I recently struggled with this. It turns out, NetworkManager will only modify /etc/resolv.conf if it is a symlink to /run/resolvconf/resolv.conf. If it's a regular file, regardless of its permissions, NM will not touch it.
Other software probably still will, though, like dhclient. -wes On Tue, Mar 12, 2019 at 4:11 PM Ben Koenig <[email protected]> wrote: > Are you using NetworkManager? > > Last I checked NetworkManager will overwrite customizations to > /etc/resolv.conf. > One of my systems currently has the line: > > # Generated by NetworkManager > > at the top, so I add all my stuff through the designated utility. > Networkmanager should be the same everywhere, but I'm not on debian > so.... things might be different. > > On Mon, Mar 11, 2019 at 1:42 PM <[email protected]> wrote: > > > > I have Spectrum cable where the ethernet connection to the modem > receives a dynamic ip address from Spectrum along with wrong name servers. > > > > This is correct for resolv.conf: > > search roch.robinson-west.com > > nameserver 127.0.0.1 > > > > resolv.conf get's overwritten though by the modem... > > > > I'm on a Debian Linux system. I need to ignore the nameserver settings > from Spectrum and the Spectrum search line. > > Something called resolvconf will allow me to do this??? > > > > Another thing I'm wondering about is what the proper firewall settings > are to allow clients on my RFC 1918 network to use > > the proxy on my server. I'm also wondering about the legality of sslbump > and what people who have deployed this can tell > > me about enabling https support in squid? > > > > Theoretically, I could have a list of https sites that are allowed and > disallow all others and not have a legal problem. With google pushing web > sites > > to go https, it's not just banks and credit unions using it anymore. > Even google search is https. Uge! This is a nightmare for anyone who wants > their > > Internet connection content filtered. Content filtering by it's very > nature requires a man in the middle. The https protocol is supposed to > guarantee > > that there isn't a man in the middle. Some countries evidently will > prosecute you if you filter https connections. If I'm a business owner or a > home owner > > running a network at home, what am I supposed to do? > > _______________________________________________ > > PLUG mailing list > > [email protected] > > http://lists.pdxlinux.org/mailman/listinfo/plug > _______________________________________________ > PLUG mailing list > [email protected] > http://lists.pdxlinux.org/mailman/listinfo/plug > _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
