[Dnsmasq-discuss] DNSSEC enabled dnsmasq dies very quickly

e9hack e9hack at gmail.com
Sun Jan 26 22:47:03 GMT 2014


Hi,

for testing purpose, I compile dnsmasq with option -DHAVE_DNSSEC. After a few name
queries, dnsmasq dies. In the example, I start firefox on Windows 7. After a few queries,
dnsmasq isn't longer running:

Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[A] secure.informaction.com from
192.168.100.2
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded secure.informaction.com to
192.168.26.1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded secure.informaction.com to
8.8.8.8
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded secure.informaction.com to
2001:4860:4860::8888
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded secure.informaction.com to
fe80::1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply secure.informaction.com is
69.195.141.179
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[AAAA] secure.informaction.com
from 192.168.100.2
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded secure.informaction.com to
192.168.26.1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply secure.informaction.com is
NODATA-IPv6
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[A] ocsp.godaddy.com from
192.168.100.2
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded ocsp.godaddy.com to 192.168.26.1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply ocsp.godaddy.com is <CNAME>
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply ocsp.godaddy.com.akadns.net is
188.121.36.239
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[AAAA] ocsp.godaddy.com from
192.168.100.2
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: cached ocsp.godaddy.com is <CNAME>
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded ocsp.godaddy.com to 192.168.26.1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply ocsp.godaddy.com is <CNAME>
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply ocsp.godaddy.com.akadns.net is
NODATA-IPv6

My test setup is a carambola box with the current trunk of OpenWRT. If I compile it
without -DHAVE_DNSSEC, it runs perfectly.

Regards,
Hartmut



More information about the Dnsmasq-discuss mailing list