<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><font face="Helvetica, Arial, sans-serif">I've already added
listen-address=127.0.0.1 to it, as it's the host env's IP
address.</font></p>
<p>bind-interfaces has to be commented out, otherwise the jails will
have problems resolving (it's a FreeBSD host-jail resolution
specific thing)</p>
<p>Why would you want me to use except-interface=lo0? I _want_ it to
listen on lo0.</p>
<p>For the sake of clarity, here't my cleaned dnsmasq.conf:</p>
<p>domain-needed<br>
conf-file=/usr/local/share/dnsmasq/trust-anchors.conf<br>
dnssec<br>
dnssec-check-unsigned<br>
resolv-file=/usr/local/etc/dnsmasq-resolv.conf<br>
interface=lo0<br>
listen-address=127.0.0.1<br>
no-dhcp-interface=lo0<br>
local-ttl=5<br>
dhcp-name-match=set:wpad-ignore,wpad<br>
dhcp-ignore-names=tag:wpad-ignore<br>
rebind-domain-ok=/rfc-ignorant.org/sorbs.net/uribl.com/surbl.org/dnswl.org/njabl.org/spamhaus.org/spamcop.net/barracudacentral.org/<br>
</p>
<pre class="moz-signature" cols="72">Cheers,
--
László Károlyi
<a class="moz-txt-link-freetext" href="http://linkedin.com/in/karolyi" moz-do-not-send="true">http://linkedin.com/in/karolyi</a>
</pre>
<div class="moz-cite-prefix">On 2020-07-21 14:42, Petr Menšík wrote:<br>
</div>
<blockquote type="cite"
cite="mid:e0fbe4de-4f12-b667-6e31-d50b02cf06d5@redhat.com">
<pre class="moz-quote-pre" wrap="">I would check what addresses it is listening on. I think it considers
all loopback addresses its own. Probably because it would accept queries
to that address if you stop unbound.
It might help, if you configured it with this:
bind-interfaces
except-interface=lo0
listen-address=127.0.0.21
It would listen only on 127.0.0.21 and consider all other addresses not
its own. I think it should send queries there. It should then accept:
server=127.0.0.20
without ignoring it this way.
On 7/20/20 4:35 PM, László Károlyi wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Hi Petr,
as you have seen in the original email, it is dnsmasq that refuses to
use the lo0 interface to communicate with the IP 127.0.0.20:
Jul 20 13:33:23 ksol dnsmasq[99396]: ignoring nameserver 127.0.0.20 -
local interface
When querying manually from the host env to the jailed unbound, I get
proper DNS responses. This was something I did pay extra attention to
get it working from the get-go. See:
Citing my configs here makes no sense as you can see it's working already.
Cheers,
--
László Károlyi
<a class="moz-txt-link-freetext" href="http://linkedin.com/in/karolyi" moz-do-not-send="true">http://linkedin.com/in/karolyi</a>
On 2020-07-20 16:12, Petr Menšík wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Hi László,
are you sure it is dnsmasq, who is rejecting the communication?
Unbound has by default disabled commuinication on localhost. If you have
any other servers running along it, you have to use:
do-not-query-localhost: no
to override defaults. But that has to be done on unbound side. AFAIK
dnsmasq does not have any such limitation. It does limit only
per-interface, all required is to configure interface=lo, which is
enabled by default.
How many interface= statements do you have in configuration? Is
localhost included?
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
_______________________________________________
Dnsmasq-discuss mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Dnsmasq-discuss@lists.thekelleys.org.uk" moz-do-not-send="true">Dnsmasq-discuss@lists.thekelleys.org.uk</a>
<a class="moz-txt-link-freetext" href="http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss" moz-do-not-send="true">http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss</a>
</pre>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Dnsmasq-discuss mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Dnsmasq-discuss@lists.thekelleys.org.uk" moz-do-not-send="true">Dnsmasq-discuss@lists.thekelleys.org.uk</a>
<a class="moz-txt-link-freetext" href="http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss" moz-do-not-send="true">http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss</a>
</pre>
</blockquote>
</body>
</html>