From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-we0-x236.google.com (mail-we0-x236.google.com [IPv6:2a00:1450:400c:c03::236]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id BBB1D21F421 for ; Sat, 10 May 2014 05:16:27 -0700 (PDT) Received: by mail-we0-f182.google.com with SMTP id t60so5049191wes.13 for ; Sat, 10 May 2014 05:16:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type; bh=jJYlyk2K0oJKu5wP4w03xM1JKCtUKGzhE7I8Up4J/q8=; b=LRSGaOKo/lC1/JRvrFeoAGSGy0m5tnbFBsgkT0JUo5ELlFbTWpPUjs02QxgkP2510c 4j9vlTbN92pSzRYLItRtAOncuuhQIIZZ52xLhTUP7Wgex/HJcsQhDgZFp5MSPT1YY8lk oxp+jqNmzBtTMPcMxBK0oPnQ0E7ypcafwhKUNtAXfYI073Maa/6t8oWWmXZhtlE44hnn YXC/POCb0kdOQgv44dXQAO0svi1FpQR02mbAAvOOYintFVe+als3arFs2y/Z/s7kfFJ3 vmMZAcae9wIOK3hhqsYG+4cwNjdbH7zl+e+0elRdL405ER4sdf3c8+HhDB03itNAwDvS QWfA== X-Received: by 10.180.90.132 with SMTP id bw4mr7465451wib.43.1399724185269; Sat, 10 May 2014 05:16:25 -0700 (PDT) Received: from ?IPv6:2001:470:6aac:1:c0d9:cd41:423:4865? ([2001:470:6aac:1:c0d9:cd41:423:4865]) by mx.google.com with ESMTPSA id u9sm4368974wib.21.2014.05.10.05.16.23 for (version=TLSv1.2 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sat, 10 May 2014 05:16:24 -0700 (PDT) Message-ID: <536E187E.4000800@gmail.com> Date: Sat, 10 May 2014 13:15:58 +0100 From: Robert Bradley User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: cerowrt-devel@lists.bufferbloat.net References: In-Reply-To: X-Enigmail-Version: 1.6 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="mPmuwkU3X8qEsm0Qvrt5MQFrWuaLauXla" Subject: Re: [Cerowrt-devel] Upgraded to 3.10.38-1, DNS issues? X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 May 2014 12:16:28 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --mPmuwkU3X8qEsm0Qvrt5MQFrWuaLauXla Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 09/05/2014 17:17, Aristar wrote: > Okay I figured it out. It was DNSSEC I didn't realize it was enabled > by default so I had to comment out the lines in /etc/dnsmasq.conf but > I still had to manually specify a nameservers in a separate config > under LUCI Network>DHCP and DNS>Resolv and Hosts Files>"Resolve file" > and all is well again. > > Now to set up dnscrypt-proxy again which actually has a repository now > and instructions for building from source. (Seems more reliable than > DNSSEC anyways, though I have not read too much on DNSSEC). > > src/gz exopenwrt http://exopenwrt.and.in.net/ar71xx/packages > > https://forum.openwrt.org/viewtopic.php?id=3D36380&p=3D1 > > Out of interest, which upstream DNS servers were you using when DNSSEC was blocked? I noticed fairly recently that some Wi-Fi networks (Global Gossip, using filtered OpenDNS upstream) refused all dnssec-enabled requests with NXDOMAIN. This was testing with a custom-built dnsmasq 2.70 on Ubuntu, but the same setup works fine behind both CeroWRT and other DNSSEC-capable servers that I tried. --=20 Robert Bradley --mPmuwkU3X8qEsm0Qvrt5MQFrWuaLauXla Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJTbhiWAAoJEGK/UXZZ8Ak6b2kP/j2JQ6/KUki7Ye4GboDtgkar /4guYIriylBSoiMMl/+CEvq4/5Kcxd8zLQ23D8SPw73ZHBsU0zJeGmj+l746lV8V Zh3qbM3iygvV0jYEt6/j178Y82UD1fj7k9IzTGDiQBYej/+U+ZVXFQVxhdYlj0zI +TvLDtE1VKqM1ay1Iqw54AmMUgbU3nVUXAEL7WqzR2ZN8gbYeEYAplRzOhY8Oy6f ZEGEpNJMmINeocSemSex7NIEpOhInWR7nWy9ZBMidjUGO5HBZwUBe8TMhQlqVLsh gcRJoDvluJB8EsfRpGuJoR3+IEit+ryrrvFWUZhU4hXR9CFeWZaV1JKOKDzxTOWV +ewYNkHghHVUfP0zPVPCDwikQJ6U4mPnhwh3TJdT29viMwmLnWxFeH58UeHrRkap aOwz3BXWNwlH95QPxwj49iNp8J5VZ68PRQksfs+hMhFEEf2XEvgvdU2t2MWnajQT YJjljmjxUY7jz38rMpW6nUVvd3xDcyL+y6KKa+sEmKWJLyJl2YKGpqbT6DVQxycV aMsgTX4nDWKLQ1xNz8nVEddFdvjqDqorIFfvKgq8fwRzrzLLp0fql+oGuihVW7FC qmLuRhmHP/OV1FtrzYkGE+wneo1SAUHOy+ozSKnbz/j7s2j4VVfMJnD4dVEsx5XZ dwUj9Gq2nEhrw7ss0Lpx =1NPy -----END PGP SIGNATURE----- --mPmuwkU3X8qEsm0Qvrt5MQFrWuaLauXla--