I have an issue that's driving me nuts. I have dnsmasq installed and DHCP is working fine. I can make DNS queries over TCP and they work fine. Normal DNS requests over UDP fail if done from a remote machine but succeed if done locally. First thing I did was check the firewall. I have gone so far as to completely remove UFW so that there is no doubt. I can get a reply using nc -u -z 192.168.1.100 53 from a remote machine and dig +tcp <a href="http://www.yahoo.com">www.yahoo.com</a> @serverip also succeeds. <br>
<br>Config file:<br><blockquote style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">domain-needed<br>bogus-priv<br>strict-order<br>server=192.168.1.100<br>interface=eth0<br>
domain=<a href="http://transpireinc.com">transpireinc.com</a><br>dhcp-range=192.168.1.2,192.168.1.99,255.255.255.0,12h<br>dhcp-option=3,192.168.1.1<br>dhcp-authoritative<br>bogus-nxdomain=64.94.110.11<br>log-facility=/var/log/dnsmasq<br>
log-queries<br>log-dhcp<br> <br></blockquote><div><br>netstat -lpn output:<br><blockquote style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">tcp 0 0 <a href="http://0.0.0.0:53">0.0.0.0:53</a> 0.0.0.0:* LISTEN 932/dnsmasq <br>
tcp6 0 0 :::53 :::* LISTEN 932/dnsmasq <br>udp 0 0 <a href="http://0.0.0.0:53">0.0.0.0:53</a> 0.0.0.0:* 932/dnsmasq <br>
udp 0 0 <a href="http://0.0.0.0:67">0.0.0.0:67</a> 0.0.0.0:* 932/dnsmasq <br>udp6 0 0 :::53 :::* 932/dnsmasq </blockquote>
<div><br>Log snippet from today. All the successful queries occurred over TCP:<br><blockquote style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">Jan 6 16:20:08 dnsmasq[823]: started, version 2.57 cachesize 150<br>
Jan 6 16:20:08 dnsmasq[823]: compile time options: IPv6 GNU-getopt DBus I18N DHCP TFTP IDN<br>Jan 6 16:20:08 dnsmasq-dhcp[823]: DHCP, IP range 192.168.1.2 -- 192.168.1.99, lease time infinite<br>Jan 6 16:20:08 dnsmasq[823]: using nameserver 192.168.1.100#53<br>
Jan 6 16:20:08 dnsmasq[823]: reading /var/run/dnsmasq/resolv.conf<br>Jan 6 16:20:08 dnsmasq[823]: using nameserver 68.87.85.102#53<br>Jan 6 16:20:08 dnsmasq[823]: using nameserver 68.87.69.150#53<br>Jan 6 16:20:08 dnsmasq[823]: using nameserver 68.87.64.146#53<br>
Jan 6 16:20:08 dnsmasq[823]: using nameserver 192.168.1.1#53<br>Jan 6 16:20:08 dnsmasq[823]: using nameserver 192.168.1.100#53<br>Jan 6 16:20:08 dnsmasq[823]: using nameserver 192.168.1.100#53<br>Jan 6 16:20:08 dnsmasq[823]: read /etc/hosts - 12 addresses<br>
Jan 6 16:20:43 dnsmasq[840]: query[A] <a href="http://debian.org">debian.org</a> from 192.168.1.102<br>Jan 6 16:20:43 dnsmasq[840]: forwarded <a href="http://debian.org">debian.org</a> to 192.168.1.100<br>Jan 6 16:20:43 dnsmasq[840]: reply <a href="http://debian.org">debian.org</a> is 206.12.19.7<br>
Jan 6 16:20:43 dnsmasq[840]: reply <a href="http://debian.org">debian.org</a> is 128.31.0.51<br>Jan 6 16:37:10 dnsmasq[856]: query[A] <a href="http://www.yahoo.com">www.yahoo.com</a> from 192.168.1.102<br>Jan 6 16:37:10 dnsmasq[856]: forwarded <a href="http://www.yahoo.com">www.yahoo.com</a> to 192.168.1.100<br>
Jan 6 16:37:10 dnsmasq[856]: reply <a href="http://www.yahoo.com">www.yahoo.com</a> is <CNAME><br>Jan 6 16:37:10 dnsmasq[856]: reply <a href="http://fp3.wg1.b.yahoo.com">fp3.wg1.b.yahoo.com</a> is <CNAME><br>
