[Cerowrt-devel] Upgraded to 3.10.38-1, DNS issues?

[Aristar]

Didn't see any release notes for anything newer than 3.10.38-1 so I
presumed they might be untested builds, so I didn't want to risk it on
my main gateway router. I've been waiting for a stable release but the
recent security vuln made 3.7.5 unviable.

Looking for the most stable release possible (without security vulns)
if anyone has any suggestions

On Sun, May 11, 2014 at 7:54 AM, Sebastian Moeller <moeller0 at gmx.de> wrote:
> Hi Aristar,
>
>
> On May 9, 2014, at 18:17 , Aristar <LeetMiniWheat at gmail.com> wrote:
>
>> Okay I figured it out. It was DNSSEC I didn't realize it was enabled
>> by default so I had to comment out the lines in /etc/dnsmasq.conf but
>> I still had to manually specify a nameservers in a separate config
>> under LUCI Network>DHCP and DNS>Resolv and Hosts Files>"Resolve file"
>> and all is well again.
>
>         I think Dave changed the default for 3.10.38-2 to avoid the negative proof checks, and that, at least on my system, made automatic DNS configuration though my upstream router functional again. I had the same issues as you with 3.10.38-1 and some earlier ones. So you might want to test the latest cerowrt to see whether that solves the issue. (I think there was some discussion of how DNS recurs or work differently with DNSSEC than dnsmasq, which operates as a forwarder.)
>
> Best Regards
>         Sebastian
>
>>
>> Now to set up dnscrypt-proxy again which actually has a repository now
>> and instructions for building from source. (Seems more reliable than
>> DNSSEC anyways, though I have not read too much on DNSSEC).
>>
>> src/gz exopenwrt http://exopenwrt.and.in.net/ar71xx/packages
>>
>> https://forum.openwrt.org/viewtopic.php?id=36380&p=1
>>
>>
>> On Fri, May 9, 2014 at 5:34 AM, Aristar <LeetMiniWheat at gmail.com> wrote:
>>> Sorry if this is a dumb question but I'm not sure what's changed since
>>> 3.7.5 but I can't get DNS working. my resolv.conf says 127.0.0.1, the
>>> /tmp/resolv.conf.auto has valid dns servers and I can't resolve
>>> anything locally on the router via ssh or on any client device. I CAN
>>> get dns LOCAL only if I add a dns server to /etc/resolv.conf but
>>> clients using nameserver 172.30.42.1 can't
>>>
>>> Any ideas? I did a fresh install/clean configs and it isn't working
>>> out of the box or with any GUI or manual editing I've tried.
>> _______________________________________________
>> Cerowrt-devel mailing list
>> Cerowrt-devel at lists.bufferbloat.net
>> https://lists.bufferbloat.net/listinfo/cerowrt-devel
>