From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: lazyvirus@gmx.com Received: from krantz.zx2c4.com (localhost [127.0.0.1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id eb573df1 for ; Mon, 22 May 2017 01:59:15 +0000 (UTC) Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 2bc621ff for ; Mon, 22 May 2017 01:59:15 +0000 (UTC) Date: Mon, 22 May 2017 04:11:07 +0200 From: Bzzzz To: "Jason A. Donenfeld" Subject: Re: openresolv dependency Message-ID: <20170522041107.7f5a8be8@msi.defcon1> In-Reply-To: References: <2fa3ef35-fde6-55d2-0872-52aa2bcb87d2@biot.com> <20170522030211.6fb18de8@msi.defcon1> <20170522033439.38979b0a@msi.defcon1> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Cc: WireGuard mailing list List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Mon, 22 May 2017 03:40:36 +0200 "Jason A. Donenfeld" wrote: Whoops, back in the loop: =20 > Anyway, here's the solution I'm considering at the moment: > https://github.com/jlund/streisand/pull/702 > My Gentoo system is more click-o-matic than Ubuntu dysfunctionality. =20 Gentoo is good (they also hate shitstemd;) ubuntu is=E2=80=A6 ubuntu - using testing packages I wouldn't consider in a= ny configuration (I use Debian). > Anyway, here's the solution I'm considering at the moment: > https://github.com/jlund/streisand/pull/702 =20 This sounds fair, the only pending question being the last one: "Building on that last point, I'm still uncertain exactly how Ubuntu's use of dnsmasq interacts with --enable-updates/disable-updates and resolvconf in general." that I can't answer. All I know is Debian waits for ~30s and jump to another resolver if there's one into /etc/resolv.conf - but it doesn't keep track about that (or not very long) and do the same for almost each DNS request. My guess is you're trying to do too much for end users; just advertise behaviors and let people fix their own configuration. After all, this ML is here for that and WG is about VPN, not DNS. Jean-Yves