On Dec 15, 2007 2:56 PM, Manuel Kasper <mk at neon1 dot net> wrote:
>
> It's related to the line just above it in the commit message:
>
> "Add support for IPsec tunnels with (possibly dynamic) remote host
> names"
>
> Does that explain what dnswatch is for? :)
>

Oh!  I missed the correlation obviously.  :)

This is cool to see!


> I'm not aware of any problems with "DNS dying" (I assume that means
> the DNS forwarder, as there's not much else DNS-related that could
> possibly die on m0n0wall)...
>

There have been at least a couple posts on the forum within the past
2-3 months claiming this. I'm not sure if the reported issue I saw was
actually that or not. and I'm not sure if it's a legit issue or not, I
figured maybe you ran across something. IIRC the reported problem was
DNS resolution stopped working and hitting Save on the DNS forwarder
page fixed it.  I haven't confirmed that happening.

-Chris