[Dnsmasq-discuss] dnsmasq using dnscrypt
max at depf.net
Sun Mar 25 22:14:44 BST 2012
dnsmasq (2.60-2 on arch 32bit) is supposed to be listening on 127.0.0.1
127.0.0.2 is a second loopback lo:1 on which dnscrypt is listening on,
to not interfere with dnsmasq.
I got it to work now. Instead of using the "interface" option to define
the devices to listen on (seems to auto include all loopback devices,
though dnsmasq couldn't have actually listened to 127.0.0.2 since it was
already locked by dnscrypt ), I used the 'listen-address' option to
define all the ips of my devices. leaving out 127.0.0.2 obviously.
now dnsmasq stopped complaining and all my dns traffic is nicely
encrypted as it should be. Cheers!
Thanks anyway for your time and maybe this is helpful to someone else
having similar trouble
On 03/25/2012 10:13 PM, Simon Kelley wrote:
> On 24/03/12 23:03, Max wrote:
>> I am running dnsmasq on my router and just installed dnscrypt. It works
>> nicely on the box it self ( I checked using dig and tcpdump). I am
>> running dnscrypt on a second local interface lo:1 at 127.0.0.2
>> Adding the 127.0.0.2 to /etc/resolv.conf or /etc/dnsmasq.conf
>> causes dnsmasq to say
>> ignoring nameserver 127.0.0.2 - local interface
>> I could not find any way to make it accept this one. it always continues
>> to the second nameserver in resolv.conf. If I remove the second one I am
>> left without a dns server.
>> Is there any easy way to make dnsmasq NOT ignore this local nameserver?
> Dnsmasq is convinced that it's listening for DNS requests on 127.0.0.2.
> It therefore won't send requests there, because that would cause a loop,
> which is bad.
> Now something doesn't make sense here, because you say that dnscrypt is
> listening on 127.0.0.2 port 53, so dnsmasq can't be listening there too.
> Could you post you complete dnsmasq config, and maybe the output of
> netstat -ap and ifconfig as well, to give us some more information to
> work on?
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
More information about the Dnsmasq-discuss