Hi List, hi Dave, On May 2, 2014, at 00:27 , Dave Taht <[email protected]> wrote:
> On Thu, May 1, 2014 at 1:26 PM, Rich Brown <[email protected]> wrote: >> >> On May 1, 2014, at 2:37 PM, Simon Kelley <[email protected]> wrote: >> >>> On 30/04/14 18:26, Dave Taht wrote: >>>> On Tue, Apr 29, 2014 at 1:57 PM, Phil Pennock >>>> <[email protected]> wrote: >> >> snip, snip snip... >> >>>> Is the consensus to not run with negative proofs on at this juncture? >>> >>> If you want stuff to just work, turn off negative proofs, if you want to >>> push the envelope, leave them on and complain to domain-admins. >>> >>> I had some feeling that something like this might be a problem, hence >>> the discrete controls. >> >> I apologize that I haven't been following this closely, but so I'm going to >> ask a TL;DR question. >> >> Which places in the OpenWrt/CeroWrt GUI (or the config files) do I use to >> wiggle these levers? > > There is no gui support as yet. enablement is via /etc/dnsmasq.conf > > I disabled (commented out) the negative proof checks in the 3.10.38-2 release. So, I installed this just now and to my amazement it directly picked up my ISP's dns servers immediately, unlike with the last two? releases I did not have to resort to google's dns servers. So this looks like the deutsche telekom setup is not ready for full dnssec (at least not when trying to use the dns server on the primary dt router...). Best Regards Sebastian > >> Thanks! >> >> Rich > > > > -- > Dave Täht > > NSFW: > https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article > _______________________________________________ > Cerowrt-devel mailing list > [email protected] > https://lists.bufferbloat.net/listinfo/cerowrt-devel _______________________________________________ Cerowrt-devel mailing list [email protected] https://lists.bufferbloat.net/listinfo/cerowrt-devel
