Re: [Dnsmasq-discuss] [PATCH] dnsmasq_time: avoid signed integer overflow when HAVE_BROKEN_RTC

2021-09-29 Thread Simon Kelley
Nice catch, and nice patch. Patch applied. Cheers, Simon. On 28/09/2021 01:44, Matt Whitlock wrote: > The dnsmasq_time() function, in the case of HAVE_BROKEN_RTC, was calling > times() to read the number of ticks "elapsed since an arbitrary point in > the past" and then dividing that by

Re: [Dnsmasq-discuss] REFUSED after dropped packets

2021-09-29 Thread Simon Kelley
On 28/09/2021 18:08, Johannes Stezenbach wrote: > On Mon, Sep 27, 2021 at 10:45:25PM +0100, Simon Kelley wrote: >> >> I think that this is a 2.86 problem. There are two cases when dnsmasq >> will try another server with the same query: >> >> 1) When a client retries the query. >> 2) When the

Re: [Dnsmasq-discuss] What actually happens when dnsmasq is installed on a system running systemd (with systemd-resolved)?

2021-09-29 Thread Chris Green
On Tue, Sep 28, 2021 at 11:59:09PM +0100, Simon Kelley wrote: > On 28/09/2021 20:28, Chris Green wrote: > > I run xubuntu version 21.04 on several systems. Thus the default DNS > > cache and configuring of /etc/resolv.conf is done by systemd and its > > minions. > > > > Does anyone here know

Re: [Dnsmasq-discuss] [PATCH] Two small fixes

2021-09-29 Thread Petr Menšík
I do not remember it well also. But I think it was there to allow --interface=eth0:0 on startup and do actually something, when started without --bind-interfaces. I think there was issue with indextoname converting arrival packet index to a name. If it were not marked as label and handled special

[Dnsmasq-discuss] [PATCH] Addressing hostsdir shortcomings

2021-09-29 Thread Dominik Derigs
Dear Simon, dnsmasq v2.73 added --hostsdir which is an efficient way of re- loading only parts of the cache. When we tried to use hostsdir yesterday, we identified three problems. They are described below. Patches addressing them are attached. --- ISSUE 1 --- Logging imprecision Assume you have

Re: [Dnsmasq-discuss] Bug while using address=//::

2021-09-29 Thread E
> Which dnsmasq version are you using? Latest on Debian 11. ii dnsmasq 2.85-1 all Small caching DNS proxy and DHCP/TFTP server ii dnsmasq-base 2.85-1 amd64Small caching DNS

[Dnsmasq-discuss] [PATCH v1] remove stale contrib/Suse

2021-09-29 Thread Olaf Hering
dnsmasq is included in SUSE Linux since 2004. Signed-off-by: Olaf Hering --- contrib/Suse/README | 6 -- contrib/Suse/README.susefirewall | 27 contrib/Suse/dnsmasq-SuSE.patch | 23 --- contrib/Suse/dnsmasq-suse.spec | 111 ---

Re: [Dnsmasq-discuss] Bug while using address=//::

2021-09-29 Thread E
> IPv6 connectivity Why dnsmasq can't drop , when the server has no IPv6 connectivity at all? This doesn't make sense. Something like "no-ipv6" or "ipv4-only" switch would be really nice here... dnsmasq.conf simple example server=8.8.8.8#53 no-ipv6 # will drop client's questions

Re: [Dnsmasq-discuss] Bug while using address=//::

2021-09-29 Thread Petr Menšík
Hi Dominik, On 9/29/21 19:30, Dominik Derigs wrote: > Hey Petr, > > On Wed, 2021-09-29 at 17:49 +0200, Petr Menšík wrote: >> May I ask for your reason, why are you trying to explicitly block IPv6 in >> year 2021? > I asked the very same question when we received the reports about this bug > with

Re: [Dnsmasq-discuss] [PATCH] Add nftables set support

2021-09-29 Thread Simon Kelley
On 29/09/2021 22:39, Olaf Hering wrote: > On Sun, Aug 22, Chen Zhenge via Dnsmasq-discuss wrote: > >> +++ b/Makefile >> +nft_libs = `echo $(COPTS) | $(top)/bld/pkg-wrapper HAVE_NFTSET >> $(PKG_CONFIG) --libs libnftables` > > This change lacks pkg-config --cflags, like all the other

