Search results

Another option is the more extensive Root Zone List, which includes the authoritative name servers from the root hints files and the zone delegates off that; however, the one reported nameserver at issue so far, is not included in that list either.

Ignorant on this topic, but don’t the authoritative name have static IP’s? @Adamm If so, can’t we add all of them to the skynet whitelist? Can’t think of a reason that would be unsafe?

I will admit my ignorance and that a quick google search was less than satisfactory for me. Would you mind posting a link to this forum for those of us that would like to read up on this?

Hopefully, we can get to the point where @Martineau with Jack Yaz's gracious offer to help can maintain a beta or release quality fork for those that want ease of install and things just to work in well-documented ways and @rgnldo, if he so desires, can maintain a more bleeding edge fork that...

Curious, if this unbound implementation has the ability to work directly as a resolver and not just a forwarder to other public resolvers, i.e. cloudfare, google, etc ...? I switched to pfsense, outstanding router software, at my home but still manage my folks place with Asus merlin. Anyway, I...

You are likely unable to say, but is Asus working to implement these roaming standards anytime soon? Should be a big benefit to AIMesh and anyone that uses AP’s. At least for those of us with devices that can take advantage, which should be most every thing recent or that will be released going...

Same here

Per my Pixelserv-tls servstats page, tls 1.3 is working with just released stock iOS 12.2 on both iphone and iPad after the update this afternoon. Not seeing anything moving on the 0-RTT front though so that implementation is likely still lacking, at least on an untweaked default iOS install.

@EmeraldDeer and @Marin Here, https://www.snbforums.com/threads/stubby-installer-asuswrt-merlin.49469/page-34#post-459644 , is the concise answer to your DNSSEC questions. So manually adding "dnssec: GETDNS_EXTENSION_TRUE" to your stubby.yml forces your Router to also validate dnssec. The...

With ignorance I ask, @Adamm and @Xentrk, if there is reason not to have this stubby installer automatically add "export TZ=$(cat /etc/TZ)" in the stubby and haveged init.d scripts?

@Xentrk Is there a specific reason round_robin_upstreams: defaults to 0 in your distros stubby.yml? Setting to 1 and allowing stubby to query all available configured upstream DNS servers simultaneously, instead of 0 resulting in a sequential query and wait going down the list of configured...

@cmkelley Do you have round_robin_upstreams: set to 1 or 0?

@eclp I would add to Bbunges suggestions that many of us use ext4 with journalling on our USB thumb drives and/or SSD as well. as to entware, if you are like many of us and take advantage of diversion you already have entware set up correctly by that script. Just update Entware from within...

I assume you were taken down by the same bug, in the older entware getdns/stubby that took down RT-AC86u and other HND based asus routers, including the RT-AX88U at first. I had similar issues when I initially tried stubby, but since then @Odkrys compiled the latest Stubby and GetDNS for HND...

Which asus router did you install on?

Did not, at work now though.

IPV6 Test My results, RTAC86U- 384.8_2. Latest Stubby/GetDNS with proxy-dnssec option and working DoT TLS 1.3. Using Cloudflare IPv4 1.1.1.1/1.0.0.1 Passed all test. Did not add "dnssec_return_status: GETDNS_EXTENSION_TRUE" to the stubby.yml so dnssec is permissive and not strictly validated by...

So DNSSEC is working without that line?

Should the following: dnssec_return_status: GETDNS_EXTENSION_TRUE be added to the /opt/etc/stubby/stubby.yml by the installer if you select yes to proxy-dnssec during the stubby install/update? https://dnsprivacy.org/wiki/display/DP/Configuring+Stubby#ConfiguringStubby-DNSSEC Maybe just make...

I volunteer on IPv6 as well.