Topic: Strange DNS issue - can't find some sites

[Randall]

Recently I've notices a strange issue resolving some URLs (SME is running in server-only mode). I've found that I can't access some prominent URLs, such as www.paypal.com or access.redhat.com, although I can access paypal.com and redhat.com. These used to work, and then stopped for inexplicable reason (possibly due to updates - notice bind and djbdns have been updated).

If I disable SME's DHCP and use my router's, I do have access to these sites, though I can't access those I've set up in SME's local hostnames definitions. djbdns looks to be fairly complex. Does anyone have any suggestions as to where to start looking?

Thanks

[brianr]

I think this might be relevant:

https://bugs.contribs.org/show_bug.cgi?id=8362

[guest22]

I would agree with Brian.


For SME Server 9.2 it would be https://bugs.contribs.org/show_bug.cgi?id=10381

[Randall]

Thanks much for the replies.
This does sound relevant, but this is the version I'm currently using (djbdns-1.05-10.el6.sme.x86_64 in currently installed). Ironically, I suspect (but am not sure) that upgrade to this version (from 1.05-8) may have been when this started occurring.

I upgraded from 8.2 about 3 weeks ago (June 30) - prior to that have never had any issue whatsoever (in probably 15 years of using SME). A week later, after updates I did start experiencing issues with backup, though (unrelated - filed bug 10390). I think dns was working ok after fresh install (prior to updates), but access to this site is not that frequent, so maybe just didn't notice.

Thanks
-Randall

[guest22]

your testing results would be appreciated, especially since we are in the middle of things to find out what is going on.

[Randall]

Sure. Just let me know what info I can provide.

-R

[guest22]

Thanks, please submit all your 'strange' findings to the relevant bug, and any methods you try to 'get it right'. The devs are on top of those bugs, but less active on the forums.

[Randall]

Will do. Thought I'd try here first, but will open a bug for it.

-R

[michelandre]

Hi RequestedDeletion,

A friend of mine in France has the same problem with Let's Encrypt as: https://bugs.contribs.org/show_bug.cgi?id=10381.

After an update, Let's Encrypt stopped working: "ERROR: Problem connecting to server (get for http://cert.int-x3.letsencrypt.org/; curl returned with 6)".

- The server was using /etc/letsencrypt... I installed the new one which uses /etc/dehydrated. Not working.
- I brought back to SME certificate.
- I installed the Let's Encrypt contrib and still not working.
- For a test, I changed the IP nameserver in /etc/resolve.conf to 84.200.69.80. (Of course, I will loose this with a reboot). Let's Encrypt started working correctly.

Bug 10381 says "RESOLVED FIXED" but I do not get how to fix it.

Any help appreciated,

Michel-André

[guest22]

As per suggestion of Michael, I have set the SME Server DNS settings (Configure this server) to Google's DNS being 8.8.8.8

After that it worked for me.

HTH

[Stefano]

Be aware that doing so you'd have big issues with dnsbl part (search the forums, I already pointed out it)

[guest22]

So is it safe to say that something is broken?

[Stefano]

sorry, my memory is broken

read here: https://forums.contribs.org/index.php/topic,52003.msg265759.html#msg265759

[michelandre]

Hi all,

As I wrote before, I removed the Let's Encrypt contrib.

While reading a lot of bug related subjects about that problem, I found:
At: https://forums.contribs.org/index.php/topic,53044.0/all.html

« Reply #29 on: May 14, 2017, 10:01:41 AM » by RequestedDeletion
Please make sure you remove everything. Uninstalling the contrib does not remove e.g. db config info e.g. 'config show letsencrypt'

I went back to https://wiki.contribs.org/Letsencrypt to see how to uninstall this contrib. I found nothing about uninstallation contrary to other contribs. I hope it is my error that I did not see the uninstallation lines.

QUESTION:
How do i get rid of:

Code: [Select]

letsencrypt=service
    ACCEPT_TERMS=yes
    configure=none
    email=toto@toto.com
    hookScript=disabled
    status=test

Thank you all,

Michel-André

PS: Special thanks to:
Dan Brown, RequestedDeletion, John Crisp, Stefan Schulz, Jean-Philippe Pialasse, Michael Doerner, Dave Liquorice, and other people...
for their works trying to resolve that problem.

[guest22]

config delete letsencrypt