On 29/06/2020 07:03, Vladimír Čunát wrote:
I believe your problem was primarily in kresd version
mismatch. You
appear to be using older version, presumably 3.2.1-* but that one is old
and now the configuration of this is different. You can choose the
version in
https://knot-resolver.readthedocs.io but I understand that
it's easy to miss significance of that.
In any case, people most likely want to avoid these old versions, as we
don't support them and for instance 3.2.1 contains multiple security
bugs (that have been published for a long time). Debian unstable
currently contains a fresh version but generally you might prefer our
own repositories; see
https://www.knot-resolver.cz/download/
Hello Vladimír,
Thank you. My problem is solved now completely.
Debian Stable is indeed using old, insecure version, with latest NXNS
problem unresolved. I hope they will push new knot-resolver version to
main repo. In the meantime, I installed package you mentioned, I got now
sources.list entry and repository key installed nicely. Package is
upgraded. I modified config file accordingly to new docs, and old socket
files for systemd are not longer needed.
Thanks!
Kind regards,
pioruns