Re: Unbound and intermittent network connectivity?

2016-01-04 Thread W.C.A. Wijngaards via Unbound-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi Robert, On 18/12/15 20:05, Robert Edmonds via Unbound-users wrote: > Hi, > > I have a few recent bug reports from Debian users that Unbound > stops resolving after brief interruptions in network connectivity. > Especially from users on laptops,

Re: Can DNSSEC resolvers pass through all mangling CPEs?

2016-01-04 Thread Tony Finch via Unbound-users
DNSSEC detects and blocks mangling, it does not bypass it. If your CPE or your ISP are lying to you, and you need to access the sites they are lying about, your only option is to use a different upstream resolver; you might also have to use a tunnel. Tony. -- f.anthony.n.finchhttp://dotat.at/

Re: Can DNSSEC resolvers pass through all mangling CPEs?

2016-01-04 Thread Rick van Rein via Unbound-users
Hi Tony / list, > DNSSEC detects and blocks mangling, it does not bypass it. Thanks, I know. What I am wondering is if the approach of recursive resolution, not explicitly going through the CPE, suffices to avoid mangling. The CPE *could* still force control over DNS traffic on account of tar

Re: unbound-control dump_cache / load_cache

2016-01-04 Thread W.C.A. Wijngaards via Unbound-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi Havard, On 30/12/15 00:28, Havard Eidnes via Unbound-users wrote: > Hi, > > a while back I needed/wanted to reconfigure my unbound recursor to > have more memory available for the "rrset cache", in what seems to > be a futile attempt at increasi

Re: Can DNSSEC resolvers pass through all mangling CPEs?

2016-01-04 Thread Stephane Bortzmeyer via Unbound-users
On Mon, Jan 04, 2016 at 01:50:21PM +0100, Rick van Rein via Unbound-users wrote a message of 9 lines which said: > What I am wondering is if the approach of recursive resolution, not > explicitly going through the CPE, suffices to avoid mangling. The > CPE *could* still force control over DNS