From owner-freebsd-stable@freebsd.org Sun Aug 16 19:27:29 2015 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F406F9BB575 for ; Sun, 16 Aug 2015 19:27:28 +0000 (UTC) (envelope-from ck-lists@cksoft.de) Received: from mx1.cksoft.de (mx1.cksoft.de [IPv6:2001:67c:24f8:1::25:1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx1.cksoft.de", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id AF9C71171 for ; Sun, 16 Aug 2015 19:27:28 +0000 (UTC) (envelope-from ck-lists@cksoft.de) Received: from m.cksoft.de (unknown [IPv6:2a01:170:1110:8001::25:1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.cksoft.de (Postfix) with ESMTPSA id CD36C1E9E6E; Sun, 16 Aug 2015 21:27:26 +0200 (CEST) Received: from amavis.cksoft.de (unknown [IPv6:2a01:170:1110:8001::25:a1]) by m.cksoft.de (Postfix) with ESMTP id 333C662F88; Sun, 16 Aug 2015 21:26:25 +0200 (CEST) X-Virus-Scanned: amavisd-new at cksoft.de Received: from m.cksoft.de ([IPv6:2a01:170:1110:8001::25:1]) by amavis.cksoft.de (amavis.cksoft.de [IPv6:2a01:170:1110:8001::25:a1]) (amavisd-new, port 10041) with ESMTP id MvdMN2KCGNQU; Sun, 16 Aug 2015 21:26:21 +0200 (CEST) Received: from noc1.cksoft.de (noc1.cksoft.de [IPv6:2a01:170:1110:8001::53:1]) by m.cksoft.de (Postfix) with ESMTP id 0F95562ECF; Sun, 16 Aug 2015 21:26:20 +0200 (CEST) Received: by noc1.cksoft.de (Postfix, from userid 1000) id 1B7EA13BC6; Sun, 16 Aug 2015 21:27:22 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by noc1.cksoft.de (Postfix) with ESMTP id 1482513B13; Sun, 16 Aug 2015 21:27:22 +0200 (CEST) Date: Sun, 16 Aug 2015 21:27:22 +0200 (CEST) From: Christian Kratzer X-X-Sender: ck@noc1.cksoft.de Reply-To: Christian Kratzer To: Kimmo Paasiala cc: Kurt Jaeger , "freebsd-stable@freebsd.org" Subject: Re: freebsd-update to 10.2-RELEASE broken ? In-Reply-To: Message-ID: References: <2C3CC22D-749A-4B92-885C-D73311997050@gid.co.uk> <20150816180715.GM40589@home.opsec.eu> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) X-Spammer-Kill-Ratio: 75% MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Aug 2015 19:27:29 -0000 Hi, On Sun, 16 Aug 2015, Kimmo Paasiala wrote: > It could be the classic fall back to TCP on SRV records problem on > your upstream DNS forwarder if you're using one: > > http://lists.freebsd.org/pipermail/freebsd-ports/2012-May/074801.html > > The cure would be to use your own caching DNS resolver (configured to > query the authoritative name servers directly) such as dns/unbound. I run my own bind9 resolvers on freebsd 10 at both sites. I never particurlarly like the concept of an "upstream" resolver. All my resolvers are behind firewalls although different kinds. ASA at one site and freebsd pf at the other. I will investigate though. Thanks for the tip. Greetings Christian -- Christian Kratzer CK Software GmbH Email: ck@cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden Fax: +49 7032 893 997 - 9 HRB 245288, Amtsgericht Stuttgart Mobile: +49 171 1947 843 Geschaeftsfuehrer: Christian Kratzer Web: http://www.cksoft.de/