[Dnsmasq-discuss] SSHFP caching

Nirgal contact_dnsmasq at nirgal.com
Fri Jan 7 12:51:26 UTC 2022


Hello

I noticed the SSHFP querries are not cached:
I have a "tcpdump -n -vv port 53" running

Running "dig -t A mola.greenpeace.fr @::1" a bunch of times, I can see an
outbound request only the first time.

Running "dig -t SSHFP mola.greenpeace.fr @::1" a bunch of times, I can see
outbound requests every time.

I using Debian stable 11.2 "bullseye" including dnsmasq version 2.85

The journal shows for A records:
Jan 07 13:45:09 giga dnsmasq[30843]: query[A] mola.greenpeace.fr from ::1
Jan 07 13:45:09 giga dnsmasq[30843]: cached mola.greenpeace.fr is 62.210.102.125

and for SSHFP records:
Jan 07 13:46:43 giga dnsmasq[30843]: query[type=44] mola.greenpeace.fr from ::1
Jan 07 13:46:43 giga dnsmasq[30843]: forwarded mola.greenpeace.fr to 2001:67c:2354:2::53
Jan 07 13:46:43 giga dnsmasq[30843]: forwarded mola.greenpeace.fr to 95.215.19.53
Jan 07 13:46:43 giga dnsmasq[30843]: validation result is SECURE

Is that a bug? A limitation?





More information about the Dnsmasq-discuss mailing list