Your message dated Fri, 23 Dec 2016 01:41:21 -0500
with message-id <20161223064121.fvuozg63tllply4r@gambit>
and subject line Closed in 1.7.0-1
has caused the Debian Bug report #781648,
regarding dnscrypt-proxy: Default configuration doesn't work with Unbound DNS
cache
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
781648: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781648
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dnscrypt-proxy
Version: 1.4.3-2
Severity: normal
Hi! The README of ``dnscrypt-proxy`` recommends using Unbound as a DNS
caching resolver in combination with it. However, Unbound enables DNSSEC and
the default configuration of ``dnscrypt-proxy`` sets
``DNSCRYPT_PROXY_RESOLVER_NAME=opendns`` in its default file. The problem is
that OpenDNS servers disable DNSSEC, which results in Unbound rejecting the
responses coming from the proxy and name resolution failing, as explained
here: https://forums.opendns.com/comments.php?DiscussionID=15361#Item_9
I suggest to change the default to a different one (e.g. the ``dnscrypt.eu-*``
servers seem to work), or to add a short comment in the default file warning
about OpenDNS servers and DNSSEC.
Thanks!
-- System Information:
Debian Release: 8.0
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=ca_ES.UTF-8, LC_CTYPE=ca_ES.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages dnscrypt-proxy depends on:
ii adduser 3.113+nmu3
ii init-system-helpers 1.22
ii libc6 2.19-17
ii libsodium13 1.0.1-1
ii libsystemd0 215-12
dnscrypt-proxy recommends no packages.
Versions of packages dnscrypt-proxy suggests:
ii resolvconf 1.76.1
-- Configuration Files:
/etc/default/dnscrypt-proxy changed [not included]
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 1.7.0-1
--
Eric Dorland <[email protected]>
43CF 1228 F726 FD5B 474C E962 C256 FBD5 0022 1E93
--- End Message ---
