From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ob0-x22f.google.com (mail-ob0-x22f.google.com [IPv6:2607:f8b0:4003:c01::22f]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 7854821F24C for ; Fri, 25 Apr 2014 11:01:39 -0700 (PDT) Received: by mail-ob0-f175.google.com with SMTP id wp4so4602234obc.20 for ; Fri, 25 Apr 2014 11:01:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=sECFnf+XisY07Nf38dk2d0lOBSBzYKBUNzuNHzTv1kU=; b=YOGNqu6KoAD1wI9izKeEx4ELQgfgbvqOGakffgEfJM0aSMYjSWwVlkCzsN0G0hJiwx Rn1Xboe6Zm1IwosReuNeejGVFA4CvhZj0DLYAvw/QRwHBB8BiIgJdyTCzMiM2MZ73PbR EmWUzGMqBCSIo9xYjT4ORXJl6oUuOcVVT22ro4fToePBgK7puaGnAf9VTaxq15f2oUPi lWdq5dxIuiaWOqZI+0OKwMKcD4UId6MPtrv8tsDpC4SUngnKfwgL7/cWs9fblAhQ4/Bf 7P+Go6eja21Hhuj0VOB9qOumJV7BonW2UylAYd6xLSYtQkits3PyvD6CsP0KSkv990+8 uaEQ== MIME-Version: 1.0 X-Received: by 10.60.96.165 with SMTP id dt5mr2328444oeb.72.1398448897982; Fri, 25 Apr 2014 11:01:37 -0700 (PDT) Sender: gettysjim@gmail.com Received: by 10.76.73.100 with HTTP; Fri, 25 Apr 2014 11:01:37 -0700 (PDT) In-Reply-To: References: Date: Fri, 25 Apr 2014 14:01:37 -0400 X-Google-Sender-Auth: rro5mY--KDkHCKAMSWUTtHp1SlU Message-ID: From: Jim Gettys To: Dave Taht Content-Type: multipart/alternative; boundary=089e01184a72cd8b3c04f7e1c179 Cc: dnsmasq-discuss , "cerowrt-devel@lists.bufferbloat.net" Subject: Re: [Cerowrt-devel] test-ipv6.com vs dnssec X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Apr 2014 18:01:39 -0000 --089e01184a72cd8b3c04f7e1c179 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable More specifically, after boot, most of the time test-ipv6.com reports lots of problems. Then I turned off both dnssec and dnssec-check-unsigned, and restarted dnsmasq; clean bill of health from test-ipv6.com. Then I turned on dnssec only, leaving dnssec-check-unsigned, and got a clean bill of health. Then I turned on both at the same time, and things are working. So we seem to have a boot time race of some sort. - Jim On Fri, Apr 25, 2014 at 1:39 PM, Dave Taht wrote: > jg tells me the test-ipv6.com site fails with dnssec and enabled on > native ipv6. > > disabling dnssec works. > > anyone can confirm? get a log/packet capture? > > > -- > Dave T=C3=A4ht > _______________________________________________ > Cerowrt-devel mailing list > Cerowrt-devel@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/cerowrt-devel > --089e01184a72cd8b3c04f7e1c179 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Mor= e specifically, after boot, most of the time test-ipv6.com reports lots of problems.

Then I tur= ned off both dnssec and dnssec-check-unsigned, and restarted dnsmasq; clean= bill of health from test-ipv6.com.

Then I turned on dnssec only, = leaving dnssec-check-unsigned, and got a clean bill of health.

Then I tur= ned on both at the same time, and things are working.

So we seem to have a boot time race of some sort.
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 - Jim

<= div class=3D"gmail_extra">

On Fri, Apr 25, 2014 at 1:39 PM, Dave Ta= ht <dave.taht@gmail.com> wrote:
jg tells me the test-ipv= 6.com site fails with dnssec and enabled on native ipv6.

disabling dnssec works.

anyone can confirm? get a log/packet capture?


--
Dave T=C3=A4ht
_______________________________________________
Cerowrt-devel mailing list
Cerowrt-devel@lists.= bufferbloat.net
https://lists.bufferbloat.net/listinfo/cerowrt-devel

--089e01184a72cd8b3c04f7e1c179--