Debian Bug report logs - #834722
dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vladimir Kudrya <pzs-fs@yandex.ru>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Date: Thu, 18 Aug 2016 13:07:27 +0300

Package: dnsmasq-base
Version: 2.76-2
Severity: normal

Dear Maintainer, dnsmasq while govenred by NetworkManager fails to forward
queries to upstream DNS server when recieved server list via DBus for second time.

Setup:
LAN: 10.1.2.0/16, DNS server: 10.1.2.1.
VPN: 192.168.11.0/24, domain: remotedomain.lan, DNS servers: 192.168.11.1 192.168.11.200

starting NetworkManager, dnsmasq reports:

	setting upstream servers from DBus
	using nameserver 10.1.2.1#53(via wlp2s0b1)

everything works. Connecting to VPN for the first time, querying for host.remotedomain.lan

	setting upstream servers from DBus
	using nameserver 10.1.2.1#53(via wlp2s0b1)
	using nameserver 192.168.11.200#53 for domain remotedomain.lan
	using nameserver 192.168.11.200#53 for domain 25.11.168.192.in-addr.arpa
	using nameserver 192.168.11.200#53 for domain 11.168.192.in-addr.arpa
	using nameserver 192.168.11.1#53 for domain remotedomain.lan
	using nameserver 192.168.11.1#53 for domain 25.11.168.192.in-addr.arpa
	using nameserver 192.168.11.1#53 for domain 11.168.192.in-addr.arpa
	query[A] host.remotedomain.lan from 127.0.0.1
	forwarded host.remotedomain.lan to 192.168.11.200
	forwarded host.remotedomain.lan to 192.168.11.1
	reply host.remotedomain.lan is 192.168.11.170

DNS query successfully answered, disconnecting from VPN:

	setting upstream servers from DBus
	using nameserver 10.1.2.1#53(via wlp2s0b1)

Connecting again and querying for host.remotedomain.lan

	setting upstream servers from DBus
	using nameserver 10.1.2.1#53(via wlp2s0b1)
	using nameserver 192.168.11.200#53 for domain remotedomain.lan
	using nameserver 192.168.11.200#53 for domain 25.11.168.192.in-addr.arpa
	using nameserver 192.168.11.200#53 for domain 11.168.192.in-addr.arpa
	using nameserver 192.168.11.1#53 for domain remotedomain.lan
	using nameserver 192.168.11.1#53 for domain 25.11.168.192.in-addr.arpa
	using nameserver 192.168.11.1#53 for domain 11.168.192.in-addr.arpa
	query[A] host.remotedomain.lan from 127.0.0.1

That's it. It does not forward the query. 'host host.remotedomain.lan' gives:

	Host host.remotedomain.lan not found: 5(REFUSED)

>From now on, and after any subsequent reconnects it refuses to answer queries
for *.remotedomain.lan or 11.168.192.in-addr.arpa.

There are no networking problems, quirying directly from remote servers works.
Any other queries that supposed to go through 10.1.2.1 do work.


-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (900, 'testing'), (400, 'unstable'), (300, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages dnsmasq-base depends on:
ii  adduser                  3.115
ii  libc6                    2.23-4
ii  libdbus-1-3              1.10.8-1
ii  libgmp10                 2:6.1.1+dfsg-1
ii  libhogweed4              3.2-1
ii  libidn11                 1.33-1
ii  libnetfilter-conntrack3  1.0.5-1
ii  libnettle6               3.2-1
ii  libnfnetlink0            1.0.1-3

Versions of packages dnsmasq-base recommends:
pn  dns-root-data  <none>

dnsmasq-base suggests no packages.

