[Dnsmasq-discuss] DNS resolving error

[Geert Stappers]

On Sun, Sep 29, 2024 at 09:22:28PM +0100, White, Phil via Dnsmasq-discuss wrote:
> Hi All,
> I have a problem resolving a specific DNS record, and I wonder if
> anyone can give me a pointer to what is going on here?
 
Short:  The right questions are asked.


> I have a gentoo linux server, running dnsmasq -- configured as a dhcp
> and dns server. DNSSEC is turned on. Most of the time it appears to
> work fine without any problem -- and has done for years.
> 
> However, I am unable to resolve www.gov.uk.
> Using dig, I get the message:
> ;; Truncated, retrying in TCP mode.
> ;; communications error to 192.168.1.2: end of file
> 
> The first part suggests that the response received exceeds the UDP
> packet, and the query is being repeated over TCP. But I'm not sure
> about why the fallback is failing

My guess:  "firewall" has only UDP port 53 open.

> -- or how to fix.
 
Open TCP port 53 in the "firewall"


> Thanks.

A much better "Thanks" is reporting back.


Groeten
Geert Stappers
-- 
Silence is hard to parse