Re: [Dnsmasq-discuss] Becoming authoritative DNS for additional netblock

2015-12-01 Thread A C
On 2015-12-01 22:22, Albert ARIBAUD wrote: > Hi "A C", > > Cc:ing Simon in case the problem is indeed a weird dependency of > "server=" on "local=" -- or to ascertain it doesn't. > > Le Tue, 1 Dec 2015 19:53:37 -0800 > A C a écrit: > >> I just got it working. Your statement "but if the first line

[Dnsmasq-discuss] how can i make cache_size more than 10000

2015-12-01 Thread cochen
Hello everyone, When i use command " kill -s SIGUSR1 `cat /var/run/dnsmasq.pid`", the output in log as below: Dec 2 14:23:48 dnsmasq[22548]: cache size 1, 22230/42649 cache insertions re-used unexpired cache entries. Dec 2 14:23:48 dnsmasq[22548]: queries forwarded 97058, queries answer

Re: [Dnsmasq-discuss] Becoming authoritative DNS for additional netblock

2015-12-01 Thread Albert ARIBAUD
Hi "A C", Cc:ing Simon in case the problem is indeed a weird dependency of "server=" on "local=" -- or to ascertain it doesn't. Le Tue, 1 Dec 2015 19:53:37 -0800 A C a écrit: > I just got it working. Your statement "but if the first line wins" > gave me an idea. I cleaned up the config file a

Re: [Dnsmasq-discuss] trying the next DNS server if answer is "refused"?

2015-12-01 Thread Richard Hansen
On 2015-12-02 00:44, Richard Hansen wrote: > Is it possible to configure dnsmasq to try the next server in > /etc/resolv.conf if it gets a "refused" answer? I just noticed these bits from CHANGELOG.archive: version 2.21 Improve handling of SERVFAIL and REFUSED errors. Receiving

[Dnsmasq-discuss] trying the next DNS server if answer is "refused"?

2015-12-01 Thread Richard Hansen
Hi all, Is it possible to configure dnsmasq to try the next server in /etc/resolv.conf if it gets a "refused" answer? I have an unusual setup where some of the servers in /etc/resolv.conf are non-recursive servers that only answer queries for a particular subdomain (for which they are authoritati

Re: [Dnsmasq-discuss] Becoming authoritative DNS for additional netblock

2015-12-01 Thread A C
I just got it working. Your statement "but if the first line wins" gave me an idea. I cleaned up the config file and put these two lines in with this specific order: server=/vpn.example.com/10.0.0.140 local=/vpn.example.com/ This is exactly reversed of the order I was using (I had local first,

[Dnsmasq-discuss] dnsmasq cache-size and some problem when i use queryperf

2015-12-01 Thread cochen
hi everyone, I configured dnsmasq cache-size=102400, but when i use queryperf send more than 5000 domain the dnsmasq as below: Dec 2 11:40:33 dnsmasq[23797]: query[A] x from 10.144.35.149 Dec 2 11:40:33 dnsmasq[23797]: forwarded to 10.144.33.57 Dec 2 11:40:33 dnsmasq[23797]: forwa

Re: [Dnsmasq-discuss] Becoming authoritative DNS for additional netblock

2015-12-01 Thread A C
On 2015-12-01 13:22, Albert ARIBAUD wrote: > Hi "A C", > > Le Tue, 1 Dec 2015 09:59:07 -0800 > A C a écrit: > > (note : local= is synonymous to server=) > >> local=/example.com/ > > This one means *example.com should be resolved by reading /etc/hosts > or the DHCP lease info. Right, that's wh

Re: [Dnsmasq-discuss] Becoming authoritative DNS for additional netblock

2015-12-01 Thread Albert ARIBAUD
Hi "A C", Le Tue, 1 Dec 2015 09:59:07 -0800 A C a écrit: (note : local= is synonymous to server=) > local=/example.com/ This one means *example.com should be resolved by reading /etc/hosts or the DHCP lease info. > local=/vpn.example.com/ > server=/vpn.example.com/10.0.0.140 Those two are co

Re: [Dnsmasq-discuss] Becoming authoritative DNS for additional netblock

2015-12-01 Thread A C
On 2015-12-01 07:46, Albert ARIBAUD wrote: > Hi "A C", > > Le Mon, 30 Nov 2015 21:34:58 -0800 > A C a écrit: > >> On 2015-11-30 05:02, Albert ARIBAUD wrote: >> >>> Can you watch the router's DNS traffic rather than the VPN server's? >>> Possibly give a tcpdump of a successful and a failed DNS re

Re: [Dnsmasq-discuss] Becoming authoritative DNS for additional netblock

2015-12-01 Thread Albert ARIBAUD
Hi "A C", Le Mon, 30 Nov 2015 21:34:58 -0800 A C a écrit: > On 2015-11-30 05:02, Albert ARIBAUD wrote: > > > Can you watch the router's DNS traffic rather than the VPN server's? > > Possibly give a tcpdump of a successful and a failed DNS request? I > > assume you cannot change how dnsmasq runs