Knot resolver disable port 853

I expect your IPv6 doesn’t normally work. For some reason the resolver gets stuck trying IPv6 addresses all the time without touching IPv4 (your config is TLS-forwarding to Google’s public DNS).

Workaround for now should be fixing your IPv6 :slight_smile: or editing /etc/config/resolver, in section config resolver 'common' override option net_ipv6 '1' to zero. Another way would be to uncheck forwarding (DNS tab in (re)Foris); that mode should have improved detection of IPv6 brokenness.


@pepe: FYI, I suspect this is a regression in kresd 5.3.0 (HBK+ ATM); we’ll be looking into it upstream.