From owner-freebsd-net@freebsd.org Tue Nov 20 15:29:23 2018 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E1E4E1132EFC for ; Tue, 20 Nov 2018 15:29:22 +0000 (UTC) (envelope-from hyun@caffeinated.codes) Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BBDF371F9F for ; Tue, 20 Nov 2018 15:29:20 +0000 (UTC) (envelope-from hyun@caffeinated.codes) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 7D1F923D2F for ; Tue, 20 Nov 2018 10:29:14 -0500 (EST) Received: from web4 ([10.202.2.214]) by compute7.internal (MEProxy); Tue, 20 Nov 2018 10:29:14 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= caffeinated.codes; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:subject:date; s=fm1; bh= Jk0xvPqXN0XwN1T6w4zQfea7wSrDlChX7768H9S5c9E=; b=ncu5IhuRkKh+0NOY OFlturLHUn/IEtOBbn0uIBh464PBYdAwaz5b2BTf9Xsp3MCxaVHUadPaybDCjlAV 1TUbnKXTiV1g8Go4dO6LkxTh5ijtRuBEC8MjVb6wpyJM9+sVsRABheytTBwMNRK8 UyAHtqWD1H4+FhVVdJmKEHXk9yPO3Q0Pz7Q0ezUzwni3iXs/cz5tEELChaoaqm56 mgU4QhzH1il5A+YhkhXLgfpuqY6NDAVmiQKXSAu3HhiEPcg2yPkt7RyjjD06GwKQ 8IftXNdBvPdkMVNUHgwzPpRqoXpRxro6i4Gf0nRX1Sfsw7U+kN8lj0Jtsnlf6OQi WHm97A== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:message-id:mime-version:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=Jk0xvP qXN0XwN1T6w4zQfea7wSrDlChX7768H9S5c9E=; b=KkHB3JKTkXXHwhCrSUNudV za5fnD5Fqv2DK+XQAKjET9yt/xXBWUUzQ9bycC2iwR7bmb3lNP2Xp7/E3sMzLsIj uSUKEF0Yx9cmVYW2Crrg+921E5aVJukysEw1wXeia8SClFNEWzFjvO5pElOF/lwF tKMBOLg5uJ2KrZcMPgCQ7YulmqFnlGHQOytFNGrp9UE16WYaQ1w/SGD7qriznksL nQiSxj0x7juWAqgSTbxk3Nmw7CoQiqaogVYoJdyvtLhMHr+d1JGXFMYBjb2CFwb/ ZRZgkVcm5UyetujzMbA3GQZPaIZH/qQg1gr/4Sox3HO49AYw8AUxUK0Led8Cv1PQ == X-ME-Sender: X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 99) id 9C178BA7C4; Tue, 20 Nov 2018 10:29:13 -0500 (EST) Message-Id: <1542727753.2153805.1583287672.158E5AFF@webmail.messagingengine.com> From: Hyun Hwang To: freebsd-net@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="utf-8" X-Mailer: MessagingEngine.com Webmail Interface - ajax-3449945b Subject: dhclient.conf - using both prepend and append on domain-name-servers ignores prepend line? Date: Tue, 20 Nov 2018 10:29:13 -0500 X-Rspamd-Queue-Id: BBDF371F9F X-Spamd-Result: default: False [-3.08 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; R_DKIM_ALLOW(-0.20)[caffeinated.codes,messagingengine.com]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:66.111.4.28]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-0.997,0]; RCVD_COUNT_THREE(0.00)[4]; DMARC_NA(0.00)[caffeinated.codes]; DKIM_TRACE(0.00)[caffeinated.codes:+,messagingengine.com:+]; MX_GOOD(-0.01)[in2-smtp.messagingengine.com,in1-smtp.messagingengine.com,in2-smtp.messagingengine.com,in1-smtp.messagingengine.com,in2-smtp.messagingengine.com,in1-smtp.messagingengine.com]; NEURAL_HAM_SHORT(-0.68)[-0.676,0]; RCVD_IN_DNSWL_LOW(-0.10)[28.4.111.66.list.dnswl.org : 127.0.5.1]; SUBJECT_ENDS_QUESTION(1.00)[]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.4.0/24, country:US]; IP_SCORE(-0.80)[asn: 11403(-3.90), country: US(-0.09)]; FROM_EQ_ENVFROM(0.00)[] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2018 15:29:23 -0000 Hi, I'm poking around dhclient.conf to see if I can get dnscrypt-proxy to co-exist with captive portals. I've set an alias of 127.0.0.2 to interface lo0 then set dnscrypt-proxy to run on the address. Then I've added the following lines to dhclient.conf: ``` # /etc/dhclient.conf # dnscrypt-proxy2 prepend domain-name-servers 127.0.0.2; # Backups append domain-name-servers 1.1.1.1, 1.0.0.1; ``` I expected the above addition yield the following in resolv.conf: ``` search some-search-domain.com nameserver 127.0.0.2 nameserver [SOME_DHCP_SERVER_SET_DNS_IP1_HERE] nameserver [SOME_DHCP_SERVER_SET_DNS_IP2_HERE] nameserver 1.1.1.1 nameserver 1.0.0.1 ``` However, the actual result is that the dhclient completely ignored the prepend option: ``` search some-search-domain.com nameserver [SOME_DHCP_SERVER_SET_DNS_IP1_HERE] nameserver [SOME_DHCP_SERVER_SET_DNS_IP2_HERE] nameserver 1.1.1.1 nameserver 1.0.0.1 ``` Are the prepend and append options mutually exclusive or are they working in a last-to-appear-wins manner? I couldn't find this behavior being mentioned in any of the man pages. Any lead would be appreciated. Thanks, -- Hyun Hwang