Re: Bug-report of sorts...

2015-02-01 Thread Poul-Henning Kamp

In message alpine.bsf.2.11.150130250.91...@z.fncre.vasb, Marcin Cieslak w
rites:
On Fri, 30 Jan 2015, Poul-Henning Kamp wrote:

 But the point is I never get to the webpage, local_unbound just doesn't
 seem to be able to resolve anything through the DHCP appointed server,
 despite the fact that dig(1) does so just fine.

So I finally had a chance to dig into this.

Commenting out the root.key fil in unbound.conf did it, with it
unbound seems to insist on validating the rootkey and to do nothing
else until that happens.

The DNS server in the meantime ignores DNSKEY queries...

-- 
Poul-Henning Kamp   | UNIX since Zilog Zeus 3.20
p...@freebsd.org | TCP/IP since RFC 956
FreeBSD committer   | BSD since 4.3-tahoe
Never attribute to malice what can adequately be explained by incompetence.
___
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org


Bug-report of sorts...

2015-01-30 Thread Poul-Henning Kamp
I'm at a hotel in Bruxelles right now, and the cordially provided free
wireless is a lot less useful than it can be, because my FreeBSD box
can't seem to do DNS lookups on it.

It's one of those captive portal kind of things where you get a
DHCP reply with a DNS server which lies to you until you agree to
the TC on a web-page.

But the point is I never get to the webpage, local_unbound just doesn't
seem to be able to resolve anything through the DHCP appointed server,
despite the fact that dig(1) does so just fine.

I have no idea what goes wrong or why it goes wrong, local_unbound does
not seem to record anything in syslog about failures.

I'm here for a couple of days (as are, I belive, another couple of
FreeBSD people) in case anybody has any ideas to try...

Input welcome...

-- 
Poul-Henning Kamp   | UNIX since Zilog Zeus 3.20
p...@freebsd.org | TCP/IP since RFC 956
FreeBSD committer   | BSD since 4.3-tahoe
Never attribute to malice what can adequately be explained by incompetence.
___
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org


Re: Bug-report of sorts...

2015-01-30 Thread Peter Jeremy
On 2015-Jan-30 22:24:50 +, Poul-Henning Kamp p...@phk.freebsd.dk wrote:
But the point is I never get to the webpage, local_unbound just doesn't
seem to be able to resolve anything through the DHCP appointed server,
despite the fact that dig(1) does so just fine.

How about some packet captures showing the request/response differences
between dig(1) and local_unbound?

-- 
Peter Jeremy


pgphVJ2onIPFJ.pgp
Description: PGP signature


Re: Bug-report of sorts...

2015-01-30 Thread Marcin Cieslak
On Fri, 30 Jan 2015, Poul-Henning Kamp wrote:

 But the point is I never get to the webpage, local_unbound just doesn't
 seem to be able to resolve anything through the DHCP appointed server,
 despite the fact that dig(1) does so just fine.
 
I kind of got used to having to restart local_unbound after wifi/ipsec
failures on my network, but I think I am going straight to the rootservers
and I don't have anything captive. Something got negatively
cached for too long?


//Marcin
___
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org