Jan 6 16:37:10 dnsmasq[856]: reply <a href="http://any-fp3-lfb.wa1.b.yahoo.com">any-fp3-lfb.wa1.b.yahoo.com</a> is <CNAME><br>Jan 6 16:37:10 dnsmasq[856]: reply <a href="http://any-fp3-real.wa1.b.yahoo.com">any-fp3-real.wa1.b.yahoo.com</a> is 72.30.2.43<br>
Jan 6 16:37:10 dnsmasq[856]: reply <a href="http://any-fp3-real.wa1.b.yahoo.com">any-fp3-real.wa1.b.yahoo.com</a> is 98.137.149.56<br>Jan 6 16:40:14 dnsmasq[882]: query[A] <a href="http://www.yahoo.com">www.yahoo.com</a> from 192.168.1.102<br>
Jan 6 16:40:14 dnsmasq[882]: forwarded <a href="http://www.yahoo.com">www.yahoo.com</a> to 192.168.1.100<br>Jan 6 16:40:14 dnsmasq[882]: reply <a href="http://www.yahoo.com">www.yahoo.com</a> is <CNAME><br>Jan 6 16:40:14 dnsmasq[882]: reply <a href="http://fp3.wg1.b.yahoo.com">fp3.wg1.b.yahoo.com</a> is <CNAME><br>
Jan 6 16:40:14 dnsmasq[882]: reply <a href="http://any-fp3-lfb.wa1.b.yahoo.com">any-fp3-lfb.wa1.b.yahoo.com</a> is <CNAME><br>Jan 6 16:40:14 dnsmasq[882]: reply <a href="http://any-fp3-real.wa1.b.yahoo.com">any-fp3-real.wa1.b.yahoo.com</a> is 98.137.149.56<br>
Jan 6 16:40:14 dnsmasq[882]: reply <a href="http://any-fp3-real.wa1.b.yahoo.com">any-fp3-real.wa1.b.yahoo.com</a> is 72.30.2.43<br>Jan 6 17:06:56 dnsmasq[823]: exiting on receipt of SIGTERM<br>Jan 6 17:06:58 dnsmasq[932]: started, version 2.57 cachesize 150<br>
Jan 6 17:06:58 dnsmasq[932]: compile time options: IPv6 GNU-getopt DBus I18N DHCP TFTP IDN<br>Jan 6 17:06:58 dnsmasq-dhcp[932]: DHCP, IP range 192.168.1.2 -- 192.168.1.99, lease time 12h<br>Jan 6 17:06:58 dnsmasq[932]: using nameserver 192.168.1.100#53<br>
Jan 6 17:06:58 dnsmasq[932]: reading /var/run/dnsmasq/resolv.conf<br>Jan 6 17:06:58 dnsmasq[932]: using nameserver 68.87.85.102#53<br>Jan 6 17:06:58 dnsmasq[932]: using nameserver 68.87.69.150#53<br>Jan 6 17:06:58 dnsmasq[932]: using nameserver 68.87.64.146#53<br>
Jan 6 17:06:58 dnsmasq[932]: using nameserver 192.168.1.1#53<br>Jan 6 17:06:58 dnsmasq[932]: using nameserver 192.168.1.100#53<br>Jan 6 17:06:58 dnsmasq[932]: using nameserver 192.168.1.100#53<br>Jan 6 17:06:58 dnsmasq[932]: read /etc/hosts - 12 addresses<br>
Jan 6 17:07:34 dnsmasq[950]: query[A] <a href="http://www.yahoo.com">www.yahoo.com</a> from 192.168.1.102<br>Jan 6 17:07:34 dnsmasq[950]: forwarded <a href="http://www.yahoo.com">www.yahoo.com</a> to 192.168.1.100<br>Jan 6 17:07:34 dnsmasq[950]: reply <a href="http://www.yahoo.com">www.yahoo.com</a> is <CNAME><br>
Jan 6 17:07:34 dnsmasq[950]: reply <a href="http://fp3.wg1.b.yahoo.com">fp3.wg1.b.yahoo.com</a> is <CNAME><br>Jan 6 17:07:34 dnsmasq[950]: reply <a href="http://any-fp3-lfb.wa1.b.yahoo.com">any-fp3-lfb.wa1.b.yahoo.com</a> is <CNAME><br>
Jan 6 17:07:34 dnsmasq[950]: reply <a href="http://any-fp3-real.wa1.b.yahoo.com">any-fp3-real.wa1.b.yahoo.com</a> is 98.137.149.56<br>Jan 6 17:07:34 dnsmasq[950]: reply <a href="http://any-fp3-real.wa1.b.yahoo.com">any-fp3-real.wa1.b.yahoo.com</a> is 72.30.2.43<br>
</blockquote><div><br>The only thing keeping this server from going live is this UDP problem.<br><br>Thanks<br>Mike <br></div><blockquote style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">
<br></blockquote></div></div>