Hello,
please enable verbose logging - you just need to add this line to your
config file:
verbose(true)
and restart daemon so we can see what happened.
Petr Špaček @ CZ.NIC
On 09. 11. 18 15:09, Ján Boroš wrote:
hi
My idea is to use knot resolver as dns forwarder / cache instead
using dnsmasq. I am using old PC with archlinux as router.
I did change dnsmasq config so it listen on port 5353.
following steps here
https://wiki.archlinux.org/index.php/Knot_Resolver I did change
systemd unit so my kresd is listening on both local interfaces. I
am checking that with ss command and it is ok.
here is my config of kresd
cat /etc/knot-resolver/kresd.conf -- vim:syntax=lua: -- Refer to
manual:
http://knot-resolver.readthedocs.org/en/latest/daemon.html#configuration
-- Load useful modules modules = { 'policy', -- Block
queries to local zones/bad sites 'hints > iterate', -- Load
/etc/hosts and allow custom root hints 'stats', -- Track
internal statistics 'predict', -- Prefetch
expiring/frequent records }
-- See kresd.systemd(7) about configuring network interfaces when
using systemd -- Listen on localhost (default) -- net = {
'127.0.0.1', '::1'}
-- Enable DNSSEC validation -- trust_anchors.file =
'/etc/knot-resolver/root.keys'
hints.root_file = '/etc/knot-resolver/root.hints'
-- Cache size cache.size = 100 * MB
After start I can see following errors in journal
Nov 08 22:49:43 skriatok systemd[1]: Starting Knot Resolver
daemon... Nov 08 22:49:43 skriatok systemd[1]: Started Knot
Resolver daemon. Nov 08 22:49:53 skriatok kresd[9012]: [priming]
cannot resolve address 'b.root- servers.net.', type: 1 Nov 08
22:49:53 skriatok kresd[9012]: [priming] cannot resolve address
'b.root- servers.net.', type: 28 Nov 08 22:49:53 skriatok
kresd[9012]: [priming] cannot resolve address 'h.root-
servers.net.', type: 28 Nov 08 22:49:53 skriatok kresd[9012]:
[priming] cannot resolve address 'j.root- servers.net.', type: 1
Nov 08 22:49:53 skriatok kresd[9012]: [priming] cannot resolve
address 'm.root- servers.net.', type: 1 Nov 08 22:49:53 skriatok
kresd[9012]: [priming] cannot resolve address 'l.root-
servers.net.', type: 1 Nov 08 22:49:53 skriatok kresd[9012]:
[priming] cannot resolve address 'j.root- servers.net.', type: 28
Nov 08 22:49:53 skriatok kresd[9012]: [priming] cannot resolve
address 'i.root- servers.net.', type: 28 Nov 08 22:49:53 skriatok
kresd[9012]: [priming] cannot resolve address 'g.root-
servers.net.', type: 28 Nov 08 22:49:53 skriatok kresd[9012]:
[priming] cannot resolve address 'f.root- servers.net.', type: 28
Nov 08 22:49:53 skriatok kresd[9012]: [priming] cannot resolve
address 'e.root- servers.net.', type: 28 Nov 08 22:49:53 skriatok
kresd[9012]: [priming] cannot resolve address 'd.root-
servers.net.', type: 28 Nov 08 22:49:53 skriatok kresd[9012]:
[priming] cannot resolve address 'a.root- servers.net.', type: 28
Nov 08 22:49:53 skriatok kresd[9012]: [priming] cannot resolve
address 'h.root- servers.net.', type: 1 Nov 08 22:49:53 skriatok
kresd[9012]: [priming] cannot resolve address 'c.root-
servers.net.', type: 1 Nov 08 22:49:53 skriatok kresd[9012]:
[priming] cannot resolve address 'k.root- servers.net.', type: 1
Nov 08 22:49:53 skriatok kresd[9012]: [priming] cannot resolve
address 'e.root- servers.net.', type: 1 Nov 08 22:49:53 skriatok
kresd[9012]: [priming] cannot resolve address 'f.root-
servers.net.', type: 1 ...
thank you for help