[Dnsmasq-discuss] localise-queries does not work with ipv6

Simon Kelley simon at thekelleys.org.uk
Wed Jun 28 22:32:40 BST 2017


On 22/06/17 14:12, Jason A. Donenfeld wrote:
> Hello Simon,
> 
> In dnsmasq.conf:
> 
>     interface-name=martino,lan  # 10.10.10.1, 2a07:f32:8fe8:8a61::1
>     interface-name=martino,guest # 10.11.0.1, 2a07:f32:8fe8:8a63::1
>     interface-name=martino,remote # 10.10.11.1, 2a07:f32:8fe8:8a62::1
>     localise-queries
> 
> zx2c4 at thinkpad ~ $ host martino 10.10.10.1
> Using domain server:
> Name: 10.10.10.1
> Address: 10.10.10.1#53
> Aliases:
> 
> martino has address 10.10.10.1
> martino has IPv6 address 2a07:f32:8fe8:8a61::1
> martino has IPv6 address 2a07:f32:8fe8:8a63::1
> martino has IPv6 address 2a07:f32:8fe8:8a62::1
> 
> You'll notice it correctly filters the v4, but totally fails to do any
> v6 filtering. Even worse:
> 
> zx2c4 at thinkpad ~ $ host martino 2a07:f32:8fe8:8a61::1
> Using domain server:
> Name: 2a07:f32:8fe8:8a61::1
> Address: 2a07:f32:8fe8:8a61::1#53
> Aliases:
> 
> martino has address 10.10.10.1
> martino has address 10.10.11.1
> martino has address 10.11.0.1
> martino has IPv6 address 2a07:f32:8fe8:8a61::1
> martino has IPv6 address 2a07:f32:8fe8:8a63::1
> martino has IPv6 address 2a07:f32:8fe8:8a62::1
> 
> Here it doesn't do any filtering at all.
> 
> It seems like localise-queries is broken with v6?
> 
> Jason
> 

localise-queries doesn't really work in the world of IPv4 and IPv6,
which is at least partly why it has never been implemented for IPv6.

In your first example, the query is sent to an IPv4 address, so there's
no way that the IPv6 addresses could be filtered, even if it was
implemented.

In the second example, the query is sent to an IPv6 address, so the IPv4
addresses can't be filtered, even though localise-queries is implemented
for IPv4. If it was implemented for IPv6, then the IPv6 addresses could
be filtered.

Cheers,

Simon.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20170628/5ecd6c46/attachment.sig>


More information about the Dnsmasq-discuss mailing list