On Mon, Sep 21, 2015 at 1:28 AM, frederick w. soucy <li...@borf.cc> wrote: > On 2015.09.20, C.L. Martinez wrote: >> Hi all, >> >> I have installed an openbsd 5.7 VM today to do some tests with pf rules. >> One of the components to I need to enable in this gateway is >> unbound+dnscrypt-proxy. >> >> I have configured forwarding in unbound.conf: >> >> forward-zone: >> name: "." >> forward-addr: 127.0.0.1@4553 >> >> And I have started dnscypt-proxy with the following arguments: >> >> -d --user=_dnscrypt-proxy -a 127.0.0.1:4553 -R dnscrypt.eu-nl -p >> /var/run/dnscrypt-proxy.pid >> >> Output: >> >> 32032 ?? Is 0:00.00 /usr/sbin/ftp-proxy -m 25 >> 32411 ?? Is 0:00.00 /usr/local/sbin/dnscrypt-proxy -d >> --user=_dnscrypt-proxy -a 127.0.0.1:4553 -R dnscrypt.eu-nl -p >> /var/run/dnscrypt-proxy.pid >> 5667 ?? I 0:00.03 /usr/local/sbin/dnscrypt-proxy -d >> --user=_dnscrypt-proxy -a 127.0.0.1:4553 -R dnscrypt.eu-nl -p >> /var/run/dnscrypt-proxy.pid >> 1256 ?? Is 0:00.00 /usr/sbin/cron >> 17818 ?? Ss 0:00.12 sshd: root@ttyp0 (sshd) >> 527 ?? Is 0:00.05 unbound -c /var/unbound/etc/unbound.conf >> 30164 p0 Ss 0:00.02 -ksh (ksh) >> 7382 p0 R+ 0:00.00 ps -xa >> 16881 C0 Is+ 0:00.00 /usr/libexec/getty std.9600 ttyC0 >> 3047 C1 Is+ 0:00.00 /usr/libexec/getty std.9600 ttyC1 >> >> And it doesn't works. But if I change unbound's forward section to: >> >> forward-zone: >> name: "." >> #forward-addr: 127.0.0.1@4553 >> forward-addr: 8.8.8.8 >> >> Works ok. Removing all forward seciton, unbound works ok also. Then, I am >> doing something wrong but I don't know which. >> >> Any idea?? >> >> Thanks. > > i was having problems with dnscrypt.eu-nl today, could ping its ip but > not get any dns resolution so i just switched to dnscrypt.eu-dk and > everything is working again ymmv
Ok, it seems there is some problem with servers. This morning, dnscrypt.eu-dk works, but not dnscrypt.eu-nl. Uhmm ... I will try to update dnscrypt-resolvers.csv file to tests more servers ... Many thanks to all for your help.