-- no debconf information

Message #10 received at 834722@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Vladimir Kudrya <pzs-fs@yandex.ru>

Cc: 834722@bugs.debian.org

Subject: Re: Bug#834722: dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Date: Thu, 22 Sep 2016 22:11:37 +0200

[Message part 1 (text/plain, inline)]

 ❦ 18 août 2016 12:07 CEST, Vladimir Kudrya <pzs-fs@yandex.ru> :

> Dear Maintainer, dnsmasq while govenred by NetworkManager fails to forward
> queries to upstream DNS server when recieved server list via DBus for
> second time.

I have the same problem. Therefore, when switching from one network to
another, I have to kill dnsmasq to make it work again. I'll try to debug
a bit more next time (but usually, this happens at the most inconvenient
moment).
-- 
Avoid multiple exits from loops.
            - The Elements of Programming Style (Kernighan & Plauger)

[signature.asc (application/pgp-signature, inline)]

Message #15 received at 834722@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Vladimir Kudrya <pzs-fs@yandex.ru>

Cc: 834722@bugs.debian.org

Subject: Re: Bug#834722: dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Date: Tue, 27 Sep 2016 10:04:05 +0200

[Message part 1 (text/plain, inline)]

 ❦ 22 septembre 2016 22:11 CEST, Vincent Bernat <bernat@debian.org> :

>> Dear Maintainer, dnsmasq while govenred by NetworkManager fails to forward
>> queries to upstream DNS server when recieved server list via DBus for
>> second time.
>
> I have the same problem. Therefore, when switching from one network to
> another, I have to kill dnsmasq to make it work again. I'll try to debug
> a bit more next time (but usually, this happens at the most inconvenient
> moment).

Here is a strace during the problem:

recvmsg(4, {msg_name(16)={sa_family=AF_INET, sin_port=htons(50141), sin_addr=inet_addr("127.0.0.1")}, msg_iov(1)=[{"z\320\1\0\0\1\0\0\0\0\0\0\4push\10services\7mozil"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 43
sendto(11, "3\202\1\0\0\1\0\0\0\0\0\0\4push\10services\7mozil"..., 43, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("8.8.8.8")}, 16) = -1 ENODEV (No such device)
sendto(11, "3\202\1\0\0\1\0\0\0\0\0\0\4push\10services\7mozil"..., 43, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("8.8.4.4")}, 16) = -1 ENODEV (No such device)

FD 11 is:

dnsmasq 21412 nobody   11u     IPv4            1438842      0t0     UDP *:38279

So, it doesn't really seem to be related to the original bug
report. Sorry for the noise, I'll dig more and open another bug report
if needed.
-- 
Use recursive procedures for recursively-defined data structures.
            - The Elements of Programming Style (Kernighan & Plauger)

[signature.asc (application/pgp-signature, inline)]

Message #20 received at 834722@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Vladimir Kudrya <pzs-fs@yandex.ru>

Cc: 834722@bugs.debian.org

Subject: Re: Bug#834722: dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Date: Thu, 29 Sep 2016 12:15:38 +0200

[Message part 1 (text/plain, inline)]

 ❦ 27 septembre 2016 10:04 CEST, Vincent Bernat <bernat@debian.org> :

>>> Dear Maintainer, dnsmasq while govenred by NetworkManager fails to forward
>>> queries to upstream DNS server when recieved server list via DBus for
>>> second time.
>>
>> I have the same problem. Therefore, when switching from one network to
>> another, I have to kill dnsmasq to make it work again. I'll try to debug
>> a bit more next time (but usually, this happens at the most inconvenient
>> moment).
>
> Here is a strace during the problem:
>
> recvmsg(4, {msg_name(16)={sa_family=AF_INET, sin_port=htons(50141),
> sin_addr=inet_addr("127.0.0.1")},
> msg_iov(1)=[{"z\320\1\0\0\1\0\0\0\0\0\0\4push\10services\7mozil"...,
> 4096}], msg_controllen=0, msg_flags=0}, 0) = 43
> sendto(11, "3\202\1\0\0\1\0\0\0\0\0\0\4push\10services\7mozil"..., 43,
> 0, {sa_family=AF_INET, sin_port=htons(53),
> sin_addr=inet_addr("8.8.8.8")}, 16) = -1 ENODEV (No such device)
> sendto(11, "3\202\1\0\0\1\0\0\0\0\0\0\4push\10services\7mozil"..., 43,
> 0, {sa_family=AF_INET, sin_port=htons(53),
> sin_addr=inet_addr("8.8.4.4")}, 16) = -1 ENODEV (No such device)
>
> FD 11 is:
>
> dnsmasq 21412 nobody   11u     IPv4            1438842      0t0     UDP *:38279
>
> So, it doesn't really seem to be related to the original bug
> report. Sorry for the noise, I'll dig more and open another bug report
> if needed.

