<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Albert,</p>
<p><br>
</p>
<p>First let me be clear - I don't believe this is a DNSMasq issue since I can reproduce it with dig. I was just hoping with all the DNS experts on this forum that someone would have seen this issue with the Windows Server and give me some pointers on possible
solutions.</p>
<p><br>
</p>
<p>Second, here is an example trace of the error.</p>
<p><br>
</p>
<p></p>
<div>No. Time Source Destination Protocol Length Info</div>
<div> 1 0.000000 172.19.9.210 65.153.116.46 DNS 97 Standard query 0x7613 A www.google.com OPT</div>
<div><br>
</div>
<div>Frame 1: 97 bytes on wire (776 bits), 97 bytes captured (776 bits)</div>
<div>Ethernet II, Src: Shuttle_97:5f:7c (80:ee:73:97:5f:7c), Dst: JuniperN_b1:4a:e0 (0c:86:10:b1:4a:e0)</div>
<div>Internet Protocol Version 4, Src: 172.19.9.210, Dst: 65.153.116.46</div>
<div>User Datagram Protocol, Src Port: 54012, Dst Port: 53</div>
<div>Domain Name System (query)</div>
<div> [Response In: 2]</div>
<div> Transaction ID: 0x7613</div>
<div> Flags: 0x0120 Standard query</div>
<div> 0... .... .... .... = Response: Message is a query</div>
<div> .000 0... .... .... = Opcode: Standard query (0)</div>
<div> .... ..0. .... .... = Truncated: Message is not truncated</div>
<div> .... ...1 .... .... = Recursion desired: Do query recursively</div>
<div> .... .... .0.. .... = Z: reserved (0)</div>
<div> .... .... ..1. .... = AD bit: Set</div>
<div> .... .... ...0 .... = Non-authenticated data: Unacceptable</div>
<div> Questions: 1</div>
<div> Answer RRs: 0</div>
<div> Authority RRs: 0</div>
<div> Additional RRs: 1</div>
<div> Queries</div>
<div> www.google.com: type A, class IN</div>
<div> Name: www.google.com</div>
<div> [Name Length: 14]</div>
<div> [Label Count: 3]</div>
<div> Type: A (Host Address) (1)</div>
<div> Class: IN (0x0001)</div>
<div> Additional records</div>
<div> <Root>: type OPT</div>
<div> Name: <Root></div>
<div> Type: OPT (41)</div>
<div> UDP payload size: 4096</div>
<div> Higher bits in extended RCODE: 0x00</div>
<div> EDNS0 version: 0</div>
<div> Z: 0x0000</div>
<div> 0... .... .... .... = DO bit: Cannot handle DNSSEC security RRs</div>
<div> .000 0000 0000 0000 = Reserved: 0x0000</div>
<div> Data length: 12</div>
<div> Option: CSUBNET - Client subnet</div>
<div> Option Code: CSUBNET - Client subnet (8)</div>
<div> Option Length: 8</div>
<div> Option Data: 00012000ac1309d2</div>
<div> Family: IPv4 (1)</div>
<div> Source Netmask: 32</div>
<div> Scope Netmask: 0</div>
<div> Client Subnet: 172.19.9.210</div>
<div><br>
</div>
<div>No. Time Source Destination Protocol Length Info</div>
<div> 2 0.025748 65.153.116.46 172.19.9.210 DNS 97 Standard query response 0x7613 Format error A www.google.com OPT</div>
<div><br>
</div>
<div>Frame 2: 97 bytes on wire (776 bits), 97 bytes captured (776 bits)</div>
<div>Ethernet II, Src: JuniperN_b1:4a:e0 (0c:86:10:b1:4a:e0), Dst: Shuttle_97:5f:7c (80:ee:73:97:5f:7c)</div>
<div>Internet Protocol Version 4, Src: 65.153.116.46, Dst: 172.19.9.210</div>
<div>User Datagram Protocol, Src Port: 53, Dst Port: 54012</div>
<div>Domain Name System (response)</div>
<div> [Request In: 1]</div>
<div> [Time: 0.025748000 seconds]</div>
<div> Transaction ID: 0x7613</div>
<div> Flags: 0x8101 Standard query response, Format error</div>
<div> 1... .... .... .... = Response: Message is a response</div>
<div> .000 0... .... .... = Opcode: Standard query (0)</div>
<div> .... .0.. .... .... = Authoritative: Server is not an authority for domain</div>
<div> .... ..0. .... .... = Truncated: Message is not truncated</div>
<div> .... ...1 .... .... = Recursion desired: Do query recursively</div>
<div> .... .... 0... .... = Recursion available: Server can't do recursive queries</div>
<div> .... .... .0.. .... = Z: reserved (0)</div>
<div> .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server</div>
<div> .... .... ...0 .... = Non-authenticated data: Unacceptable</div>
<div> .... .... .... 0001 = Reply code: Format error (1)</div>
<div> Questions: 1</div>
<div> Answer RRs: 0</div>
<div> Authority RRs: 0</div>
<div> Additional RRs: 1</div>
<div> Queries</div>
<div> www.google.com: type A, class IN</div>
<div> Name: www.google.com</div>
<div> [Name Length: 14]</div>
<div> [Label Count: 3]</div>
<div> Type: A (Host Address) (1)</div>
<div> Class: IN (0x0001)</div>
<div> Additional records</div>
<div> <Root>: type OPT</div>
<div> Name: <Root></div>
<div> Type: OPT (41)</div>
<div> UDP payload size: 4096</div>
<div> Higher bits in extended RCODE: 0x00</div>
<div> EDNS0 version: 0</div>
<div> Z: 0x0000</div>
<div> 0... .... .... .... = DO bit: Cannot handle DNSSEC security RRs</div>
<div> .000 0000 0000 0000 = Reserved: 0x0000</div>
<div> Data length: 12</div>
<div> Option: CSUBNET - Client subnet</div>
<div> Option Code: CSUBNET - Client subnet (8)</div>
<div> Option Length: 8</div>
<div> Option Data: 00012000ac1309d2</div>
<div> Family: IPv4 (1)</div>
<div> Source Netmask: 32</div>
<div> Scope Netmask: 0</div>
<div> Client Subnet: 172.19.9.210</div>
<br>
<p></p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Albert ARIBAUD <albert.aribaud@free.fr><br>
<b>Sent:</b> Wednesday, December 7, 2016 6:20:32 AM<br>
<b>To:</b> Scott Bonar<br>
<b>Cc:</b> dnsmasq-discuss@lists.thekelleys.org.uk<br>
<b>Subject:</b> Re: [Dnsmasq-discuss] Format Errors using add-subnet</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">Hi Scott,<br>
<br>
Le Mon, 5 Dec 2016 20:10:44 +0000<br>
Scott Bonar <sbonar@cradlepoint.com> a écrit:<br>
<br>
> When using this option (which I really need to do) for DNS queries, I<br>
> get Format Errors from the upstream DNS servers if they are Windows<br>
> Servers 2008 through at least 2012. Has anyone seen this and is<br>
> there a workaround either in DNSMasq or Windows?<br>
> <br>
> Your help is appreciated.<br>
<br>
Maybe an actual example (ideally with a Wireshark or tcdump capture)<br>
could help pinpoint the issue.<br>
<br>
> Scott Bonar<br>
<br>
Amicalement,<br>
-- <br>
Albert.<br>
</div>
</span></font>
</body>
</html>