Unless I've misunderstood, this is complicated method to configure two BIND instances and a dnsmasq instance to send the same query many times to another BIND instance. Exactly the same effect can be achieved with a simple loop to send the same packet repeatedly to a BIND instance. If BIND thereby crashes, that's a BIND problem, not a dnsmasq one.

The suggested mitigation is already implemented in dnsmasq, see the
--dns-loop-detect option.

Cheers,

Simon.


On 4/8/25 07:13, 孔俊 wrote:
Hello there,

I hope you're having a great day.

I'd like to discuss a dnsmasq issue — especially since it also involves BIND9. 
Due to the issue can potentially cause the BIND9 resolver to crash through 
dnsmasq, it's definitely worth a deeper look.

Thank you for taking the time to read my document.

Best regards,

jun kong

_______________________________________________
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss


_______________________________________________
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss

Reply via email to