Re: ISP's router being helpful

mick.crane wrote: > > Things seem to be working normally. This started as I wondered why I got a > captcha page with cloudflare in the browser address bar the first time after > changing the ISP router. > I think I see what this Doh is about and will fiddle about with the options. > https://docs.

Re: ISP's router being helpful

On 2025-01-23 16:49, Max Nikulin wrote: On 23/01/2025 16:42, mick.crane wrote: Selected "OS default DNS ( when available)", as selecting the pfsense pc by address for this DoH was not accepted. I believe pfsense creates a DNS cache and wondered if pfsense can be configured to do DoH. Was curio

Re: ISP's router being helpful

On 23/01/2025 16:42, mick.crane wrote: Selected "OS default DNS ( when available)", as selecting the pfsense pc by address for this DoH was not accepted. I believe pfsense creates a DNS cache and wondered if pfsense can be configured to do DoH. Was curious where requests were going. I do not

Re: ISP's router being helpful

On Thu, 23 Jan 2025 10:03:09 +0700 Max Nikulin wrote: > > You do not need to recompile Firefox. You can even set IP of your DoH > provider to avoid querying local DNS to resolve provider's hostname: > JFTR: it looks like Chromium offers some

Re: ISP's router being helpful

On 2025-01-23 03:03, Max Nikulin wrote: Mick, I am confused if you have solved you issue since you mentioned that you found DoH setting in Vivaldi, but asked concerning DNS debugging. I'm still considering a variant that the issue caused by the new router, not by a browser update. I mentione

Re: ISP's router being helpful

On 22/01/2025 20:30, Frank Guthausen wrote: On Wed, 22 Jan 2025 12:42:20 +0100 wrote: On Wed, Jan 22, 2025 at 12:34:20PM +0100, Frank Guthausen wrote: [...] DoH can circumvent manipulation by the ISP [...] It just replaces one bully by another bully. I won't bet on Google not manipulating i

Re: ISP's router being helpful

On 2025-01-22 13:50, to...@tuxteam.de wrote: On Wed, Jan 22, 2025 at 01:26:23PM +, mick.crane wrote: Would traceroute show any DNS queries? That's what tcpdump/wireshark are for. Eeeek!

Re: ISP's router being helpful

On Wed, Jan 22, 2025 at 02:30:58PM +0100, Frank Guthausen wrote: > On Wed, 22 Jan 2025 12:42:20 +0100 > wrote: > > On Wed, Jan 22, 2025 at 12:34:20PM +0100, Frank Guthausen wrote: > > > > > > [...] DoH can circumvent manipulation by the ISP [...] > > > > It just replaces one bully by another bul

Re: ISP's router being helpful

On Wed, Jan 22, 2025 at 01:26:23PM +, mick.crane wrote: > On 2025-01-22 13:08, Joe wrote: > > > > When Verizon started doing that, I switched to OpenDNS. I also use > > > Google's DNS on occasion. > > > > > > > An example: > > > > https://uk.linkedin.com/company/barefruit > > When I select

Re: ISP's router being helpful

On Wed, 22 Jan 2025 12:42:20 +0100 wrote: > On Wed, Jan 22, 2025 at 12:34:20PM +0100, Frank Guthausen wrote: > > > > [...] DoH can circumvent manipulation by the ISP [...] > > It just replaces one bully by another bully. I won't bet on Google not > manipulating its DoH lookups once that starts i

Re: ISP's router being helpful

On 2025-01-22 13:08, Joe wrote: When Verizon started doing that, I switched to OpenDNS. I also use Google's DNS on occasion. An example: https://uk.linkedin.com/company/barefruit When I selected cloudflair as DNS provider in chrome:settings/security Going to https://chat.openai.com cloudfl

Re: ISP's router being helpful

to...@tuxteam.de wrote: > [-- text/plain, encoding quoted-printable, charset: utf-8, 37 lines --] > > On Wed, Jan 22, 2025 at 10:46:16AM +, Chris Green wrote: > > to...@tuxteam.de wrote: > > [...] > > > > I somehow have got the feeling that we are talking about completely > > > different thi

Re: ISP's router being helpful

On Wed, 22 Jan 2025 07:16:07 -0500 Jeffrey Walton wrote: > On Wed, Jan 22, 2025 at 6:35 AM Frank Guthausen > wrote: > > > > On Wed, 22 Jan 2025 10:46:16 + > > Chris Green wrote: > > > > > > How can it do that in reality? It's connecting to the outside > > > world via the router. It would

