aha, so checking this
https://dnsleaktest.com and
https://www.perfect-privacy.com/dns-leaktest/ using working config with dnsmasq, which is
asking 1.1.1.1 in case it doesn't know I see opendns or google resolvers in results.
could be a reason?
jb.
Sent with ProtonMail Secure Email.
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Friday, November 9, 2018 6:32 PM, Vladimír Čunát <vladimir.cunat(a)nic.cz> wrote:
Hello.
Looking at the verbose logs, kresd sometimes gets
incorrect replies from
root servers, e.g. from 198.41.0.4. I'm >99% certain there's someone
intercepting the packets between you and the servers, even over TCP,
probably trying to "optimize". It's hard for me to predict how such a
situation will play out.
Apparently you don't have working IPv6, so adding
`net.ipv6 = false` to
your config can help a bit.
--Vladimir