On Fri, 13 Apr 2012 16:49:19 +0200, Luca Capello wrote: > Hi there!
Ciao Luca, thanks a lot for this great bug report! > First, something which is related, but not critical: IMHO iodined should > be started *after* any DNS server, simply because in most cases the > topdomain argument must be resolved via DNS. Attached a Git patch > against the Debian repository: > > commit a2c2fdf93b6783bd729b04ed57d15794d058c65c > Author: Luca Capello <[email protected]> > Date: Wed Apr 11 13:21:57 2012 +0200 > Subject: debian/iodine.iodined.init: add to LSB's Required-Start Here I have a question: It obviously makes sense to start iodined after a named, but what happens if the machine doesn't run a nameserver (which happens probably more often for iodined)? If I understand http://wiki.debian.org/LSBInitScripts correctly, "Should-Start:" (if x is available start after x) seems more appropriate than "Required-Start:" (x must be available before starting). Or not. Trying it and looking throught the generated /etc/init.d/.depend.* files looks good (and also other initscripts have named in Required-Start and work although I don't have something providing $named here. > Second, as suggested by Martin in #433528, /etc/default/iodine should be > moved to /etc/default/iodined (which would also reflect the name of the > init.d script). Yes, that's all a bit inconsistent ... > Finally, the real problem. > While checking the upstream Git repository for relevant changes, I > discovered that in configurations similar to mine, i.e. iodined and > dnsmasq on different interfaces, there is no need to run the two daemons > on separate ports: > > commit a62ae8e562d0e9e5729bb4f469bc900074930efc > Author: Erik Ekman <[email protected]> > Date: Thu Jul 16 08:44:04 2009 +0000 > Subject: Allow bind port and listen port to be the same if listenip > doesnt include localhost. Also remove newlines from warnx Great finding! > Actually, there is no mention of this in the iodine manpage, so attached > a patch against the upstream Git repository (no mention in README to > avoid naive usage): > > commit 3f246470c7abc13553cffe544c88a4b78afde5b2 > Author: Luca Capello <[email protected]> > Date: Fri Apr 13 16:45:43 2012 +0200 > Subject: man/iodine.8: add note about sharing port/dnsport > > This complements a62ae8e562d0e9e5729bb4f469bc900074930efc. > > Indeed, with this feature and the following configuration iodined does > not segfault anymore: Very cool. Have you forwarded this patch already or shall I do it? > PS, I have confirmed iodined's own behavior (i.e. creating an > IPv4-over-DNS tunnel) only in the latter configuration ;-) Great :) Again: Thanks alot! Cheers, gregor, applying the patches right now -- .''`. Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06 : :' : Debian GNU/Linux user, admin, and developer - http://www.debian.org/ `. `' Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe `- NP: Sting: Englishman In New York
signature.asc
Description: Digital signature
