Had to revert to 16.2 due to WireGard not starting. It looked like Current Endpoint could not retrieve static DNS entries. Looking in the cache table the IP was present for the static DNS entry.
Yeah, it looks like the people who managed the “refactored DNS service internal processes” didn’t carry out the most basic tests. It makes me wonder if they’re even conducting CI/CD pipeline test automation at all..
I would have cheered when the changelog line was “changed DNS resolver to unbound” but unfortunately that does not seem to be what is happening…
That resolver includes an elaborate regression test set and -tool in the source code. Those guys know why that is important for DNS resolvers…
I am assuming that the mDNS feature requires that the Firewall allows inbound on all the relevant interfaces for udp port 5353 for IP packets addressed even if addressed to 224.0.0.251 ?
In other words, you’re dropping support for RFC 3056. Because that needs unspecified remote address. Is it intentional?
I know that the whole thing is not very popular. Accompanied RFC 3068 is even deprecated. I’m probably one of the few who still use it (not with v7, because attempting to do so crashes it; SUP-97719). I’ll (have to) survive without it, but I was hoping that you would eventually fix it, since you broke it (it works fine in Linux), and it might still be useful for someone.
Static DNS querying will be fixed in the upcoming RouterOS beta release. Please remember - this is beta. Released for testing new features and fixes. Some services might not work properly, and these version should not be used on important routers. As for the DoH - we are looking into this and will update later on.
In IPv6 my VLANs no longer show up dynamically under ND - only the bridge. Do I need to add them manually and the global addresses and routes? I moved from 7.15.2 stable to 7.16beta3.
Dear MikroTik team, please do not take this negatively. This is well-intentioned advice. There is a quote that even beta releases are tested by thousands of automated tests (http://forum.mikrotik.com/t/qa-of-software-releases/176605/1). Then a beta version appears with a DoH that cannot work at all - due to a dead-lock situation (static DNS entries are ignored, but DoH domains must be resolved to IP). No one tested this - not even manually. And it is not that a bug occurred somewhere one would say: “woah, that is pretty weird that this change broke unrelated functionality X”. No, the feature in changelog itself was not working as intended. It would be so wise and positive to cover new features with corresponding tests! Software quality would increase dramatically! It is clear that it is almost impossible to retrospectively cover an entire ROS with automated tests; with all possible configuration options, it would be an absurd amount of effort, and probably not all cases would be covered still. But as mentioned: when adding new features, it is certainly advisable to have the basic functionality of the feature covered by a few tests.
This is a beta version, not a production version.
Using beta in production are just asking for trouble.
If you have error, report it and it many be fixed.
Yeah sure, but bugs in the DNS resolver are often complex and difficult to hunt down, I have already wasted way too much time on them.
I already made a mental note: skip 7.16 upgrades until at least 7.16.2 is released…
Yes that’s correct. If your firewall drops the udp multicasts on the input chain, the mDNS proxy will not see the traffic and thus does not repeat anything.