.83.196 with SMTP id s4mr43427213wiy.24.1397143139175; Thu, 10 Apr 2014 08:18:59 -0700 (PDT) Received: from ?IPv6:2001:470:6aac:2:88c1:306:fd1b:3908? ([2001:470:6aac:2:88c1:306:fd1b:3908]) by mx.google.com with ESMTPSA id fs16sm11605780wic.18.2014.04.10.08.18.57 for (version=TLSv1.2 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 10 Apr 2014 08:18:57 -0700 (PDT) Message-ID: <5346B650.5040200@gmail.com> Date: Thu, 10 Apr 2014 16:18:40 +0100 From: Robert Bradley User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: =?ISO-8859-1?Q?Toke_H=F8iland-J=F8rgensen?= References: <85984.1397137700@turing-police.cc.vt.edu> <5346A561.30901@gmail.com> <87sipll0fh.fsf@toke.dk> In-Reply-To: <87sipll0fh.fsf@toke.dk> X-Enigmail-Version: 1.6 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="OuLeAEuXW8axsjtMp1NJlNMa0fKKFUbOj" Cc: cerowrt-devel@lists.bufferbloat.net Subject: Re: [Cerowrt-devel] cerowrt-3.10.36-4 released X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Apr 2014 15:19:02 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --OuLeAEuXW8axsjtMp1NJlNMa0fKKFUbOj Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 10/04/2014 15:32, Toke H=F8iland-J=F8rgensen wrote: > Robert Bradley writes: > >> - I had to add my cable modem configuration address to the BCP38 >> exception list (192.168.100.1). This gets used for nothing except >> configuration and checking the modem logs so this is understandable. = I >> also end up adding a static route anyway since if Internet breaks, I >> need a route to the modem... > If you add a 'scope link' route on the wan interface, the BCP38 code > *should* pick this up automatically and add an exception. Would be cool= > if you could test this :) Just tested this now and it works fine. :) >> - dnsmasq's default of dnssec-check-unsigned broke my DNS, since my >> ISP servers do not support DNSSEC. In that case, everything winds up >> as failing. > That's an interesting failure mode. FWIW you can point it at > 8.8.8.8/8.8.4.4 instead if you want dnssec verification :) I was tempted to leave it as-is, but tested it now with a custom /tmp/resolv.conf.manual file and it also works well with added DNSSEC checks. --=20 Robert Bradley --OuLeAEuXW8axsjtMp1NJlNMa0fKKFUbOj Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJTRrZhAAoJEGK/UXZZ8Ak61i0P/iUn9146DHLUOGRHzPsPki/g e2CtB1YgwvP/sfLL5v4OPQrzrTS/jj1HqCAyrwfJszYbOlonJ8Ql+8DTSZKydD9f 2L/fe7DevABsdrwmLQvJRwQuHTVXAYOtQuG0P12dCao8MXKCsQ8lx9EzUI8+RUK5 /Vj4pALgEpJKFWd0m1YIL9bLJhKesuTIFo5yr8rbGhz6BmWtmQa9PEqFqoIuaJsn xLaRSlX0y6vh3HVEUd7K90UqFXCbMDnqgJPYSNymPOhtQ1mjvIQQp0vkTAtakrxb 8Oe3nf2XqEusbLOiUIndEACxUBUWEP/FtPByyFxoaf35pWYMpRh290Vj/Lm9IKrU +ChkzOwusrODcwYobnQhMcpj0Edzb2bbM/JSKy9JPaGbDXyMUBn8iTSq8IIDatKZ 6t+EKJS1xwO3MoAqLKsp6VhlhyE5iiAk5Kl8DR1AR5qrMfBsh0pjoDoeiTKj/yPy MtOeIPEDHnS/3GD+TI8deWB9JMjIyIRZe72XmUdoLCIZJ/Tn7APZqMX0ZrIeBoCQ ++pf7KmmFXQGabKhm9DK1LUqr3D/87lEvAY7+WQXgp9yiakob+vJ2UNA4IhcePPl b2eGywCsRsiW4JSfyfrs9+m+GCQJ/3IBwZaiuV0IFtheRireRKskwHJakH4p/P/P xq6tkVIY9p+16yZQqKD9 =8wD5 -----END PGP SIGNATURE----- --OuLeAEuXW8axsjtMp1NJlNMa0fKKFUbOj--