From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ve0-x22e.google.com (mail-ve0-x22e.google.com [IPv6:2607:f8b0:400c:c01::22e]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id CA82421F339 for ; Fri, 9 May 2014 09:17:59 -0700 (PDT) Received: by mail-ve0-f174.google.com with SMTP id jw12so5485838veb.19 for ; Fri, 09 May 2014 09:17:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:content-type; bh=E1zgVaF02gTQqTGl1yAK+a5nwDDvP06JKEyAH4jlICU=; b=Qx+vMoc+T41zL/guFv9LTTg9TENW0GzVOUhTfmQKAGlWkuhkeaIqCFaOCCKVWuEXYe KbOlj1A/sdoN4rG83ys0bMm5f6spRCPmUmrRULNpj10tecW0fwf9KHt0ZFv2SQ+h95hr bY4Sb60RgB7yXHJqmCX7csEOrMaPFbD6ReTc2zX5avVKy0/dxKF5HD0RJMAf83NT6m+s ZUNxBB5REPfxGrus6/Kqh20wMw0ZX5j4rmZEhYfhd+QyuCpMVU4KfVhf/YQFF6zsAAvr pJpFQyKMjfj6FePomyrsEfGH1JkJS2X2EbIE4re7bLkb8PKOkiVPehJrhDxtaLM3uHjg /lPg== X-Received: by 10.221.30.14 with SMTP id sa14mr1314637vcb.44.1399652278389; Fri, 09 May 2014 09:17:58 -0700 (PDT) MIME-Version: 1.0 Sender: white.phoenix@gmail.com Received: by 10.220.175.136 with HTTP; Fri, 9 May 2014 09:17:28 -0700 (PDT) In-Reply-To: References: From: Aristar Date: Fri, 9 May 2014 12:17:28 -0400 X-Google-Sender-Auth: lPSb2_LRmctXeYhYbLAp83NuI4U Message-ID: To: cerowrt-devel Content-Type: text/plain; charset=UTF-8 Subject: Re: [Cerowrt-devel] Upgraded to 3.10.38-1, DNS issues? X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 May 2014 16:18:00 -0000 Okay I figured it out. It was DNSSEC I didn't realize it was enabled by default so I had to comment out the lines in /etc/dnsmasq.conf but I still had to manually specify a nameservers in a separate config under LUCI Network>DHCP and DNS>Resolv and Hosts Files>"Resolve file" and all is well again. Now to set up dnscrypt-proxy again which actually has a repository now and instructions for building from source. (Seems more reliable than DNSSEC anyways, though I have not read too much on DNSSEC). src/gz exopenwrt http://exopenwrt.and.in.net/ar71xx/packages https://forum.openwrt.org/viewtopic.php?id=36380&p=1 On Fri, May 9, 2014 at 5:34 AM, Aristar wrote: > Sorry if this is a dumb question but I'm not sure what's changed since > 3.7.5 but I can't get DNS working. my resolv.conf says 127.0.0.1, the > /tmp/resolv.conf.auto has valid dns servers and I can't resolve > anything locally on the router via ssh or on any client device. I CAN > get dns LOCAL only if I add a dns server to /etc/resolv.conf but > clients using nameserver 172.30.42.1 can't > > Any ideas? I did a fresh install/clean configs and it isn't working > out of the box or with any GUI or manual editing I've tried.