From owner-freebsd-questions@freebsd.org Tue Oct 6 09:42:42 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D64CC9D0CE9 for ; Tue, 6 Oct 2015 09:42:42 +0000 (UTC) (envelope-from trond@fagskolen.gjovik.no) Received: from smtp.fagskolen.gjovik.no (smtp.fagskolen.gjovik.no [IPv6:2001:700:1100:1:200:ff:fe00:b]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.fagskolen.gjovik.no", Issuer "Fagskolen i Gj??vik" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 676FCECC for ; Tue, 6 Oct 2015 09:42:41 +0000 (UTC) (envelope-from trond@fagskolen.gjovik.no) Received: from mail.fig.ol.no (localhost [127.0.0.1]) by mail.fig.ol.no (8.15.2/8.15.2) with ESMTPS id t969gUHR099509 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Tue, 6 Oct 2015 11:42:31 +0200 (CEST) (envelope-from trond@fagskolen.gjovik.no) Received: from localhost (trond@localhost) by mail.fig.ol.no (8.15.2/8.15.2/Submit) with ESMTP id t969gUK3099506; Tue, 6 Oct 2015 11:42:30 +0200 (CEST) (envelope-from trond@fagskolen.gjovik.no) X-Authentication-Warning: mail.fig.ol.no: trond owned process doing -bs Date: Tue, 6 Oct 2015 11:42:30 +0200 (CEST) From: =?ISO-8859-1?Q?Trond_Endrest=F8l?= Sender: Trond.Endrestol@fagskolen.gjovik.no To: Niklaas Baudet von Gersdorff cc: "William A. Mahaffey III" , FreeBSD questions Subject: Re: IPv6 only Jails cannot connect to the outside world In-Reply-To: <5612E192.6040404@kulturflatrate.net> Message-ID: References: <5611AFCA.4010909@kulturflatrate.net> <5611CA44.4030602@radel.com> <56123260.1010901@kulturflatrate.net> <56127D73.5040001@hiwaay.net> <5612E192.6040404@kulturflatrate.net> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) Organization: Fagskolen Innlandet OpenPGP: url=http://fig.ol.no/~trond/trond.key MIME-Version: 1.0 Content-ID: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED, AWL autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mail.fig.ol.no Content-Type: text/plain; CHARSET=ISO-8859-1 Content-Transfer-Encoding: 8BIT X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 09:42:43 -0000 On Mon, 5 Oct 2015 22:46+0200, Niklaas Baudet von Gersdorff wrote: > On 05/10/15 15:37, William A. Mahaffey III wrote: > > On 10/05/15 03:24, Niklaas Baudet von Gersdorff wrote: > >> Probably I'm missing something. > >> > > > > I thought you were limited to a small number of entries in resolv.conf, > > 3 by default (in my man page). If so, the 3 IPv4 entries were all that > > were searched when they were there & it never got to the IPv6 > > nameservers. $0.02, no more, no less .... > > Just for completeness: > > You're right, as Herbert mentioned in his previous email (attached). > > By moving the IPv6 name servers up I could solve the issue. > > I wasn't aware of the fact that one is limited to three entries. You could run local_unbound in each jail, point /etc/resolv.conf to 127.0.0.1 or ::1, and have unbound forward each query to as many resolvers as you like. Or use dns/bind910 if you prefer that one. -- +-------------------------------+------------------------------------+ | Vennlig hilsen, | Best regards, | | Trond Endrestøl, | Trond Endrestøl, | | IT-ansvarlig, | System administrator, | | Fagskolen Innlandet, | Gjøvik Technical College, Norway, | | tlf. mob. 952 62 567, | Cellular...: +47 952 62 567, | | sentralbord 61 14 54 00. | Switchboard: +47 61 14 54 00. | +-------------------------------+------------------------------------+ From owner-freebsd-questions@freebsd.org Tue Oct 6 09:51:55 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D66149B65FD for ; Tue, 6 Oct 2015 09:51:55 +0000 (UTC) (envelope-from niklaas@kulturflatrate.net) Received: from mail2.kulturflatrate.net (mail2.kulturflatrate.net [IPv6:2a01:4f8:121:52ad::3:1]) by mx1.freebsd.org (Postfix) with ESMTP id 95C28916 for ; Tue, 6 Oct 2015 09:51:55 +0000 (UTC) (envelope-from niklaas@kulturflatrate.net) Received: from [10.0.0.38] (mail.kulturflatrate.net [IPv6:2a01:488:66:1000:2ea3:77dd:0:1]) (Authenticated sender: niklaas@kulturflatrate.net) by mail2.kulturflatrate.net (Postfix) with ESMTPSA id A3EA52DC50; Tue, 6 Oct 2015 11:51:52 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kulturflatrate.net; s=default; t=1444125112; bh=LhZBn6eMK/BFLzXdjeo6zDwC7Vw2nprlGCS9oDx1hKY=; h=Subject:To:References:Cc:From:Date:In-Reply-To; b=P0zbkPEBx6Z+XA0ipaorn0YVkaiT4z3rLOQcbE85dXMxPZXgUdKPddiWSaTfz6aIA m0tsJVL/BYhquqktHH+WZKrixiYEM4hnegbCNPWAE42eSXbrqup2mwFfTR251qSbKo z+iRu8SbYnr2ZR/EMerVgnm/6CVJxy63adgBLQT0= Subject: Re: IPv6 only Jails cannot connect to the outside world To: =?UTF-8?Q?Trond_Endrest=c3=b8l?= References: <5611AFCA.4010909@kulturflatrate.net> <5611CA44.4030602@radel.com> <56123260.1010901@kulturflatrate.net> <56127D73.5040001@hiwaay.net> <5612E192.6040404@kulturflatrate.net> Cc: FreeBSD questions From: Niklaas Baudet von Gersdorff Message-ID: <56139A43.9010904@kulturflatrate.net> Date: Tue, 6 Oct 2015 11:54:11 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 09:51:55 -0000 On 06/10/15 11:42, Trond Endrestøl wrote: > You could run local_unbound in each jail, point /etc/resolv.conf to > 127.0.0.1 or ::1, and have unbound forward each query to as many > resolvers as you like. Or use dns/bind910 if you prefer that one. Thank you for pointing that out. I am not very much into DNS resolving yet; but I already put your advice on my "further reading" list. Would you recommend either of them? -- Niklaas