Search found 103 matches

by coits
Fri Apr 12, 2019 4:06 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 1832

Re: DNS-over-TLS+DNSSEC support

Hi Guys, Just want to give an update about this topic. I finally got dnscrypt and dnssec play together pretty well. I have remove dnscrypt and manually installed dnscrypt-proxy V2, it's pretty big around 6M. and use cloudflare not opendns. Check the logs and don't see these errors anymore ==========...
by coits
Thu Apr 11, 2019 6:18 pm
Forum: Network / Wireless Issues
Topic: dnscrypt with full plugin support
Replies: 1
Views: 165

dnscrypt with full plugin support

Hi All, Just wondering if we have a dnscrypt with plugin support, I want to try this blacklist parameter and got this error. ======================================================== dnscrypt-proxy: dnscrypt-proxy plugins support not present, ignoring 'blacklist' parameter. ==========================...
by coits
Wed Apr 10, 2019 3:08 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 1832

Re: DNS-over-TLS+DNSSEC support

I have burned my midnight candle on this last night. Finally I have it working, but still this "insecure DS" comes in the log sometimes.I have check it thru dnssec test sites and it says dnssec is working.but, dnscrypt is broken. When I fixed dnscrypt then dnssec is not working. Finally, I...
by coits
Wed Apr 10, 2019 12:51 am
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 1832

Re: DNS-over-TLS+DNSSEC support

Followed everything you have advise.But, still not working, I can see the log that says "dnsvalidation enabled". But, these errors still flooding on syslog. =================================================== Insecure DS reply received, do upstream DNS servers support DNSSEC? =============...
by coits
Wed Apr 03, 2019 3:29 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 1832

Re: DNS-over-TLS+DNSSEC support

Apologies for the late reply.

I have tried the above suggestion and still not working.

I will try to update my spare router with the latest gargoyle firmware and let's see how it goes?

Don't wanna messed up that much on my primary router.

Thank you!
by coits
Tue Mar 26, 2019 8:25 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 1832

Re: DNS-over-TLS+DNSSEC support

I have installed dnsmasq-full and stubby. it seems it doesn't play very well when you have dnscrypt running on it. when I run nslookup it still showing 127.0.0.1:53. I believe I need to do some port forwarding from 53 to 5453 so that nslookup will show 127.0.01:5453. Syslog still flooding with thes...
by coits
Tue Mar 26, 2019 3:05 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 1832

Re: DNS-over-TLS+DNSSEC support

Guys, I have tried to install dnssec and got these errors on syslog "Insecure DS reply received, do upstream DNS servers support DNSSEC?". Clicking on google search link goes to blank page, sometimes it works!. It seems partially working. Any idea, what I am missing here? Thanks guys. You...
by coits
Thu Mar 21, 2019 11:43 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 1832

Re: DNS-over-TLS+DNSSEC support

Guys,

I have tried to install dnssec and got these errors on syslog "Insecure DS reply received, do upstream DNS servers support DNSSEC?".

Clicking on google search link goes to blank page, sometimes it works!.
It seems partially working.

Any idea, what I am missing here?

Thanks guys.
by coits
Thu Mar 21, 2019 3:32 pm
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 1832

Re: DNS-over-TLS+DNSSEC support

RomanHK wrote:
coits wrote:Guys,

Just want to ask, does dnssec and dnscrypt play together well?

Thank you

Yes I agree. dnsmasq full (DNSSEC) + stubby (TLS over DNS) work fine.


Thanks, i will try this sometime.
by coits
Thu Mar 21, 2019 3:00 am
Forum: General Discussion
Topic: DNS-over-TLS+DNSSEC support
Replies: 28
Views: 1832

Re: DNS-over-TLS+DNSSEC support

Guys,

Just want to ask, does dnssec and dnscrypt play together well?

Thank you

Go to advanced search