Re: help wanted, standing up mirroring sync proxies on public cloud

[Julien Cristau <jcristau@debian.org>]

Hi Bastian,

I haven't been able to get connections to the host working again after
the dhcp issues, can we maybe start over, using debian 11, and if
possible some form of OOB access?

Thanks,
Julien

On Mon, Mar 13, 2023 at 08:58:15 +0100, Bastian Blank wrote:

> On Sat, Mar 11, 2023 at 12:43:52PM +0100, Julien Cristau wrote:
> > I finally got around to the initial setup.  A couple of things so far:
> > - the machine is running bookworm; that's going to cause extra work
> >   initially.  I'll give it a try anyway, since it's essentially work
> >   we'll need to do regardless, but it came as a surprise.
> 
> My mail stated Debian 12.
> 
> > - can you allow outbound dns in the firewall rules?  The provided resolver
> >   doesn't look like it supports dnssec.
> 
> Yeah, found that out now.  Will allow DNS.  Also I'll enable DNSSEC
> verification on the resolver, but that will not fix the problem, as it
> still does not act like a full DNSSEC capable resolver, it neither sets
> the AD bit, nor provides RRSIG records to the clients.
> 
> Bastian
> 
> -- 
> If some day we are defeated, well, war has its fortunes, good and bad.
> 		-- Commander Kor, "Errand of Mercy", stardate 3201.7
>