Search found 106 matches

by coits
Sat Mar 21, 2020 11:15 pm
Forum: Network / Wireless Issues
Topic: what ports are exposed on wan side
Replies: 5
Views: 943

Re: what ports are exposed on wan side

Hi RomanHK,

I used this link below and all ports are closed based on the results.

https://www.yougetsignal.com/tools/open-ports/

Thanks for the link and the quick response.
by coits
Sat Mar 21, 2020 9:17 pm
Forum: Network / Wireless Issues
Topic: what ports are exposed on wan side
Replies: 5
Views: 943

Re: what ports are exposed on wan side

I have tried to add this rule on my firewall and restart it. But, when I run nmap <wan ip> still showing port 22 as open. Can someone please advise what am I missing here? config rule option name 'block ssh wan port' option src 'wan' option proto 'tcp' option dest_port '22' option target 'DROP' ----...
by coits
Sat Mar 21, 2020 5:06 pm
Forum: Network / Wireless Issues
Topic: what ports are exposed on wan side
Replies: 5
Views: 943

what ports are exposed on wan side

Hi guys,

Just want to confirm with you guys, are these ports normally exposed on the wan side (external ip) of your router?

just want to ask, what port are exposed on your router?

PORT STATE SERVICE
22/tcp open ssh
53/tcp open domain
80/tcp open http
443/tcp open https

Thanks
by coits
Fri Apr 12, 2019 4:06 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 4730

Re: DNS-over-TLS+DNSSEC support

Hi Guys, Just want to give an update about this topic. I finally got dnscrypt and dnssec play together pretty well. I have remove dnscrypt and manually installed dnscrypt-proxy V2, it's pretty big around 6M. and use cloudflare not opendns. Check the logs and don't see these errors anymore ==========...
by coits
Thu Apr 11, 2019 6:18 pm
Forum: Network / Wireless Issues
Topic: dnscrypt with full plugin support
Replies: 1
Views: 557

dnscrypt with full plugin support

Hi All, Just wondering if we have a dnscrypt with plugin support, I want to try this blacklist parameter and got this error. ======================================================== dnscrypt-proxy: dnscrypt-proxy plugins support not present, ignoring 'blacklist' parameter. ==========================...
by coits
Wed Apr 10, 2019 3:08 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 4730

Re: DNS-over-TLS+DNSSEC support

I have burned my midnight candle on this last night. Finally I have it working, but still this "insecure DS" comes in the log sometimes.I have check it thru dnssec test sites and it says dnssec is working.but, dnscrypt is broken. When I fixed dnscrypt then dnssec is not working. Finally, I...
by coits
Wed Apr 10, 2019 12:51 am
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 4730

Re: DNS-over-TLS+DNSSEC support

Followed everything you have advise.But, still not working, I can see the log that says "dnsvalidation enabled". But, these errors still flooding on syslog. =================================================== Insecure DS reply received, do upstream DNS servers support DNSSEC? =============...
by coits
Wed Apr 03, 2019 3:29 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 4730

Re: DNS-over-TLS+DNSSEC support

Apologies for the late reply.

I have tried the above suggestion and still not working.

I will try to update my spare router with the latest gargoyle firmware and let's see how it goes?

Don't wanna messed up that much on my primary router.

Thank you!
by coits
Tue Mar 26, 2019 8:25 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 4730

Re: DNS-over-TLS+DNSSEC support

I have installed dnsmasq-full and stubby. it seems it doesn't play very well when you have dnscrypt running on it. when I run nslookup it still showing 127.0.0.1:53. I believe I need to do some port forwarding from 53 to 5453 so that nslookup will show 127.0.01:5453. Syslog still flooding with thes...
by coits
Tue Mar 26, 2019 3:05 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 4730

Re: DNS-over-TLS+DNSSEC support

Guys, I have tried to install dnssec and got these errors on syslog "Insecure DS reply received, do upstream DNS servers support DNSSEC?". Clicking on google search link goes to blank page, sometimes it works!. It seems partially working. Any idea, what I am missing here? Thanks guys. You...