[getdns-users] Stubby constantly has to be restarted to work in Manjaro

[Willem Toorop]

Op 19-06-18 om 21:40 schreef Advrk Aplmrkt:
> Thanks Willem, here's the output of `stubby -i`:
> 
> https://framabin.org/p/?8a235367bb28d8de#wpiW/+3K66F4yFqr6aRd1enfCGC+NolOEoG/SG21NGM=
> 
> And here's the output of `getdns_query -i`:
> 
> https://framabin.org/p/?9e9fed3b8d641187#/5y59RJ4tVtbtZcIPeQKRv+Nsnamy9LA1dIpF/jby6c=
> 
> Do you see any problems with it?

I notice you do have DNSSEC validation enabled and we do have a bug
since 1.4.2 (introduced with the partly trace DNSSEC up from the root
fix). Could you give the attached two patches a try and see if that works?

Thanks!

-- Willem

> Thanks for your help!
> 
> On 18/06/2018, Willem Toorop <willem at nlnetlabs.nl> wrote:
>> Thanks Advrk,
>>
>> Could you provide a few more details on the versions?
>> The output of
>>
>> stubby -i
>>
>> and/or
>>
>> getdns_query -i
>>
>> Thanks,
>>
>> -- Willem
>>
>> Op 16-06-18 om 16:01 schreef Advrk Aplmrkt:
>>> Hello,
>>>
>>> I've been using Stubby on default settings per the instructions here
>>> for several months:
>>>
>>> https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Daemon+-+Stubby
>>>
>>> I installed it from the official repositories for my Manjaro Linux
>>> system and I used Network Manager to point my home wifi connection to
>>> always use Stubby for DNS at 127.0.0.1. It worked well enough until a
>>> few weeks ago when all DNS look ups on this system failed.
>>>
>>> I discovered that after restarting Stubby via the command "systemctl
>>> restart stubby" makes DNS lookups work again, **but only for a few
>>> minutes at a time!!!**
>>>
>>> So now, I have to keep a terminal window open all the time and rerun
>>> "systemctl restart stubby" every few minutes just to keep my Internet
>>> connection working... This is clearly not a sustainable solution.
>>>
>>> Can anyone advise on how to troubleshoot this issue? Thanks!
>>> _______________________________________________
>>> Users mailing list
>>> Users at getdnsapi.net
>>> https://getdnsapi.net/mailman/listinfo/users
>>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at getdnsapi.net
>> https://getdnsapi.net/mailman/listinfo/users
>>
> _______________________________________________
> Users mailing list
> Users at getdnsapi.net
> https://getdnsapi.net/mailman/listinfo/users
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fix-finding-signer-of-NSEC-and-NSEC3s.patch
Type: text/x-patch
Size: 8517 bytes
Desc: not available
URL: <http://lists.getdnsapi.net/pipermail/users/attachments/20180620/2e3abe8e/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-DS-is-always-a-delegation-and-never-at-the-apex.patch
Type: text/x-patch
Size: 1719 bytes
Desc: not available
URL: <http://lists.getdnsapi.net/pipermail/users/attachments/20180620/2e3abe8e/attachment-0001.bin>