dnsmasq forwarding - Ask Ubuntu


i trying understand how dnsmasq's forwarding works. read manual this:

"[...]dnsmasq accepts dns queries , either answers them small, local, cache or forwards them real, recursive, dns server.[...]"

so far understand if dns-request machine asks dnsmasq ip adress given domain. if dnsmasq cannot answer dnsmasq forward request "to real, recursive, dns server."

how forwarding work? tried answer question myself way of googling did not answer question.

when @ via wireshark see kind of pattern:

127.0.0.1   ->  127.0.1.1   (standard query) 192.168.1.2 ->  192.168.1.1 (standard query) 192.168.1.1 ->  192.168.1.2 (standard query response) 127.0.1.1   ->  127.0.0.1   (standard query response)

can explain going on there?

edit:

what asking how dnsmasq know answer of 192.168.1.1 is. in fact 192.168.1.1 tells 192.168.1.2 ip address. how 127.0.1.1 know ip address? how information transferred?

i expect this:

192.168.1.1 -> 127.0.1.1 or 192.168.1.2 -> 127.0.1.1

i expect there routing going on transfer information not.

wireshark works somewhere between network , transport on tcp/ip model. you're not seeing data being exchanged @ application level, why wireshark output doesn't make sense when you're trying watch dns. you're seeing packets flow , direction after application has determined occur. have watch dnsmasq information you're looking for. if add -q script starts dnsmasq send log syslog.

here example output able find.

jan 17 23:33:15 server001 dnsmasq[10708]: query[a] sgi.com 192.168.0.20 jan 17 23:33:15 server001 dnsmasq[10708]: forwarded sgi.com 127.0.0.2 jan 17 23:33:15 server001 dnsmasq[10708]: query[aaaa] sgi.com 192.168.0.20 jan 17 23:33:15 server001 dnsmasq[10708]: forwarded sgi.com 127.0.0.2 jan 17 23:33:15 server001 dnsmasq[10708]: dnssec-query[ds] sgi.com 127.0.0.2 jan 17 23:33:15 server001 dnsmasq[10708]: dnssec-query[ds] sgi.com 127.0.0.2 jan 17 23:33:15 server001 dnsmasq[10708]: validation result insecure jan 17 23:33:15 server001 dnsmasq[10708]: reply sgi.com 192.48.138.174 jan 17 23:33:15 server001 dnsmasq[10708]: validation result insecure jan 17 23:33:15 server001 dnsmasq[10708]: reply sgi.com nodata-ipv6

Comments

Post a Comment

Popular posts from this blog

download - Firefox cannot save files (most of the time), how to solve? - Super User

this not full duplicate of this question or this question , though base question same. however, questions have no answers. for on half year have problems downloading files firefox. when click on download link, download dialog opened asking me do, save or open it. immediately, there error/warning pop-up (twice, can see 1 @ first) ok button. looks this message : "c:\users\%user%\appdata\local\temp\wbbdv9k8.zip.part not saved because source file not read. try again later or contact server administrator." replace '%user%' name of user trying download. after closing pop-up, download dialog disappears , have minimize firefox , open again, see other pop-up. downloading exact same file internet explorer work, not desired. i tried solutions here . tried solutions here . tried disabling extensions. tried fixing permissions on temp folder. tried making files , folder in profile directory non-readonly. tried running firefox administrator. tried ...
Read more

windows - "-2146893807 NTE_NOT_FOUND" when repair certificate store - Super User

i try repair certificate store in windows 10 doing c:\windows\system32>certutil -store -user ‎330000019dba8d5dddb98062a900000000019d "personal" certutil: -store command failed: 0x80090011 (-2146893807 nte_not_found) certutil: object not found. i have double check mmc, certificate details serial number of certificate. still fail repair certificate store. can please help? i getting same error when trying export pfx. turns out had export c:\cert.pfx instead of cert.pfx (it trying export file cert store ( cert:\localmachine\my ).
Read more