<div dir="ltr">package resolvconf<div>severity 856015 normal<br></div><div>retitle 856015 Fails in networks with non-equivalent nameservers</div><div><div>reassign 856015 dnsmasq</div>merge 856015 675319</div><div>stop</div><div><br></div><div>Hi. This is a known behavior of dnsmasq.</div><div><br></div><div>-- </div><div>Thomas<br><br><div class="gmail_quote"><div dir="ltr">On Mon, Feb 27, 2017 at 11:45 AM Daniel Pocock <<a href="mailto:daniel@pocock.pro">daniel@pocock.pro</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br class="gmail_msg">
<br class="gmail_msg">
I ran tcpdump on both the host and the OpenWRT router until another one<br class="gmail_msg">
of these failures occurred.<br class="gmail_msg">
<br class="gmail_msg">
The problem appears to be in the router, but as it is running dnsmasq as<br class="gmail_msg">
well, just like resolvconf, resolvconf users could also be impacted by<br class="gmail_msg">
the same issue depending on their configuration.<br class="gmail_msg">
<br class="gmail_msg">
The router was sending the query to 5 different servers.  One of them is<br class="gmail_msg">
not recursive and sends a response with the REFUSED error code.<br class="gmail_msg">
<br class="gmail_msg">
If that is the first response dnsmasq receives, it sends a refused error<br class="gmail_msg">
response back to the client.  It doesn't appear to wait for the other<br class="gmail_msg">
responses or they didn't come quickly enough.<br class="gmail_msg">
<br class="gmail_msg">
dnsmasq version on the router is 2.73-1<br class="gmail_msg">
<br class="gmail_msg">
dnsmasq version on the Debian host is 2.72-3+deb8u1<br class="gmail_msg">
<br class="gmail_msg">
stretch appears to have 2.76-5<br class="gmail_msg">
<br class="gmail_msg">
Upstream changelog for 2.76-5 doesn't mention the issue.<br class="gmail_msg">
<br class="gmail_msg">
Query sent on the dnsmasq mailing list<br class="gmail_msg">
<br class="gmail_msg">
<a href="http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2017q1/011261.html" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2017q1/011261.html</a><br class="gmail_msg">
<br class="gmail_msg">
_______________________________________________<br class="gmail_msg">
Resolvconf-devel mailing list<br class="gmail_msg">
<a href="mailto:Resolvconf-devel@lists.alioth.debian.org" class="gmail_msg" target="_blank">Resolvconf-devel@lists.alioth.debian.org</a><br class="gmail_msg">
<a href="http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/resolvconf-devel" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/resolvconf-devel</a><br class="gmail_msg">
</blockquote></div></div></div>