Re: [Dnsmasq-discuss] localdomain non-responsive without edns on ubuntu 14.04

2016-02-13 Thread Justin Karneges
Thanks for your reply, Simon. I'm using tcpdump to monitor src/dest port 53. I can see a request packet being sent to 127.0.0.1:53 and then another sent to 127.0.1.1:53 which doesn't respond. It turns out there are two dnsmasq services running, and the first is forwarding to the second. However, I

Re: [Dnsmasq-discuss] [PATCH] --dont-mirror-queries option

2016-02-13 Thread Kurt H Maier
On Sat, Feb 13, 2016 at 01:09:00PM +, Simon Kelley wrote: > > Will try and remember to reply to your other points, but on this one, > the way I'd do it (assuming you don't have problems with slow or > intermittent connectivity) is to have one (primary) dnsmasq which is the > DHCP server for al

Re: [Dnsmasq-discuss] no-ping option treats hosts as 'cannot ping'

2016-02-13 Thread Joolee
You are quite right Simon. The mistake was on my part, I didn't think VMware ESXi Standard switches would protect against a DHCP Starvation attack from pig.py so I wasn't looking in the right direction. It seems the standard switches do protect, even with both "MAC address changes" and "Forged Tran

Re: [Dnsmasq-discuss] Floating point exception

2016-02-13 Thread Simon Kelley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 The condition that causes it is having the start address all zeros and the end address all ones. Dnsmasq calculates the size of the range, in this case ff - 0 and then adds one to it, overflowing the 64-bit variable back to zero. It then

Re: [Dnsmasq-discuss] localdomain non-responsive without edns on ubuntu 14.04

2016-02-13 Thread Simon Kelley
I'm running 14.04 and just tried that experiment. I can't see any difference in behaviour. In each case the query gets passed on to the upstream nameserver, so I guess that the effect might originate there. Cheers, Simon On 12/02/16 17:44, Justin Karneges wrote: > Hi list, > > I noticed a we

Re: [Dnsmasq-discuss] [PATCH] --dont-mirror-queries option

2016-02-13 Thread Chris Novakovic
On 13/02/2016 13:09, Simon Kelley wrote: > Will try and remember to reply to your other points, but on this one, > the way I'd do it (assuming you don't have problems with slow or > intermittent connectivity) is to have one (primary) dnsmasq which is the > DHCP server for all three networks. You de

Re: [Dnsmasq-discuss] [PATCH] --dont-mirror-queries option

2016-02-13 Thread Simon Kelley
On 06/02/16 00:01, Chris Novakovic wrote: > Before writing this patch I tried to get similar functionality by > setting up secondary DNS-only servers on each of the hosts and having > them refuse queries that couldn't be answered locally, then configuring > the primary dnsmasq servers in the way y