[Dnsmasq-discuss] Question about DNS request refused when using the 'host' command on RHEL 5

2014-02-06 Thread Mike Prewitt
Hi, Am a newbie with dnsmasq, but it looks like a very useful piece of software. I know that this is probably a bone-headed question.. but I set it up on a private non-internet accessible RHEL 5.10 'host' on a private non-internet accessible network. Some programs like 'dig' and 'nslookup' wo

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Henk Jan Agteresch
On Thu, 06 Feb 2014, Simon Kelley wrote: > On 06/02/14 10:17, Henk Jan Agteresch wrote: > >I compiled 2.69test6 on armv5tel (linksys 4200v2 running debian) using > >dpkg-buildpackage. > >dnsmasq crashes on the first received query with "*** stack smashing > >detected ***: /usr/sbin/dnsmasq termina

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Simon Kelley
On 06/02/14 08:15, Jan-Piet Mens wrote: 1. I am getting different results on two subsequent identical queries WRT RRSIG record and AD flag. The second answer comes from the cache, and the D0 bit is not set in the query, so the answer doesn't have the AD flag or RRSIG, if you add "+dnssec" to

Re: [Dnsmasq-discuss] coping with ipv6 source routing and dns

2014-02-06 Thread Simon Kelley
On 30/01/14 14:40, Dave Taht wrote: I'm not sure I follow all of this, but for reverse DNS something like server=/.ip6.arpa/2001:558:feed::1 Will work. Syntactically having to have a tool to reverse the domain is a pita, what I'd like is reverse=#260x:x:y:z::/60#2001:558:feed::1# Quite

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Simon Kelley
On 06/02/14 10:17, Henk Jan Agteresch wrote: I compiled 2.69test6 on armv5tel (linksys 4200v2 running debian) using dpkg-buildpackage. dnsmasq crashes on the first received query with "*** stack smashing detected ***: /usr/sbin/dnsmasq terminated" Fixed code in 2.69test for from git pull. It

Re: [Dnsmasq-discuss] dhcp-pd, and autoassigned internal interfaces issues

2014-02-06 Thread Simon Kelley
On 23/01/14 02:31, Vladislav Grishenko wrote: Hi Simon, -if (ifa->ifa_flags& IFA_F_PERMANENT) +if (!(ifa->ifa_flags& IFA_F_TEMPORARY)) IFA_F_TEMPORARY flag used only if privacy extensions are enabled in kernel, in all other cases it makes no sense and will not be there. That means

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Simon Kelley
OK, I can reproduce this on the Beaglebone. Investigation in progress... Cheers, Simon. On 06/02/14 10:17, Henk Jan Agteresch wrote: I compiled 2.69test6 on armv5tel (linksys 4200v2 running debian) using dpkg-buildpackage. dnsmasq crashes on the first received query with "*** stack smas

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Simon Kelley
On 05/02/14 08:58, Matthias Andree wrote: Am 05.02.2014 09:46, schrieb Simon Kelley: The second answer comes from the cache, and the D0 bit is not set in the query, so the answer doesn't have the AD flag or RRSIG, if you add "+dnssec" to the dig command you should see both in replies from the

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Simon Kelley
On 06/02/14 08:15, Jan-Piet Mens wrote: 1. I am getting different results on two subsequent identical queries WRT RRSIG record and AD flag. The second answer comes from the cache, and the D0 bit is not set in the query, so the answer doesn't have the AD flag or RRSIG, if you add "+dnssec" to

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Simon Kelley
On 06/02/14 10:17, Henk Jan Agteresch wrote: I compiled 2.69test6 on armv5tel (linksys 4200v2 running debian) using dpkg-buildpackage. dnsmasq crashes on the first received query with "*** stack smashing detected ***: /usr/sbin/dnsmasq terminated" Recompiled with CFLAGS=-g and started under gdb.

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Simon Kelley
On 05/02/14 23:23, Eugene Rudoy wrote: Hi Simon, On Wed, Feb 5, 2014 at 9:39 AM, Simon Kelley wrote: Most zones (including those you use as examples) are not (yet) signed, so that's the expected result. Try paypal.com ietf.org www.dnssec-failed.org hmm, tried all above, still INSECURE F

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Simon Kelley
On 05/02/14 23:35, Eugene Rudoy wrote: Hi Simon, On Thu, Feb 6, 2014 at 12:23 AM, Eugene Rudoy wrote: hmm, tried all above, still INSECURE --dnssec-debug doesn't make log more verbose or provide any additional information. Is it the expected behavior? It does two things, the results of w

[Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Henk Jan Agteresch
I compiled 2.69test6 on armv5tel (linksys 4200v2 running debian) using dpkg-buildpackage. dnsmasq crashes on the first received query with "*** stack smashing detected ***: /usr/sbin/dnsmasq terminated" Recompiled with CFLAGS=-g and started under gdb. Output follows root@pms28:~/dev# gdb /usr/sbi

Re: [Dnsmasq-discuss] Testers wanted: DNSSEC.

2014-02-06 Thread Jan-Piet Mens
> >1. I am getting different results on two subsequent identical queries > >WRT RRSIG record and AD flag. > The second answer comes from the cache, and the D0 bit is not set in > the query, so the answer doesn't have the AD flag or RRSIG, if you > add "+dnssec" to the dig command you should see b