Package: dnsmasq Version: 2.75-1 Followup-For: Bug #805596 I have a similar problem. If I enable dnssec feature in dnsmasq, name resolving service is unreliable. Sometimes, it works. While other times (like when after a swssup/resume) it fails completely.
A simple dig results it: rrs@learner:~/.rrs-home/Community/Packaging/libstoragemgmt (master)$ dig www.google.co.in;; Truncated, retrying in TCP mode. ; <<>> DiG 9.9.5-12+b1-Debian <<>> www.google.co.in ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 34514 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.google.co.in. IN A ;; Query time: 2 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Mon Nov 23 20:49:17 IST 2015 ;; MSG SIZE rcvd: 34 2015-11-23 / 20:49:17 ♒♒♒ ☺ And there's nothing in the dnsmasq journal. -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (101, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.3.0+ (SMP w/4 CPU cores; PREEMPT) Locale: LANG=en_IN.utf8, LC_CTYPE=en_IN.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages dnsmasq depends on: ii dnsmasq-base 2.75-1 ii init-system-helpers 1.24 ii netbase 5.3 dnsmasq recommends no packages. Versions of packages dnsmasq suggests: ii resolvconf 1.78 -- no debconf information