Well, in fact, it seems that's the same problem. The problem is that
dnsmasq as configured by Network Manager uses
--bind-interfaces. Therefore, the above socket is in fact bound to an
interface. This can be checked with "ss --info --extended". So, when the
interface disappear, we are not able to send receive using the socket
anymore. Configuration through DBus doesn't update the interface the
socket is bound to.
-- 
Don't use conditional branches as a substitute for a logical expression.
            - The Elements of Programming Style (Kernighan & Plauger)

[signature.asc (application/pgp-signature, inline)]

Message #25 received at 834722@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Vladimir Kudrya <pzs-fs@yandex.ru>

Cc: 834722@bugs.debian.org

Subject: Re: Bug#834722: dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Date: Tue, 25 Oct 2016 10:04:54 +0200

[Message part 1 (text/plain, inline)]

 ❦ 29 septembre 2016 12:15 +0200, Vincent Bernat <bernat@debian.org> :

>> dnsmasq 21412 nobody   11u     IPv4            1438842      0t0     UDP *:38279
>>
>> So, it doesn't really seem to be related to the original bug
>> report. Sorry for the noise, I'll dig more and open another bug report
>> if needed.
>
> Well, in fact, it seems that's the same problem. The problem is that
> dnsmasq as configured by Network Manager uses
> --bind-interfaces. Therefore, the above socket is in fact bound to an
> interface. This can be checked with "ss --info --extended". So, when the
> interface disappear, we are not able to send receive using the socket
> anymore. Configuration through DBus doesn't update the interface the
> socket is bound to.

Here are some pointers:

 https://bugzilla.redhat.com/show_bug.cgi?id=1367772
 http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=2675f2061525bc954be14988d64384b74aa7bf8b

I am testing the above patch myself. Will tell if it works.
-- 
Don't use conditional branches as a substitute for a logical expression.
            - The Elements of Programming Style (Kernighan & Plauger)

[signature.asc (application/pgp-signature, inline)]

Message #30 received at 834722@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Vladimir Kudrya <pzs-fs@yandex.ru>

Cc: 834722@bugs.debian.org

Subject: Re: Bug#834722: dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Date: Wed, 26 Oct 2016 22:19:58 +0200

Control: tags -1 + patch fixed-upstream

<#secure method=pgpmime mode=sign>
 ❦ 25 octobre 2016 10:04 +0200, Vincent Bernat <bernat@debian.org> :

>>> dnsmasq 21412 nobody   11u     IPv4            1438842      0t0     UDP *:38279
>>>
>>> So, it doesn't really seem to be related to the original bug
>>> report. Sorry for the noise, I'll dig more and open another bug report
>>> if needed.
>>
>> Well, in fact, it seems that's the same problem. The problem is that
>> dnsmasq as configured by Network Manager uses
>> --bind-interfaces. Therefore, the above socket is in fact bound to an
>> interface. This can be checked with "ss --info --extended". So, when the
>> interface disappear, we are not able to send receive using the socket
>> anymore. Configuration through DBus doesn't update the interface the
>> socket is bound to.
>
> Here are some pointers:
>
>  https://bugzilla.redhat.com/show_bug.cgi?id=1367772
>  http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=2675f2061525bc954be14988d64384b74aa7bf8b
>
> I am testing the above patch myself. Will tell if it works.