Re: ISP's router being helpful

On Wed, Jan 22, 2025 at 6:35 AM Frank Guthausen wrote: > > On Wed, 22 Jan 2025 10:46:16 + > Chris Green wrote: > > > > How can it do that in reality? It's connecting to the outside world > > via the router. It would have to 'tunnel' through the router somehow > > wouldn't it as otherwise the

Re: ISP's router being helpful

On Wed, Jan 22, 2025 at 12:34:20PM +0100, Frank Guthausen wrote: [...] > Yes, the protocol used here is DoH or ``DNS over HTTPS''[1] which is > specified in RFC 8484[2]. This is a bypass for local network settings > which might not allow to ask external DNS servers as in the example > above. Sinc

Re: ISP's router being helpful

On Wed, 22 Jan 2025 10:46:16 + Chris Green wrote: > > How can it do that in reality? It's connecting to the outside world > via the router. It would have to 'tunnel' through the router somehow > wouldn't it as otherwise the router will 'see' any attempts to do DNS > type things. You can ask

Re: ISP's router being helpful

On Wed, Jan 22, 2025 at 10:46:16AM +, Chris Green wrote: > to...@tuxteam.de wrote: [...] > > I somehow have got the feeling that we are talking about completely > > different things. DoH has absolutely nothing to do with your router's > > (or any other local network's, or your provider's) DNS

Re: ISP's router being helpful

to...@tuxteam.de wrote: > [-- text/plain, encoding quoted-printable, charset: utf-8, 34 lines --] > > On Wed, Jan 22, 2025 at 09:45:55AM +, Chris Green wrote: > > to...@tuxteam.de wrote: > > > [-- text/plain, encoding quoted-printable, charset: utf-8, 29 lines --] > > > > > > On Wed, Jan 22,

Re: ISP's router being helpful

On Wed, Jan 22, 2025 at 09:45:55AM +, Chris Green wrote: > to...@tuxteam.de wrote: > > [-- text/plain, encoding quoted-printable, charset: utf-8, 29 lines --] > > > > On Wed, Jan 22, 2025 at 09:48:30AM +0700, Max Nikulin wrote: [...] > > > At least cloudflare and google do not resolve the ho

Re: ISP's router being helpful

to...@tuxteam.de wrote: > [-- text/plain, encoding quoted-printable, charset: utf-8, 29 lines --] > > On Wed, Jan 22, 2025 at 09:48:30AM +0700, Max Nikulin wrote: > > On 21/01/2025 23:31, to...@tuxteam.de wrote: > > > On Tue, Jan 21, 2025 at 10:38:51PM +0700, Max Nikulin wrote: > > > > On 19/01/20

Re: ISP's router being helpful

On Wed, Jan 22, 2025 at 09:48:30AM +0700, Max Nikulin wrote: > On 21/01/2025 23:31, to...@tuxteam.de wrote: > > On Tue, Jan 21, 2025 at 10:38:51PM +0700, Max Nikulin wrote: > > > On 19/01/2025 17:21, mick.crane wrote: > > > > The other day changed the ISP's (Sky) router to have fibre connection. >

Re: ISP's router being helpful

On 2025-01-21 21:34, George at Clug wrote: To set a custom DNS server in Vivaldi, you can do the following: Open the Vivaldi menu Select Settings Select Privacy and Security Select Use secure DNS Select Custom Enter the URL of your preferred DNS provider Seems this opt

Re: ISP's router being helpful

On 21/01/2025 23:31, to...@tuxteam.de wrote: On Tue, Jan 21, 2025 at 10:38:51PM +0700, Max Nikulin wrote: On 19/01/2025 17:21, mick.crane wrote: The other day changed the ISP's (Sky) router to have fibre connection. Maybe the previous router was configured to serve .home DNS zone. Judging by

Re: ISP's router being helpful

On Wednesday, 22-01-2025 at 02:13 to...@tuxteam.de wrote: > On Tue, Jan 21, 2025 at 07:17:53AM -0500, Greg Wooledge wrote: > > [...] > > > E.g. > > Ah, oh -- I overlooked (or forgot) that OP's brower is Vivaldi. https://help.vivaldi

