[Dnsmasq-discuss] 2.79 Always return a SERVFAIL

[Simon Kelley]

Let's keep this simple:

Can you query dnsmasq version 2.78 (works) and 2.79 (doesn't work) using
dig, and post the results here. There must be a difference between the
two replies which is provoking the problem.


Cheers,

Simon.





On 23/04/18 14:18, B. Cook wrote:
> Was running a 2.76 machine (debian) made a new machine with 2.79 (alpine). 
> 
> this dnsmasq machine is providing dhcp and dns for those dhcp entries
> and other statically configured entries. 
> 
> the staff is talking to this machine via unbound - I can get graphs with
> unbound. 
> 
> unbound config:
> 
>    local-zone: "pcsd." transparent
> 
>    stub-zone:
>         name: "pcsd"
>         stub-addr: 172.16.254.241
> 
> 254.241 is the dnsmasq machine. with 2.79 dnsmasq serves SERVFAIL with
> 2.76 it does not. 
> 
> dnsmasq.conf:
> conf-file=/etc/dnsmasq.d/dnsmasq.dhcp
> 
> conf-file=/etc/dnsmasq.d/dnsmasq.hosts
> addn-hosts=/etc/dnsmasq.d/hosts
> 
> 
> bind-interfaces
> listen-address=127.0.0.1
> listen-address=172.16.254.241
> port=53
> log-facility=/var/log/dnsmasq.log
> 
> log-queries
> 
> local-ttl=300
> dns-forward-max=8192
> cache-size=0
> 
> user=dnsmasq
> group=nogroup
> 
> no-hosts
> no-negcache
> no-poll
> no-resolv
> server=10.20.0.55
> 
> domain=default.pcsd
> 
> dnsmasq.hosts:
> # vi:syntax=dnsmasq
> 
> local=/pcsd/
> local=/20.10.in-addr.arpa/
> 
> addn-hosts=/etc/dnsmasq.d/hosts
> 
> /etc/dnsmasq.d/hosts:
> 10.20.8.29 server.intdom.pcsd
> 
> 
> 
> Again with 2.76 dnsmasq will serve 'server.intdom.pcsd' with 2.79 it
> returns SERVFAIL from unbound but works with directly queried.. 
> 
> Am I trying to do a recursive query with unbound? 
> 
> Or is dnsmasq not set as authoritative?
> 
> Or am I missing something else?
> 
> I have since put 2.78 on alpine and things are working as expected. 
> 
> Thanks in advance.
> 
> 
> 
> This message may contain confidential information and is intended only
> for the individual(s) named. If you are not an intended recipient you
> are not authorized to disseminate, distribute or copy this e-mail.
> Please notify the sender immediately if you have received this e-mail by
> mistake and delete this e-mail from your system.
> 
> 
> _______________________________________________
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
>