Re: [Dnsmasq-discuss] [PATCH] Two small fixes

2021-09-29 Thread Petr Menšík
On 9/29/21 19:45, Dominik Derigs wrote: > Hey Petr and Simon, > > I tried it with a temporary label and it seems to have worked. But I might > not have tested the right things. > > On Wed, 2021-09-29 at 12:55 +0200, Petr Menšík wrote: >> I think there was issue with indextoname converting arrival

Re: [Dnsmasq-discuss] [PATCH] Add nftables set support

2021-09-29 Thread Olaf Hering
On Sun, Aug 22, Chen Zhenge via Dnsmasq-discuss wrote: > +++ b/Makefile > +nft_libs = `echo $(COPTS) | $(top)/bld/pkg-wrapper HAVE_NFTSET > $(PKG_CONFIG) --libs libnftables` This change lacks pkg-config --cflags, like all the other existing pkg-config calls already have. Olaf

Re: [Dnsmasq-discuss] dnsmasq compile error: rfc1035.c:978:56: error: 'struct dnsmasq_daemon' has no member named 'workspacename'

2021-09-29 Thread Simon Kelley
On 29/09/2021 02:15, John Thomson wrote: > Hi Simon, > > On Tue, 28 Sep 2021, at 22:45, Simon Kelley wrote: >> This is a dnsmasq bug. I just pushed the fix to the git repo. > > Thank you for the fast fix. > >> Question. Is there a simple way to install libubus on Ubuntu or Debian? >> I have a

Re: [Dnsmasq-discuss] Bug while using address=//::

2021-09-29 Thread Dominik Derigs
Hey Petr, On Wed, 2021-09-29 at 17:49 +0200, Petr Menšík wrote: > May I ask for your reason, why are you trying to explicitly block IPv6 in > year 2021? I asked the very same question when we received the reports about this bug with the different allocated memory sized that was fixed two weeks

Re: [Dnsmasq-discuss] [PATCH] Two small fixes

2021-09-29 Thread Dominik Derigs
Hey Petr and Simon, I tried it with a temporary label and it seems to have worked. But I might not have tested the right things. On Wed, 2021-09-29 at 12:55 +0200, Petr Menšík wrote: > I think there was issue with indextoname converting arrival packet index > to a name. If it were not marked as

Re: [Dnsmasq-discuss] [PATCH] Two small fixes

2021-09-29 Thread Dominik Derigs
Hey Petr, On Wed, 2021-09-29 at 22:48 +0200, Petr Menšík wrote: > Source based response rules are in general cache unfriendly. What do you > need it for? Is the dnsmasq instance always the only source for name > resolution? We add many features on top of dnsmasq. One example is our support for

Re: [Dnsmasq-discuss] Bug while using address=//::

2021-09-29 Thread Geert Stappers via Dnsmasq-discuss
On Wed, Sep 29, 2021 at 09:15:15PM -0700, E wrote: > > IPv6 connectivity > > Why dnsmasq can't drop , > when the server has no IPv6 connectivity at all? > This doesn't make sense. No sense to those would don't understand what DNS is. (DNS is a key value database (which is distributed)) >

Re: [Dnsmasq-discuss] pxe-service entries in dnsmasq conf seem to fail non-proxy EFI boot

2021-09-29 Thread Petr Menšík
It is somehow hard to guess described results for each configuration (1. 2. 3.). It is unclear to me, what you saw for each variant printed by the computer. 1. seems to have wrong pcap file or it does not use configuration attached in linked archive. It seems it offers menu items from 2. archive

Re: [Dnsmasq-discuss] How may is too many CNAME references?

2021-09-29 Thread Petr Menšík
Please note too big blocklists take significantly more memory in dnsmasq runtime than on just address=hostname.example.net in plain text file. If your router does not have enough storage, add USB drive. If it has very low memory, I think you should direct your DNS queries to better suited central

Re: [Dnsmasq-discuss] What actually happens when dnsmasq is installed on a system running systemd (with systemd-resolved)?

2021-09-29 Thread Petr Menšík
I cannot answer this for Ubuntu, but on Fedora installation of dnsmasq does not disable anything. I think systemd-resolved it the default and is enabled on default. Whereas dnsmasq is just a service, which has to be enabled manually. Then systemd-resolved has to be disabled manually. Then

Re: [Dnsmasq-discuss] Bug while using address=//::

2021-09-29 Thread Petr Menšík
Hello E, May I ask for your reason, why are you trying to explicitly block IPv6 in year 2021? Unless you have public IPv6 route, your system should work just fine with any requests they make. src/dnsmasq -d --port 2053 --conf-file=/dev/null --log-queries --address=/./:: This seems to do