On 2024-01-03 17:14 +01, Florian Obser <flor...@openbsd.org> wrote: > Hi there, > > dnscrypt-proxy fails thusly on -current: > > Jan 3 17:07:29 x395 dnscrypt-proxy[54029]: dnscrypt-proxy 2.1.5 > Jan 3 17:07:29 x395 dnscrypt-proxy[54029]: Network connectivity detected > Jan 3 17:07:29 x395 dnscrypt-proxy[54029]: Dropping privileges > Jan 3 17:07:29 x395 dnscrypt-proxy[54029]: Unable to set the close on exec > flag: [function not implemented] >
So I've solved this by installing dnsdist instead. Since unwind(8) can't natively speak DoH and there are sometimes networks that try really hard to filter DNS put let through tcp/443 I need a thing that speaks Do53 as a server and forwards queries to quad9 DoH. dnsdist does this just fine. -- In my defence, I have been left unsupervised.
