On Sun, Sep 20, 2015 at 06:04:19PM BST, C.L. Martinez wrote: > Hi all, > > I have installed an openbsd 5.7 VM today to do some tests with pf rules. > One of the components to I need to enable in this gateway is > unbound+dnscrypt-proxy. > > I have configured forwarding in unbound.conf: > > forward-zone: > name: "." > forward-addr: 127.0.0.1@4553 > > And I have started dnscypt-proxy with the following arguments: > > -d --user=_dnscrypt-proxy -a 127.0.0.1:4553 -R dnscrypt.eu-nl -p > /var/run/dnscrypt-proxy.pid > > Output: > > 32032 ?? Is 0:00.00 /usr/sbin/ftp-proxy -m 25 > 32411 ?? Is 0:00.00 /usr/local/sbin/dnscrypt-proxy -d > --user=_dnscrypt-proxy -a 127.0.0.1:4553 -R dnscrypt.eu-nl -p > /var/run/dnscrypt-proxy.pid > 5667 ?? I 0:00.03 /usr/local/sbin/dnscrypt-proxy -d > --user=_dnscrypt-proxy -a 127.0.0.1:4553 -R dnscrypt.eu-nl -p > /var/run/dnscrypt-proxy.pid > 1256 ?? Is 0:00.00 /usr/sbin/cron > 17818 ?? Ss 0:00.12 sshd: root@ttyp0 (sshd) > 527 ?? Is 0:00.05 unbound -c /var/unbound/etc/unbound.conf > 30164 p0 Ss 0:00.02 -ksh (ksh) > 7382 p0 R+ 0:00.00 ps -xa > 16881 C0 Is+ 0:00.00 /usr/libexec/getty std.9600 ttyC0 > 3047 C1 Is+ 0:00.00 /usr/libexec/getty std.9600 ttyC1 > > And it doesn't works. But if I change unbound's forward section to: > > forward-zone: > name: "." > #forward-addr: 127.0.0.1@4553 > forward-addr: 8.8.8.8 > > Works ok. Removing all forward seciton, unbound works ok also. Then, I am > doing something wrong but I don't know which. > > Any idea??
dnscypt-proxy, being a package daemon, is started *after* unbound (base early daemon)? Raf