For me, it fixes the problem.
-- 
I have never let my schooling interfere with my education.
		-- Mark Twain

Message #37 received at 834722@bugs.debian.org (full text, mbox, reply):

From: Iain Lane <laney@debian.org>

To: 834722@bugs.debian.org

Subject: Re: Bug#834722: dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Date: Wed, 2 Nov 2016 11:04:55 +0000

[Message part 1 (text/plain, inline)]

On Wed, Oct 26, 2016 at 10:19:58PM +0200, Vincent Bernat wrote:
> Control: tags -1 + patch fixed-upstream
> 
> <#secure method=pgpmime mode=sign>
>  ❦ 25 octobre 2016 10:04 +0200, Vincent Bernat <bernat@debian.org> :
> 
> >>> dnsmasq 21412 nobody   11u     IPv4            1438842      0t0     UDP *:38279
> >>>
> >>> So, it doesn't really seem to be related to the original bug
> >>> report. Sorry for the noise, I'll dig more and open another bug report
> >>> if needed.
> >>
> >> Well, in fact, it seems that's the same problem. The problem is that
> >> dnsmasq as configured by Network Manager uses
> >> --bind-interfaces. Therefore, the above socket is in fact bound to an
> >> interface. This can be checked with "ss --info --extended". So, when the
> >> interface disappear, we are not able to send receive using the socket
> >> anymore. Configuration through DBus doesn't update the interface the
> >> socket is bound to.
> >
> > Here are some pointers:
> >
> >  https://bugzilla.redhat.com/show_bug.cgi?id=1367772
> >  http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=2675f2061525bc954be14988d64384b74aa7bf8b
> >
> > I am testing the above patch myself. Will tell if it works.
> 
> For me, it fixes the problem.

Sorry to "me too" - but me too. :)

I wonder if this can be uploaded, please? Note that there's a followup
crash fix:

  http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=16800ea072dd0cdf14d951c4bb8d2808b3dfe53d

-- 
Iain Lane                                  [ iain@orangesquash.org.uk ]
Debian Developer                                   [ laney@debian.org ]
Ubuntu Developer                                   [ laney@ubuntu.com ]

[signature.asc (application/pgp-signature, inline)]

Message #42 received at 834722@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Iain Lane <laney@debian.org>

Cc: 834722@bugs.debian.org

Subject: Re: Bug#834722: dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Date: Sat, 19 Nov 2016 09:44:30 +0100

[Message part 1 (text/plain, inline)]

 ❦  2 novembre 2016 11:04 GMT, Iain Lane <laney@debian.org> :

>> > Here are some pointers:
>> >
>> >  https://bugzilla.redhat.com/show_bug.cgi?id=1367772
>> >  http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=2675f2061525bc954be14988d64384b74aa7bf8b
>> >
>> > I am testing the above patch myself. Will tell if it works.
>> 
>> For me, it fixes the problem.
>
> Sorry to "me too" - but me too. :)
>
> I wonder if this can be uploaded, please? Note that there's a followup
> crash fix:
>
>   http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=16800ea072dd0cdf14d951c4bb8d2808b3dfe53d

Thanks for pointing this out. I was looking at why dnsmasq was now
segfaulting since a few days. I'll try with this additional patch for a
few days, then I'll do a NMU to a delayed queue.
-- 
If two people love each other, there can be no happy end to it.
		-- Ernest Hemingway

[signature.asc (application/pgp-signature, inline)]

Message #49 received at 834722@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Iain Lane <laney@debian.org>

Cc: 834722@bugs.debian.org

Subject: Re: Bug#834722: dnsmasq-base: dnsmasq does not forward queries after recieving servers via DBus second time

Date: Sat, 26 Nov 2016 20:50:05 +0100

[Message part 1 (text/plain, inline)]