Re: ISP's router being helpful

On Tue, Jan 21, 2025 at 10:38:51PM +0700, Max Nikulin wrote: > On 19/01/2025 17:21, mick.crane wrote: > > The other day changed the ISP's (Sky) router to have fibre connection. > > Maybe the previous router was configured to serve .home DNS zone. Judging by the other symptoms (ping working, brows

Re: ISP's router being helpful

On 19/01/2025 17:21, mick.crane wrote: The other day changed the ISP's (Sky) router to have fibre connection. Maybe the previous router was configured to serve .home DNS zone. If vivaldi uses the same settings page as chromium than you may try to disable "secure DNS" chrome://settings/secur

Re: ISP's router being helpful

On Tue, Jan 21, 2025 at 07:17:53AM -0500, Greg Wooledge wrote: [...] > E.g. Ah, oh -- I overlooked (or forgot) that OP's brower is Vivaldi. Cheers -- t signature.asc Description: PGP signature

Re: ISP's router being helpful

On Tue, Jan 21, 2025 at 10:44:22AM +, mick.crane wrote: > On 2025-01-21 08:41, to...@tuxteam.de wrote: > > > - is the host name you use internally for your Roundcube in > > that URL? Or something else? I guess it's the first > > - if yes: what happens if you ping that host name from exactl

Re: ISP's router being helpful

mick.crane wrote: > On 2025-01-21 08:41, to...@tuxteam.de wrote: > > Not quite sure what is meant by that. The link is > http://rapunzel.home/roundcubemail > Are you supposed to be able to ping a service? > > mick@courgette:~$ ping http://rapunzel.home/roundcubemail > ping: http://rapunzel.home/

Re: ISP's router being helpful

On Tue, Jan 21, 2025 at 10:44:22 +, mick.crane wrote: > On 2025-01-21 08:41, to...@tuxteam.de wrote: > > If the ping complains that it can't resolve the name, the problem > > is in your resolver setup. If it can, I'd look for the DoH (DNS- > > over-http) settings of your browser. > mick@courge

Re: ISP's router being helpful

On 2025-01-21 08:41, to...@tuxteam.de wrote: - is the host name you use internally for your Roundcube in that URL? Or something else? I guess it's the first - if yes: what happens if you ping that host name from exactly the same box your browser runs in? If the ping complains that it can'

Re: ISP's router being helpful

On Mon, Jan 20, 2025 at 10:03:23PM +, mick.crane wrote: > On 2025-01-19 13:58, to...@tuxteam.de wrote: > > On Sun, Jan 19, 2025 at 12:53:20PM +, mick.crane wrote: > > > On 2025-01-19 12:01, to...@tuxteam.de wrote: > > > > [...] > > > > > OK. I can ping the PC with roundcube on it by name

Re: ISP's router being helpful

On 2025-01-19 13:58, to...@tuxteam.de wrote: On Sun, Jan 19, 2025 at 12:53:20PM +, mick.crane wrote: On 2025-01-19 12:01, to...@tuxteam.de wrote: [...] OK. I can ping the PC with roundcube on it by name but "host " fails to resolve. Aha. This means that your roundcube (whatever name it

Re: ISP's router being helpful

wrote: > On Mon, Jan 20, 2025 at 05:04:16PM +, debian-u...@howorth.org.uk > wrote: > > wrote: > > > On Mon, Jan 20, 2025 at 12:13:09PM +, > > > debian-u...@howorth.org.uk wrote: > > > > > > [...] > > > > > > > I just use IP addresses for local web services, so I can use > > > > DOH

Re: ISP's router being helpful

On Mon, Jan 20, 2025 at 05:04:16PM +, debian-u...@howorth.org.uk wrote: > wrote: > > On Mon, Jan 20, 2025 at 12:13:09PM +, debian-u...@howorth.org.uk > > wrote: > > > > [...] > > > > > I just use IP addresses for local web services, so I can use DOH in > > > my browser. > > > > I'm at

Re: ISP's router being helpful

wrote: > On Mon, Jan 20, 2025 at 12:13:09PM +, debian-u...@howorth.org.uk > wrote: > > [...] > > > I just use IP addresses for local web services, so I can use DOH in > > my browser. > > I'm at a loss why somebody would want to do that (although I pretty > well know why Google wants every

Re: ISP's router being helpful

On Mon, Jan 20, 2025 at 12:13:09PM +, debian-u...@howorth.org.uk wrote: [...] > I just use IP addresses for local web services, so I can use DOH in my > browser. I'm at a loss why somebody would want to do that (although I pretty well know why Google wants everyone to). But to each their ow

