<div dir="ltr">One of my users is getting some errors talking to Salesforce, as a replication step she has provided me with the following piece of Python code:<div><br></div><div><div> import socket</div><div> print(socket.gethostbyname('localhost'))</div><div> print(socket.gethostbyname('<a href="http://google.com">google.com</a>'))</div><div> print(socket.gethostbyname('<a href="http://login.salesforce.com">login.salesforce.com</a>'))</div><div><br></div><div>And it prints the following:</div><div><br></div><div><div> 127.0.0.1</div><div> 216.58.211.14</div><div> Traceback (most recent call last):</div><div> File "dns.py", line 4, in <module></div><div> print(socket.gethostbyname('<a href="http://login.salesforce.com">login.salesforce.com</a>'))</div><div> socket.gaierror: [Errno 8] nodename nor servname provided, or not known</div></div><div><br></div><div>In my logs I see the following:</div><div><br></div><div><div> Aug 15 14:54:32 dnsmasq[28405]: query[A] <a href="http://login.gslb2.salesforce.com">login.gslb2.salesforce.com</a> from 10.8.0.3</div><div> Aug 15 14:54:32 dnsmasq[28405]: forwarded <a href="http://login.gslb2.salesforce.com">login.gslb2.salesforce.com</a> to 8.8.8.8</div><div> Aug 15 14:54:32 dnsmasq[28405]: forwarded <a href="http://login.gslb2.salesforce.com">login.gslb2.salesforce.com</a> to 8.8.4.4</div><div> Aug 15 14:54:32 dnsmasq[28405]: dnssec-query[DS] com to 8.8.8.8</div><div> Aug 15 14:54:32 dnsmasq[28405]: dnssec-query[DNSKEY] . to 8.8.8.8</div><div> Aug 15 14:54:32 dnsmasq[28405]: reply . is DNSKEY keytag 46551</div><div> Aug 15 14:54:32 dnsmasq[28405]: reply . is DNSKEY keytag 19036</div><div> Aug 15 14:54:32 dnsmasq[28405]: reply com is DS keytag 30909</div><div> Aug 15 14:54:32 dnsmasq[28405]: dnssec-query[DS] <a href="http://salesforce.com">salesforce.com</a> to 8.8.8.8</div><div> Aug 15 14:54:32 dnsmasq[28405]: dnssec-query[DNSKEY] com to 8.8.8.8</div><div> Aug 15 14:54:32 dnsmasq[28405]: reply com is DNSKEY keytag 27452</div><div> Aug 15 14:54:32 dnsmasq[28405]: reply com is DNSKEY keytag 30909</div><div> Aug 15 14:54:32 dnsmasq[28405]: reply <a href="http://salesforce.com">salesforce.com</a> is no DS</div><div> Aug 15 14:54:32 dnsmasq[28405]: validation result is INSECURE</div><div> Aug 15 14:54:32 dnsmasq[28405]: reply <a href="http://login.gslb2.salesforce.com">login.gslb2.salesforce.com</a> is NODATA-IPv4</div></div><div><br></div><div>My Dnsmasq is configured like this:</div><div><br></div><div><div> dnssec</div><div> trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5</div><div> dnssec-check-unsigned</div><div><br></div><div> interface=tun0</div><div> local-ttl=360</div><div><br></div><div> log-queries</div><div> log-facility=/var/log/dnsmasq.log</div><div> log-async=20</div><div><br></div><div> resolv-file=/etc/dnsmasq-resolv.conf</div></div><div><br></div><div><div>And dnsmasq-resolv.conf contains this: </div><div><br></div><div> nameserver 8.8.8.8</div><div> nameserver 8.8.4.4</div></div><div><br></div><div>Any ideas why this is?</div><div><br></div><div>Br.</div><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr">--<br><div>Kasper Grubbe<br><br>Phone: (+45) 42 42 42 74</div><div>Skype: kasper.grubbe<br>Mail: <a href="mailto:kaspergrubbe@gmail.com" target="_blank">kaspergrubbe@gmail.com</a></div><div>Web: <a href="http://kaspergrubbe.com" target="_blank">http://kaspergrubbe.com</a></div></div></div></div></div></div>
</div></div>