Re: [Dnsmasq-discuss] TTL in nested wild card CNAME

2020-03-17 Thread Sasha Litvak
Simon, Hosts in domain .consul are resolved by DNS servers forwarding requests to a consul clusters. I also have hard coded direct consul server records for .consul in dnsmasq config. Nothing in /etc/hosts . Consul returns records with TTL 0 . I perhaps wrongly thought it meant they are not

Re: [Dnsmasq-discuss] stop-dns-rebind and IPv6

2020-03-17 Thread Simon Kelley
On 17/03/2020 21:48, Dominik wrote: > Patch attached. and applied. Thanks. Simon. > > On 17.03.20 21:54, Simon Kelley wrote: >> >> On 11/03/2020 07:55, Dominik wrote: >>> Hey Buck, >>> >>> dnsmasq blocks all IPv4 address replies in the "private" subnets when >>> enabling stop-dns-rebind.

Re: [Dnsmasq-discuss] stop-dns-rebind and IPv6

2020-03-17 Thread Dominik
Patch attached. On 17.03.20 21:54, Simon Kelley wrote: > > On 11/03/2020 07:55, Dominik wrote: >> Hey Buck, >> >> dnsmasq blocks all IPv4 address replies in the "private" subnets when >> enabling stop-dns-rebind. For IPv6, it blocks only the IPv4-mapped address >> ranges matching said private

Re: [Dnsmasq-discuss] 'tidying' unused variable warnings

2020-03-17 Thread Simon Kelley
I'm inclined not to take these, on the grounds that complicated preprocessor stuff is a greater evil than false-positive warnings on unusual platforms for build configurations. Simon. On 10/03/2020 10:25, Kevin 'ldir' Darbyshire-Bryant wrote: > Hi Simon, > > Feel free to throw these patches

Re: [Dnsmasq-discuss] stop-dns-rebind and IPv6

2020-03-17 Thread Simon Kelley
On 11/03/2020 07:55, Dominik wrote: > Hey Buck, > > dnsmasq blocks all IPv4 address replies in the "private" subnets when > enabling stop-dns-rebind. For IPv6, it blocks only the IPv4-mapped address > ranges matching said private subnets. > > Neither ULAs nor LLs (link-locals) are blocked in

Re: [Dnsmasq-discuss] [PATCH] DHCPv6 - List or Range reservation for single host

2020-03-17 Thread Simon Kelley
On 10/03/2020 14:25, Petr Menšík wrote: > That is a pity. Is there anything I can help to include it in 2.81? If > you have any objections to part of it or whole concept, please say so. I > would rebase the change again. > > I was added to Fedora as downstream in late summer [1], have not yet

Re: [Dnsmasq-discuss] What it is

2020-03-17 Thread Geert Stappers
On Tue, Mar 17, 2020 at 09:08:15AM -0500, Sasha Litvak wrote: > On Tue, Mar 17, 2020, 1:48 AM Geert Stappers wrote: > > On Mon, Mar 16, 2020 at 08:31:17PM -0500, Sasha Litvak wrote: > > > ... > > > We are using dnsmasq on our servers as a caching dns solution. > > > ... > > > dnsmasq handles

Re: [Dnsmasq-discuss] TTL in nested wild card CNAME

2020-03-17 Thread Simon Kelley
On 17/03/2020 01:31, Sasha Litvak wrote: > I couldn't find a specific answer anywhere so hopefully someone has a > clue on this list > > We are using dnsmasq on our servers as a caching dns solution. > > Most of our domains are resolved by a wildcard record like this > > $TTL 3600 ; 1

Re: [Dnsmasq-discuss] TTL in nested wild card CNAME

2020-03-17 Thread Sasha Litvak
Geert, What is the meaning of this? On Tue, Mar 17, 2020, 1:48 AM Geert Stappers wrote: > On Mon, Mar 16, 2020 at 08:31:17PM -0500, Sasha Litvak wrote: > > I couldn't find a specific answer anywhere so hopefully someone has a > > clue on this list > > > > We are using dnsmasq on our servers as

Re: [Dnsmasq-discuss] TTL in nested wild card CNAME

2020-03-17 Thread Sasha Litvak
Geert, Just in case, .consul is not a registered domain name. It is assigned with Hashicorp consul service discovery product and is internal to us. Whence forwarders. On Tue, Mar 17, 2020, 9:08 AM Sasha Litvak wrote: > Geert, > > What is the meaning of this? > > On Tue, Mar 17, 2020, 1:48 AM

Re: [Dnsmasq-discuss] TTL in nested wild card CNAME

2020-03-17 Thread Geert Stappers
On Mon, Mar 16, 2020 at 08:31:17PM -0500, Sasha Litvak wrote: > I couldn't find a specific answer anywhere so hopefully someone has a > clue on this list > > We are using dnsmasq on our servers as a caching dns solution. > > Most of our domains are resolved by a wildcard record like this > >