Re: ISP's router being helpful

On Mon, Jan 20, 2025 at 08:36:11AM +1100, George at Clug wrote: > I had forgotten to mention about "DNS over HTTPS", which besides encrypting > DNS traffic, usually use a trusted Internet based DNS service, instead of > local DNS settings. But I mentioned it. It brought us a lot of fun at $WORKP

Re: ISP's router being helpful

George at Clug wrote: > I had forgotten to mention about "DNS over HTTPS", which besides > encrypting DNS traffic, usually use a trusted Internet based DNS > service, instead of local DNS settings. > > https://support.mozilla.org/en-US/kb/dns-over-https > > This maybe why your web browser does n

Re: ISP's router being helpful

On 2025-01-19 21:36, George at Clug wrote: I had forgotten to mention about "DNS over HTTPS", which besides encrypting DNS traffic, usually use a trusted Internet based DNS service, instead of local DNS settings. https://support.mozilla.org/en-US/kb/dns-over-https This maybe why your web brow

Re: ISP's router being helpful

I had forgotten to mention about "DNS over HTTPS", which besides encrypting DNS traffic, usually use a trusted Internet based DNS service, instead of local DNS settings. https://support.mozilla.org/en-US/kb/dns-over-https This maybe why your web browser does not know about local domain names.

Re: ISP's router being helpful

On Sun, Jan 19, 2025 at 10:51:58AM -0600, Nicholas Geovanis wrote: > On Sun, Jan 19, 2025, 7:58 AM wrote: > > > > > [0] This is part of the libc and (roughly) translates host names to > >IP addresses for the programs running in your box. Eventually, > >it goes out to ask some DNS ser

Re: ISP's router being helpful

On Sun, Jan 19, 2025, 7:58 AM wrote: > > [0] This is part of the libc and (roughly) translates host names to >IP addresses for the programs running in your box. Eventually, >it goes out to ask some DNS servers. > Along the way it's (probably) consulting /etc/resolv.conf which is whe

Re: ISP's router being helpful

On Sun, Jan 19, 2025 at 12:53:20PM +, mick.crane wrote: > On 2025-01-19 12:01, to...@tuxteam.de wrote: [...] > OK. I can ping the PC with roundcube on it by name but "host > " fails to resolve. Aha. This means that your roundcube (whatever name it has, you didn't tell us yet :) is probably i

Re: ISP's router being helpful

If everything you want to do is internal, maybe you can use PFSence's DNS settings? https://docs.netgate.com/pfsense/en/latest/services/dhcp/ipv4.html Server Options DNS Servers: Defines up to four DNS server IP addresses which the server provides to clients. To use custom DNS Servers instead

Re: ISP's router being helpful

On 2025-01-19 12:01, to...@tuxteam.de wrote: On Sun, Jan 19, 2025 at 10:21:45AM +, mick.crane wrote: Hi, Obviously I don't understand the internet and don't know what I'm doing. Honestly. Who does, these days? The other day changed the ISP's (Sky) router to have fibre connection. I have

Re: ISP's router being helpful

On Sun, Jan 19, 2025 at 7:02 AM wrote: > On Sun, Jan 19, 2025 at 10:21:45AM +, mick.crane wrote: > > Hi, > > Obviously I don't understand the internet and don't know what I'm doing. > > Honestly. Who does, these days? > > > The other day changed the ISP's (Sky) router to have fibre connection

Re: ISP's router being helpful

On Sun, Jan 19, 2025 at 10:21:45AM +, mick.crane wrote: > Hi, > Obviously I don't understand the internet and don't know what I'm doing. Honestly. Who does, these days? > The other day changed the ISP's (Sky) router to have fibre connection. > I have a PC with apache2 presenting an index.html

Re: ISP's router being helpful

If everything you want to do is internal, maybe you can use PFSence's DNS settings? https://docs.netgate.com/pfsense/en/latest/services/dhcp/ipv4.html Server Options DNS Servers: Defines up to four DNS server IP addresses which the server provides to clients. To use custom DNS Servers instead

ISP's router being helpful

Hi, Obviously I don't understand the internet and don't know what I'm doing. The other day changed the ISP's (Sky) router to have fibre connection. I have a PC with apache2 presenting an index.html which is a page of links to various documents and websites. The link to e.g. the BBC works fine but