Re: [Dnsmasq-discuss] IPv6-constructor for dhcp-host?

2014-04-28 Thread Conrad Kostecki
> The facility is there already: > > "IPv6 addresses may contain only the host-identifier part: > --dhcp-host=laptop,[::56] in which case they act as wildcards constructed > dhcp ranges, with the appropriate network part inserted." Hi Simon! It seems, I've overlooked that ;) That's what I need

Re: [Dnsmasq-discuss] IPv6-constructor for dhcp-host?

2014-04-28 Thread Simon Kelley
On 28/04/14 22:17, Conrad Kostecki wrote: > Hi! Recently, I was using an IPv6 tunnel from Hurricane Electric with > a static /48 IPv6-subnet, which was working fine. My ISP (Telekom > Deutschland) offers now native IPV6, but its only giving me a dynamic > /56 IPv6-subnet. I have to use the IPv6-con

[Dnsmasq-discuss] IPv6-constructor for dhcp-host?

2014-04-28 Thread Conrad Kostecki
Hi! Recently, I was using an IPv6 tunnel from Hurricane Electric with a static /48 IPv6-subnet, which was working fine. My ISP (Telekom Deutschland) offers now native IPV6, but its only giving me a dynamic /56 IPv6-subnet. I have to use the IPv6-constructors with DNSMasq. That is working fine fo

Re: [Dnsmasq-discuss] [Cerowrt-devel] test-ipv6.com vs dnssec

2014-04-28 Thread James Cloos
> "DT" == Dave Taht writes: DT> As one example of a registrar not with the program, name.com DT> (registrar for bufferbloat.net) does not allow for ds records to DT> come from it, so that domain can't be fully signed. DT> So it sounds to me as if negative proofs are not possible with DT> reg

Re: [Dnsmasq-discuss] [Cerowrt-devel] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014

2014-04-28 Thread Aaron Wood
This timeout, I'm guessing this is older/naive setups that aren't expecting to support DNSSEC, and thought "over-securing" their setup, have managed to break the non-existence-proof process? -Aaron On Mon, Apr 28, 2014 at 9:32 PM, Simon Kelley wrote: ... > Neither of authoritative nameservers f

Re: [Dnsmasq-discuss] [Cerowrt-devel] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014

2014-04-28 Thread Simon Kelley
On 28/04/14 19:56, Dave Taht wrote: > I see A and requests for for "ds.test-ipv6.com" that fail. > The root of this failure is that DS ds.test-ipv6.com is broken. <<>> DiG 9.8.1-P1 <<>> @8.8.8.8 ds ds.test-ipv6.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- o

Re: [Dnsmasq-discuss] [Cerowrt-devel] test-ipv6.com vs dnssec

2014-04-28 Thread Dave Taht
On Fri, Apr 25, 2014 at 11:49 AM, Simon Kelley wrote: > On 25/04/14 19:01, Jim Gettys wrote: >> More specifically, after boot, most of the time test-ipv6.com reports lots >> of problems. >> >> Then I turned off both dnssec and dnssec-check-unsigned, and restarted >> dnsmasq; clean bill of health f

Re: [Dnsmasq-discuss] [Cerowrt-devel] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014

2014-04-28 Thread Dave Taht
I see A and requests for for "ds.test-ipv6.com" that fail. On Mon, Apr 28, 2014 at 11:37 AM, Dave Taht wrote: > I have put a link up to two of jim's captures going to test-ipv6 via cero, > one with dnssec enabled, captured at the local laptop > > http://snapon.lab.bufferbloat.net/~cero2/ba

Re: [Dnsmasq-discuss] [Cerowrt-devel] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014

2014-04-28 Thread Dave Taht
I have put a link up to two of jim's captures going to test-ipv6 via cero, one with dnssec enabled, captured at the local laptop http://snapon.lab.bufferbloat.net/~cero2/baddns/ definately a lot of missing responses when captured at this end. the local laptop is using a local dnsmasq forwarder.

Re: [Dnsmasq-discuss] dnsmasq using 100% cpu on router

2014-04-28 Thread Simon Kelley
Note that this bug appears to be a hard lockup. https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1313393 investigations are continuing. Simon. On 28/04/14 12:18, Kevin Darbyshire-Bryant wrote: > On 25/04/2014 09:37, David Joslin wrote: >> Hi Kevin and thanks for the help. >> > Apo

Re: [Dnsmasq-discuss] [Cerowrt-devel] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014

2014-04-28 Thread Dave Taht
On Mon, Apr 28, 2014 at 9:55 AM, Jim Gettys wrote: > ​​Comcast recently lit up IPv6 native dual stack in the Boston area. > > The http://test-ipv6.com/ web site complains about DNS problems unless > dnssec is disabled; if it is, I get various timeouts. > > > Test with IPv4 DNS record > ok (4.196

[Dnsmasq-discuss] Problems with DNSsec on Comcast, with Cero 3.10.38-1/DNSmasq 4-26-2014

2014-04-28 Thread Jim Gettys
​​Comcast recently lit up IPv6 native dual stack in the Boston area. The http://test-ipv6.com/ web site complains about DNS problems unless dnssec is disabled; if it is, I get various timeouts. Test with IPv4 DNS record ok (4.196s) Test with IPv6 DNS record ok (0.115s) using ipv6 Test with Dual S

Re: [Dnsmasq-discuss] dnsmasq using 100% cpu on router

2014-04-28 Thread Kevin Darbyshire-Bryant
On 25/04/2014 09:37, David Joslin wrote: > Hi Kevin and thanks for the help. > Apologies for delay in reply. > Is it possible to upgrade the dnsmasq version on the router without > waiting for the author of the tomato firmware to include a later > version in a release of his firmware (and you menti