<HTML dir=ltr><HEAD><TITLE>Re: [Dnsmasq-discuss] server forwarding all traffic to parents after a successful PTR query of itself</TITLE>
<META http-equiv=Content-Type content="text/html; charset=unicode">
<META content="MSHTML 6.00.2900.5726" name=GENERATOR></HEAD>
<BODY>
<DIV id=idOWAReplyText63973 dir=ltr>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>Hi Simon,</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>2.47</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Cheers,</FONT></DIV>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2></FONT> </DIV></DIV>
<DIV id=idSignature16193 dir=ltr>
<DIV><FONT face=Arial color=#000000 size=2>
<DIV>
<DIV><FONT face=Arial size=2><STRONG>Alberto Cuesta-Canada</STRONG></FONT></DIV></DIV>
<DIV><FONT face=Arial size=1>GaaS Team Lead</FONT></DIV>
<DIV><FONT face=Arial size=1>Excelian Ltd.</FONT></DIV>
<DIV><FONT face=Arial size=1>+44 (0) 7942633361</FONT></DIV></FONT></DIV></DIV>
<DIV dir=ltr><BR>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> Simon Kelley [mailto:simon@thekelleys.org.uk]<BR><B>Sent:</B> Wed 17/02/2010 09:46<BR><B>To:</B> Alberto Cuesta-Canada<BR><B>Cc:</B> dnsmasq-discuss@lists.thekelleys.org.uk; Grid Support<BR><B>Subject:</B> Re: [Dnsmasq-discuss] server forwarding all traffic to parents after a successful PTR query of itself<BR></FONT><BR></DIV>
<DIV>
<P><FONT size=2>Alberto Cuesta-Canada wrote:<BR>> Hi guys,<BR>> <BR>> I saw a weird scenario in one of our dnsmasq servers yesterday. As the<BR>> logs below show, the server was all happy doing its thing, until a set<BR>> of PTR queries came from normal servers in our network. The last of it<BR>> would ask for the hostname of the dns server giving the IP, and from<BR>> that point dnsmasq would route all traffic to the parents. Restarting<BR>> the dnsmasq service would restore the server to normal operations. This<BR>> has happened 4 times in the last 10 days, always with the same pattern.<BR>> <BR>><BR>> Feb 17 01:35:51 dnsmasq[28538]: query[A] grdvpm3.dselgrid.local from<BR>> 172.30.158.98<BR>><BR>> Feb 17 01:35:51 dnsmasq[28538]: /etc/hosts grdvpm3.dselgrid.local is<BR>> 172.30.158.93<BR>><BR>> Feb 17 01:35:51 dnsmasq[28538]: query[PTR] 93.158.30.172.in-addr.arpa<BR>> from 172.30.158.98<BR>><BR>> Feb 17 01:35:51 dnsmasq[28538]: /etc/hosts 172.30.158.93 is<BR>> grdvpm3.dselgrid.local<BR>><BR>> Feb 17 01:35:51 dnsmasq[28538]: query[A] grdvpm3.dselgrid.local from<BR>> 172.30.158.98<BR>><BR>> Feb 17 01:35:51 dnsmasq[28538]: /etc/hosts grdvpm3.dselgrid.local is<BR>> 172.30.158.93<BR>><BR>> Feb 17 01:37:16 dnsmasq[28538]: query[MX] smtpmail.daiwaeurope.local<BR>> from 127.0.0.1<BR>><BR>> Feb 17 01:37:16 dnsmasq[28538]: forwarded smtpmail.daiwaeurope.local to<BR>> 172.30.48.192<BR>><BR>> Feb 17 01:37:16 dnsmasq[28538]: query[MX] vsmtpmail.daiwaeurope.local<BR>> from 127.0.0.1<BR>><BR>> Feb 17 01:37:16 dnsmasq[28538]: forwarded vsmtpmail.daiwaeurope.local to<BR>> 172.30.48.192<BR>><BR>> Feb 17 01:37:16 dnsmasq[28538]: query[A] smtpmail.daiwaeurope.local from<BR>> 127.0.0.1<BR>><BR>> Feb 17 01:37:16 dnsmasq[28538]: forwarded smtpmail.daiwaeurope.local to<BR>> 172.30.48.192<BR>><BR>> Feb 17 01:37:16 dnsmasq[28538]: reply smtpmail.daiwaeurope.local is <CNAME><BR>><BR>> Feb 17 01:37:16 dnsmasq[28538]: reply vsmtpmail.daiwaeurope.local is<BR>> 172.30.19.221<BR>><BR>> Feb 17 01:37:52 dnsmasq[28538]: query[PTR] 250.158.30.172.in-addr.arpa<BR>> from 172.30.158.94<BR>><BR>> Feb 17 01:37:52 dnsmasq[28538]: /etc/hosts 172.30.158.250 is<BR>> grdxk-mgmt1.dselgrid.local<BR>><BR>> Feb 17 01:37:52 dnsmasq[28538]: forwarded query to 172.30.48.192<BR>><BR>> Feb 17 01:37:52 dnsmasq[28538]: forwarded query to 172.30.48.192<BR>><BR>> Feb 17 01:37:52 dnsmasq[28538]: forwarded query to 172.30.48.192<BR>><BR>> Feb 17 01:37:52 dnsmasq[28538]: forwarded query to 172.30.48.192<BR>><BR>> Feb 17 01:37:52 dnsmasq[28538]: forwarded query to 172.30.48.192<BR>><BR>> Any idea what would be going on? Is that PTR query a signal that some<BR>> other service could be asking the DNS server to stop reading the hosts file?<BR>> <BR><BR>Which version of dnsmasq are you using?<BR><BR>Simon.<BR></FONT></P></DIV><BR>
The information contained in this email and any attached files are confidential and intended solely for the addressee(s). The email may be legally privileged or prohibited from disclosure and unauthorised use. If you are not the named addressee you may not use, copy, or disclose this information to any other person. If you received this message in error please notify the sender immediately and delete it from your system. <BR>
<BR>
Any opinion or views contained in this email message are those of the sender, and do not represent those of the Company in any way and reliance should not be placed upon its contents. Unless otherwise stated, this email message is not intended to be contractually binding. Where an Agreement exists between our respective companies and there is conflict between the contents of this email message and the Agreement then the terms of that Agreement shall prevail.<BR>
<BR>
Excelian<BR>
50 Featherstone Street<BR>
London<BR>
EC1Y 8RT<BR>
Tel: +44 (0) 20 7336 9595<BR>
Fax: +44 (0) 20 7336 9596<BR>
www.Excelian.com<BR>
_____________________________________________________________________<BR>
This e-mail has been scanned for viruses by MessageLabs. For further information visit http://www.messagelabs.com<BR>
<BR>
Excelian subscribes to cleaner and greener methods of working. Help take responsibility for the environment. Please don't print this email unless you absolutely have to.<BR>
</BODY></HTML>