 ❦ 19 novembre 2016 09:44 +0100, Vincent Bernat <bernat@debian.org> :

>>> > Here are some pointers:
>>> >
>>> >  https://bugzilla.redhat.com/show_bug.cgi?id=1367772
>>> >  http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=2675f2061525bc954be14988d64384b74aa7bf8b
>>> >
>>> > I am testing the above patch myself. Will tell if it works.
>>> 
>>> For me, it fixes the problem.
>>
>> Sorry to "me too" - but me too. :)
>>
>> I wonder if this can be uploaded, please? Note that there's a followup
>> crash fix:
>>
>>   http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=16800ea072dd0cdf14d951c4bb8d2808b3dfe53d
>
> Thanks for pointing this out. I was looking at why dnsmasq was now
> segfaulting since a few days. I'll try with this additional patch for a
> few days, then I'll do a NMU to a delayed queue.

I have uploaded a NMU with the attached debdiff to DELAYED/5.

[dnsmasq_2.76-4.1.diff (text/x-diff, attachment)]

[Message part 3 (text/plain, inline)]

-- 
Avoid temporary variables.
            - The Elements of Programming Style (Kernighan & Plauger)

[signature.asc (application/pgp-signature, inline)]

Message #54 received at 834722-close@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: 834722-close@bugs.debian.org

Subject: Bug#834722: fixed in dnsmasq 2.76-4.1

Date: Thu, 01 Dec 2016 21:04:50 +0000

Source: dnsmasq
Source-Version: 2.76-4.1

We believe that the bug you reported is fixed in the latest version of
dnsmasq, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 834722@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vincent Bernat <bernat@debian.org> (supplier of updated dnsmasq package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 26 Nov 2016 20:15:34 +0100
Source: dnsmasq
Binary: dnsmasq dnsmasq-base dnsmasq-utils
Architecture: source
Version: 2.76-4.1
Distribution: unstable
Urgency: medium
Maintainer: Simon Kelley <simon@thekelleys.org.uk>
Changed-By: Vincent Bernat <bernat@debian.org>
Description:
 dnsmasq    - Small caching DNS proxy and DHCP/TFTP server
 dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server
 dnsmasq-utils - Utilities for manipulating DHCP leases
Closes: 834722
Changes:
 dnsmasq (2.76-4.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Add two upstream patches to fix binding to an interface being
     destroyed and recreated. Closes: #834722.
       + 2675f2061525bc954be14988d64384b74aa7bf8b
       + 16800ea072dd0cdf14d951c4bb8d2808b3dfe53d
Checksums-Sha1:
 2c4d79c122b3ec6f3adec6d594e59cc783b009c3 1909 dnsmasq_2.76-4.1.dsc
 5c01ce7d21ef9fd7f4598633960d1cb9473a7105 697687 dnsmasq_2.76.orig.tar.gz
 bc38ca9990559e0cda1b471849303ca2f65add0d 24038 dnsmasq_2.76-4.1.diff.gz
Checksums-Sha256:
 d0f875f8488a122add3a85ef221affaca4f115c3c54cf62e13223330411d76c6 1909 dnsmasq_2.76-4.1.dsc
 61a6e9cdc236dde71f4e7d117cd56404a6d878e45556799c497a057b21108208 697687 dnsmasq_2.76.orig.tar.gz
 c610bed9cc54df67b59947206b1f77d8c07a33e6f86eae93943716da35064652 24038 dnsmasq_2.76-4.1.diff.gz
Files:
 d4894638b866cefe3ac40772c90ff6d3 1909 net optional dnsmasq_2.76-4.1.dsc
 29744393167540affaef0539f30fb0e4 697687 net optional dnsmasq_2.76.orig.tar.gz
 b458cc0301b4f8329b77192dae7de7fe 24038 net optional dnsmasq_2.76-4.1.diff.gz

-----BEGIN PGP SIGNATURE-----
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=ejiP
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.