Re: wg syncconf (and setconf) error when one or more endpoints is unresolvable

2021-06-15 Thread Jason A. Donenfeld
Hi Christian, I don't condone shipping patched binaries to your users, and I won't provide support for that here. What I'd recommend instead, if you want really fine grained control over DNS resolution, is to just resolve your DNS names prior to calling wg(8), and then apply whatever policy you wa

Re: wg syncconf (and setconf) error when one or more endpoints is unresolvable

2021-06-15 Thread Christian McDonald
Lonnie, Thanks for the quick response and the trivial fix! This is perfect Best, Christian On Tue, Jun 15, 2021 at 9:24 AM Lonnie Abelbeck wrote: > > > > On Jun 15, 2021, at 5:52 AM, Jason A. Donenfeld wrote: > > > > This is intended behavior. DNS resolution happens at config parsing time. > >

wintun interface sometimes can't start after wireguard-windows service dies

2021-06-15 Thread Eric Romano
Hey All, I ran into some unexpected behavior with a script that calls "/installtunnelservice" waits a bit, then calls "/uninstalltunnelservice". This happens in a loop with some connectivity checks in between. When the tunnel service itself ("wireguard.exe /tunnelservice ...") is killed, I notice

Re: wg syncconf (and setconf) error when one or more endpoints is unresolvable

2021-06-15 Thread Lonnie Abelbeck
> On Jun 15, 2021, at 5:52 AM, Jason A. Donenfeld wrote: > > This is intended behavior. DNS resolution happens at config parsing time. Christian, While I appreciate Jason's strict DNS requirement, for the last 2.5 years our project has implemented a trivial patch [1] to ignore endpoint DNS f

Re: wg syncconf (and setconf) error when one or more endpoints is unresolvable

2021-06-15 Thread Jason A. Donenfeld
This is intended behavior. DNS resolution happens at config parsing time.

wg syncconf (and setconf) error when one or more endpoints is unresolvable

2021-06-15 Thread Christian McDonald
Jason, Assume a tunnel with say 3 peers. Peer A is accessible via an IPv4 address, Peer B by some FQDN, and Peer C by some other FQDN. Let's also assume that Peer C was misconfigured with an unresolvable FQDN. wg syncconf (and setconf) fails with 'Name does not resolve...Configuration parsing erro