From: Sebastian Moeller <moeller0@gmx.de>
To: Dave Taht <dave.taht@gmail.com>
Cc: dnsmasq-discuss <Dnsmasq-discuss@lists.thekelleys.org.uk>,
"cerowrt-devel@lists.bufferbloat.net"
<cerowrt-devel@lists.bufferbloat.net>
Subject: Re: [Cerowrt-devel] [Dnsmasq-discuss] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014
Date: Fri, 2 May 2014 16:30:27 +0200 [thread overview]
Message-ID: <8AF179A3-6AD7-4241-BDFA-7DB4B11EA84C@gmx.de> (raw)
In-Reply-To: <CAA93jw4cHeMKN_N8H8E53a+KOhMGi_5sTd58u8O0q6p66XqjsA@mail.gmail.com>
Hi List, hi Dave,
On May 2, 2014, at 00:27 , Dave Taht <dave.taht@gmail.com> wrote:
> On Thu, May 1, 2014 at 1:26 PM, Rich Brown <richb.hanover@gmail.com> wrote:
>>
>> On May 1, 2014, at 2:37 PM, Simon Kelley <simon@thekelleys.org.uk> wrote:
>>
>>> On 30/04/14 18:26, Dave Taht wrote:
>>>> On Tue, Apr 29, 2014 at 1:57 PM, Phil Pennock
>>>> <cerowrt-devel+phil@spodhuis.org> wrote:
>>
>> snip, snip snip...
>>
>>>> Is the consensus to not run with negative proofs on at this juncture?
>>>
>>> If you want stuff to just work, turn off negative proofs, if you want to
>>> push the envelope, leave them on and complain to domain-admins.
>>>
>>> I had some feeling that something like this might be a problem, hence
>>> the discrete controls.
>>
>> I apologize that I haven't been following this closely, but so I'm going to ask a TL;DR question.
>>
>> Which places in the OpenWrt/CeroWrt GUI (or the config files) do I use to wiggle these levers?
>
> There is no gui support as yet. enablement is via /etc/dnsmasq.conf
>
> I disabled (commented out) the negative proof checks in the 3.10.38-2 release.
So, I installed this just now and to my amazement it directly picked up my ISP's dns servers immediately, unlike with the last two? releases I did not have to resort to google's dns servers. So this looks like the deutsche telekom setup is not ready for full dnssec (at least not when trying to use the dns server on the primary dt router...).
Best Regards
Sebastian
>
>> Thanks!
>>
>> Rich
>
>
>
> --
> Dave Täht
>
> NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
next prev parent reply other threads:[~2014-05-02 14:30 UTC|newest]
Thread overview: 29+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-04-28 16:55 [Cerowrt-devel] " Jim Gettys
2014-04-28 17:03 ` Dave Taht
2014-04-28 18:37 ` Dave Taht
2014-04-28 18:56 ` Dave Taht
2014-04-28 19:32 ` [Cerowrt-devel] [Dnsmasq-discuss] " Simon Kelley
2014-04-28 19:45 ` Aaron Wood
2014-04-28 23:24 ` Phil Pennock
2014-04-29 13:22 ` Simon Kelley
2014-04-29 20:57 ` Phil Pennock
2014-04-30 17:26 ` Dave Taht
2014-05-01 18:37 ` Simon Kelley
2014-05-01 20:26 ` Rich Brown
2014-05-01 22:27 ` Dave Taht
2014-05-02 14:30 ` Sebastian Moeller [this message]
2014-05-01 18:35 ` Simon Kelley
2014-05-02 16:40 ` James Cloos
2014-10-03 9:28 ` [Cerowrt-devel] " Anders Kaseorg
2014-10-03 17:28 ` Valdis.Kletnieks
2014-10-03 21:35 ` Anders Kaseorg
2014-10-04 21:45 ` Anders Kaseorg
2015-01-08 16:34 ` Simon Kelley
2015-01-08 17:44 ` Dave Taht
2015-01-08 18:07 ` Simon Kelley
2015-01-08 19:52 ` Dave Taht
2015-01-09 8:52 ` Dave Taht
2015-01-09 15:36 ` Simon Kelley
2015-01-09 16:49 ` Simon Kelley
2015-01-09 21:34 ` Dave Taht
2015-01-10 15:37 ` Simon Kelley
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://lists.bufferbloat.net/postorius/lists/cerowrt-devel.lists.bufferbloat.net/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=8AF179A3-6AD7-4241-BDFA-7DB4B11EA84C@gmx.de \
--to=moeller0@gmx.de \
--cc=Dnsmasq-discuss@lists.thekelleys.org.uk \
--cc=cerowrt-devel@lists.bufferbloat.net \
--cc=dave.taht@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox