On Sun, 13 Jul 2014, quickbooks office wrote:
DNS over SSL does NOT work - I get no connectivity whatsoever after following the below steps. Tracking bug at https://bugzilla.redhat.com/show_bug.cgi?id=1119050
Can you please tell me what am I doing wrong?
There seems to be some regression with unbound causing packets to go out on port 53 instead of 443 when enabling ssl-upstream. I'm investigating and will run a bisect.
btw to test unbound without using firewall rules of dnssec-trigger, use:
sudo unbound-control forward_add . 80.239.156.220 sudo unbound-control set_option ssl-upstream: yes
This is basically what dnssec-trigger does in the fallback case.
Paul