Package: dnsmasq-base
Version: 2.87-1
Severity: normal

Hi,

first of all thanks for providing dnsmasq, this is a really awesome tool!

Since the update to 2.87-1 I experienced that dns-queries for domains provided 
via
address=/example.com/1.2.3.4 where not resolved via the given server.
After some trying around disabling 'no-negcache' restored the functionality 
again.

I use dnsmasq via NetworkManager. The minimal config to show both behaviors are:

Failing config:
> no-negcache
> server=/domain1.net/10.140.16.40
> addn-hosts=/etc/hosts

Corresponding log:
> LOG: using nameserver 10.140.16.40#53 for domain domain1.net
> LOG: read /etc/hosts - 5 addresses
> LOG: setting upstream servers from DBus
> LOG: using nameserver 10.140.16.40#53 for domain domain1.net
> LOG: using nameserver 192.168.178.79#53(via wlp3s0)
> LOG: using nameserver 192.168.178.79#53 for domain home.lan
> LOG: using nameserver 192.168.178.79#53 for domain 178.168.192.in-addr.arpa
> LOG: read /etc/hosts - 5 addresses
> ....
> LOG: query[A] sub.domain1.net from 127.0.0.1
> LOG: forwarded sub.domain1.net to 192.168.178.79
> LOG: query[AAAA] sub.domain1.net from 127.0.0.1
> LOG: forwarded sub.domain1.net to 192.168.178.79
> LOG: reply sub.domain1.net is NXDOMAIN
> LOG: reply sub.domain1.net is NXDOMAIN

Working config:
> #no-negcache
> server=/domain1.net/10.140.16.40
> addn-hosts=/etc/hosts

Corresponding log:
> LOG: using nameserver 10.140.16.40#53 for domain domain1.net
> LOG: read /etc/hosts - 5 addresses
> LOG: setting upstream servers from DBus
> LOG: using nameserver 10.140.16.40#53 for domain domain1.net
> LOG: using nameserver 192.168.178.79#53(via wlp3s0)
> LOG: using nameserver 192.168.178.79#53 for domain home.lan
> LOG: using nameserver 192.168.178.79#53 for domain 178.168.192.in-addr.arpa
> LOG: read /etc/hosts - 5 addresses
> ....
> LOG: query[A] sub.domain1.net from 127.0.0.1
> LOG: forwarded sub.domain1.net to 10.140.16.40
> LOG: query[AAAA] sub.domain1.net from 127.0.0.1
> LOG: forwarded sub.domain1.net to 10.140.16.40
> LOG: reply sub.domain1.net is <CNAME>
> LOG: reply ........dc.domain1.net is W.X.Y.Z
> LOG: reply sub.domain1.net is <CNAME>
> LOG: reply ........dc.domain1.net is NODATA-IPv6

hth, br Michael


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (504, 'unstable'), (503, 'testing'), (502, 'experimental'), (1, 
'experimental-debug')
Architecture: amd64 (x86_64)

Kernel: Linux 5.19.0-2-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dnsmasq-base depends on:
ii  adduser                  3.129
ii  libc6                    2.35-1
ii  libdbus-1-3              1.14.2-1
ii  libgmp10                 2:6.2.1+dfsg1-1
ii  libhogweed6              3.8.1-2
ii  libidn2-0                2.3.3-1+b1
ii  libnetfilter-conntrack3  1.0.9-2
ii  libnettle8               3.8.1-2
ii  libnftables1             1.0.5-1

Versions of packages dnsmasq-base recommends:
ii  dns-root-data  2021011101

dnsmasq-base suggests no packages.

-- no debconf information

Reply via email to