[Dnsmasq-discuss] Why does dnsmasq append a local domain in DNS queries?

Mikhail Morfikov mmorfikov at gmail.com
Fri Jan 8 15:28:11 GMT 2016


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 01/08/2016 03:30 PM, wkitty42 at gmail.com wrote:
> On 01/08/2016 07:29 AM, Mikhail Morfikov wrote:
>>> Also, though I don't see further log, I suspect that there were no requests like
>> That's the full log. I mean, this is what happened after trying to use
>> "ping dupaa.com".
> 
> perhaps you should have used "ping dupaa.com." instead?
I've tried to add the dot, and yes, that stops sending the another query.
That's easy to handle when you actually send a ping to an invalid
domain, or something like that. But what about all the other applications
that send many DNS requests and some of the domains simply doesn't exist?

Look at the DNS stats:

dnsmasq[1582]: time 1452266531
dnsmasq[1582]: cache size 10000, 0/2811 cache insertions re-used unexpired cache entries.
dnsmasq[1582]: queries forwarded 3205, queries answered locally 4028
dnsmasq[1582]: queries for authoritative zones 0
dnsmasq[1582]: server 192.168.1.1#53: queries sent 363, retried or failed 0
dnsmasq[1582]: server 208.67.222.222#53: queries sent 2, retried or failed 0
dnsmasq[1582]: server 127.0.2.1#5353: queries sent 2840, retried or failed 18

Most of the 363 queries that were sent to the local network router are
those with "mhouse.lh" appended to the invalid domains, and not
hostname.mhouse.lh . I'm just trying to eliminate the queries. Is there
anything I can do about it, except removing the "search" line from the
/etc/resolv.conf file?

> in one of my other lives we learned that if you don't also want the local domain to be searched, you must add the trailing dot to signify that that is the end of the domain and no additional searches should be done... we see this with all manner of DNS clients...
> 
> just tossing that out there... maybe it will help?
> 

-----BEGIN PGP SIGNATURE-----
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=3iL5
-----END PGP SIGNATURE-----



More information about the Dnsmasq-discuss mailing list