Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FS#677 - dnsmasq-full does not respond to DNS queries on IPv6 link-local addresses #6031

Closed
openwrt-bot opened this issue Apr 3, 2017 · 1 comment
Labels

Comments

@openwrt-bot
Copy link

bernhardschmidt:

LEDE 17.01 on Buffalo WZR-HP-AG300NH, tested with both dnsmasq-full 2.76 from 17.01 and 2.77test4-1 from trunk

The link-local address of the router is advertised as DNS resolver in the IPv6 router advertisement. Queries to that address are received on the router, logged in dnsmasq, but an answer is never sent (verified with tcpdump).

Tue Apr 4 00:10:20 2017 daemon.info dnsmasq[29569]: 15 fe80::6600:6aff:fe6a:9cf4%br-lan/34427 query[A] www.heise.de from fe80::6600:6aff:fe6a:9cf4
Tue Apr 4 00:10:20 2017 daemon.info dnsmasq[29569]: 15 fe80::6600:6aff:fe6a:9cf4%br-lan/34427 cached www.heise.de is 193.99.144.85

A query to the global address of the very same router works just fine.

@openwrt-bot
Copy link
Author

None:

Mon Aug 28 17:46:09 2017 daemon.info dnsmasq[16644]: 8 fe80::68c2:cd6d:cb27:e9a2%br-wifi5_priv/37859 query[A] bbc.co.uk from fe80::68c2:cd6d:cb27:e9a2
Mon Aug 28 17:46:09 2017 daemon.info dnsmasq[16644]: 8 fe80::68c2:cd6d:cb27:e9a2%br-wifi5_priv/37859 cached bbc.co.uk is 212.58.244.23

kevin@Animal ~/ $ nslookup

server fe80::62e3:27ff:feaf:9e50%wlan0
Default server: fe80::62e3:27ff:feaf:9e50%wlan0
Address: fe80::62e3:27ff:feaf:9e50%3#53
bbc.co.uk
Server: fe80::62e3:27ff:feaf:9e50%wlan0
Address: fe80::62e3:27ff:feaf:9e50%3#53

Non-authoritative answer:
Name: bbc.co.uk
Address: 212.58.244.23

As you can see, it works for me - I have 5 different ipv6 /64 prefixes across 5 bridges, all with globally routable IPv6 and link-local IPv6 addresses. dnsmasq listens on all bridges and responds correctly to both global and link-local addresses.

firewall?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant