Le lundi 21 avril 2014, 15:28:30 Oliver Rath a écrit :
Hi list,
Im trying to give my network-computers IPv6-Addresses constructed
from ppp0. In my config I get from my provider i.e. these (dynamic)
IPv4 and IPv6-addresses:
# ifconfig ppp0
ppp0:
Le lundi 21 avril 2014, 15:50:04 Timo Buhrmester a écrit :
inet6 fe80::43c:5b54:cea:b7ea prefixlen 10 scopeid
0x20link
This is the link-local address, established by stateless
autoconfiguration.
inet6 2003:62:487f:b168:43c:5b54:cea:b7ea prefixlen 64
Le vendredi 12 juin 2015, 13:16:09 Maciej Soltysiak a écrit :
I think I have discovered what the problem is and it's unlikely to be
dnsmasq.
What I do is that I have a setup which is basically a split horizon:
- users who are not on the service get A record for using.dnscrypt from a
DNSSEC
Le dimanche 14 juin 2015 19:44:14, vous avez écrit :
Hi,
On Sun, Jun 14, 2015 at 9:06 AM, Stéphane Guedon steph...@22decembre.eu
wrote:
Le vendredi 12 juin 2015, 13:16:09 Maciej Soltysiak a écrit :
A user on my service, who has dnssec-check-unsigned enabled gets an
unsigned response
Le dimanche 14 juin 2015 19:44:14, vous avez écrit :
Hi,
On Sun, Jun 14, 2015 at 9:06 AM, Stéphane Guedon steph...@22decembre.eu
wrote:
Le vendredi 12 juin 2015, 13:16:09 Maciej Soltysiak a écrit :
A user on my service, who has dnssec-check-unsigned enabled gets an
unsigned response
Le jeudi 1 octobre 2015, 08:57:14 Ernst Ahlers a écrit :
> > I guess the logic is that dnsmasq is the authoritative source for
> > that data, so it doesn't need to validate it to know that it's
> > real.
>
> Right, but obviously the solution is not as simple as setting AD.
>
> As for the
Le vendredi 2 octobre 2015, 19:34:30 Ernst Ahlers a écrit :
> Thanks for chiming in Stephane,
>
> > Allowing dnsmasq to sign (or give a proof of authenticity) would solve
> > this
> > problem, yet I am sure it is not easy.
>
> AFAIK there's no provision yet in dnsmasq for keeping signed domains.
Le lundi 5 octobre 2015, 12:31:11 Ernst Ahlers a écrit :
> > You can have a local zone with local data also in Unbound.
>
> Sure, but also signed with DNSSEC?
>
> CU
>
> ea
That, I don't think so.
If you want to make something sophisticated, why not looking to Bind ?
It makes all possible
The conf' file lacked "bind-interfaces".
Sorry for the inconveniance.
On 19/01/2017 13:17, Stephane Guedon - EN wrote:
> The title says it all. When I make a dig query to dnsmasq, on localhost
> or not, ipv4 or v6, Dnsmasq receives the request, treat it, but I don't
> receive the answer.
>
>
