[Dnsmasq-discuss] Dnsmasq does not cache a authoritative response from upstream ?

[Simon Kelley]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

So, you're saying that an AA bit in an answer stops dnsmasq from
caching that answer? It's no-trivial for me to test that just now, but
I'm not aware of any reason why dnsmasq should behave in that way, and
A quick grep of the code shows no obvious use of the AA flag to do
_anything_ to do with caching.

Cheers,

Simon.


On 09/10/15 19:52, Akash wrote:
> Hi,
> 
> Been fiddling with all the settings and still wondering why doesn't
> dnsmasq cache a authoritative response from a server supplied with
> -S. I wish to use dnsmasq as a caching proxy for my master DNS
> server in a way that dnsmasq queries our master server for DNS
> records and serves them to the net, while caching them in memory.
> In case the master is down, dnsmaq should continue serving the
> cached records.
> 
> Pdnsd is able to do this but is outdated and doesn't support SPF
> records. Any way to achieve the same with dnsmasq?
> 
> At present when I point dnsmasq to our master DNS server, it just
> forwards queries as they come with no caching. If I point dnsmasq
> to something like 8.8.8.8, it does cache the response BUT its reply
> to the internet is also non-authoritative (as returned by 8.8.8.8)
> which isn't what its supposed to be. Being a proxy for our DNS
> server, its responses should be authoritative.
> 
> -Thanks Akash
> 
> 
> 
> _______________________________________________ Dnsmasq-discuss
> mailing list Dnsmasq-discuss at lists.thekelleys.org.uk 
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=c/Q1
-----END PGP SIGNATURE-----