Re: [Dnsmasq-discuss] config error is REFUSED (EDE: not ready) since v2.86
On Wed, Sep 06, 2023 at 12:11:19AM -0400, Jack YAPI wrote: > We do use dnsmasq 2.85 but any newer versions passed 2.85 result in "config > error is REFUSED (EDE:not ready)". > I saw a patch was made to handle the address type in > https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q3/015644.html copied to here: | Apologies all. | | The | | --address=/#/.. | | functionality got omitted in the 2.86 domain-search rewrite, which | explains everything. Treating # as a domain name, it doesn't match | the test domain, so dnsmasq tries to forward upstream. There are no | upstream servers configured, so it returns REFUSED. | | I just pushed a pretty straightforward patch to fix this. | | Cheers, | | Simon. > > Can we have a similar patch to handle the server type as well. It looks > like it's only grabbing # as domain without processing the ip address > appended to it. > > In our case we are trying to start dnsmasq with > > dnsmasq -k -q \ > --log-facility=- \ > --log-debug \ > --cache-size=0 \ > --no-hosts \ > --no-resolv \ > --server=/#/x.x.x.x \ > > > with x.x.x.x is the ip address. The IP-address of what? > In the log we can see that it's referencing the domain as: > for domain # > config error is REFUSED (EDE:not ready)" I haven't tried yet to reproduce the error. I don't understand what the > --server=/#/x.x.x.x \ is supposed to do. The \ seems to be lost, so am I :-) Groeten Geert Stappers -- Silence is hard to parse ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss
[Dnsmasq-discuss] config error is REFUSED (EDE: not ready) since v2.86
We do use dnsmasq 2.85 but any newer versions passed 2.85 result in "config error is REFUSED (EDE:not ready)". I saw a patch was made to handle the address type in https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q3/015644.html Can we have a similar patch to handle the server type as well. It looks like it's only grabbing # as domain without processing the ip address appended to it. In our case we are trying to start dnsmasq with dnsmasq -k -q \ --log-facility=- \ --log-debug \ --cache-size=0 \ --no-hosts \ --no-resolv \ --server=/#/x.x.x.x \ with x.x.x.x is the ip address. In the log we can see that it's referencing the domain as: for domain # config error is REFUSED (EDE:not ready)" Thank you. ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss
Re: [Dnsmasq-discuss] config error is REFUSED (EDE: not ready) since v2.86
On Thu, 2021-09-23 at 11:00 +0100, Simon Kelley wrote: > I just pushed a pretty straightforward patch to fix this. Can confirm this fixes it. Best, Dominik ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss
Re: [Dnsmasq-discuss] config error is REFUSED (EDE: not ready) since v2.86
Hi Simon, Thank you for the patch, and the explanation. Best, Jean-Philippe Le 23/09/2021 à 12:00, Simon Kelley a écrit : Apologies all. The --address=/#/.. functionality got omitted in the 2.86 domain-search rewrite, which explains everything. Treating # as a domain name, it doesn't match the test domain, so dnsmasq tries to forward upstream. There are no upstream servers configured, so it returns REFUSED. I just pushed a pretty straightforward patch to fix this. Cheers, Simon. On 22/09/2021 14:50, Jean-Philippe Lambert wrote: Hi Dominik, Thank you for trying. Le 22/09/2021 à 14:05, Dominik Derigs a écrit : Hey Jean-Philippe, The config is different in your two tries, but I guess this is just a typo. Yes. Anyway, I repeated your test on latest master and it is still showing the same as v2.86. Yes, on my side too. Going back, I noticed that v2.85 is the last that still works for me. On Wed, 2021-09-22 at 12:29 +0200, Jean-Philippe Lambert wrote: Is this a bug I guess so and it is likely linked to On Wed, 2021-09-22 at 12:29 +0200, Jean-Philippe Lambert wrote: dnsmasq: warning: no upstream servers configured But I precisely do not want an other server to answer, as I would like to redirect all traffic... I get the same result when adding --local='/#/' $ sudo ./bin/dnsmasq --no-daemon --log-queries=extra --log-debug --listen-address=127.0.0.1 --address='/#/127.0.0.1' --no-hosts --no-resolv --local='/#/' Password: dnsmasq: started, version 2.86 cachesize 150 dnsmasq: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile dnsmasq: setting --bind-interfaces option because of OS limitations dnsmasq: warning: no upstream servers configured dnsmasq: using only locally-known addresses for # dnsmasq: cleared cache dnsmasq: 1 127.0.0.1/64713 query[A] a.com from 127.0.0.1 dnsmasq: 1 127.0.0.1/64713 config error is REFUSED (EDE: not ready) Best, Jean-Philippe ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss
Re: [Dnsmasq-discuss] config error is REFUSED (EDE: not ready) since v2.86
Apologies all. The --address=/#/.. functionality got omitted in the 2.86 domain-search rewrite, which explains everything. Treating # as a domain name, it doesn't match the test domain, so dnsmasq tries to forward upstream. There are no upstream servers configured, so it returns REFUSED. I just pushed a pretty straightforward patch to fix this. Cheers, Simon. On 22/09/2021 14:50, Jean-Philippe Lambert wrote: > Hi Dominik, > > Thank you for trying. > > Le 22/09/2021 à 14:05, Dominik Derigs a écrit : >> Hey Jean-Philippe, >> >> The config is different in your two tries, but I guess this is >> just a typo. > > Yes. > >> >> Anyway, I repeated your test on latest master and it is still >> showing the same as v2.86. >> > > Yes, on my side too. Going back, I noticed that v2.85 is the last that > still works for me. > >> On Wed, 2021-09-22 at 12:29 +0200, Jean-Philippe Lambert wrote: >>> Is this a bug >> >> I guess so and it is likely linked to >> >> On Wed, 2021-09-22 at 12:29 +0200, Jean-Philippe Lambert wrote: >>> dnsmasq: warning: no upstream servers configured >> > > But I precisely do not want an other server to answer, as I would like > to redirect all traffic... I get the same result when adding --local='/#/' > >> $ sudo ./bin/dnsmasq --no-daemon --log-queries=extra --log-debug >> --listen-address=127.0.0.1 --address='/#/127.0.0.1' --no-hosts >> --no-resolv --local='/#/' >> Password: >> dnsmasq: started, version 2.86 cachesize 150 >> dnsmasq: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n >> no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth >> no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile >> dnsmasq: setting --bind-interfaces option because of OS limitations >> dnsmasq: warning: no upstream servers configured >> dnsmasq: using only locally-known addresses for # >> dnsmasq: cleared cache >> dnsmasq: 1 127.0.0.1/64713 query[A] a.com from 127.0.0.1 >> dnsmasq: 1 127.0.0.1/64713 config error is REFUSED (EDE: not ready) > > > > Best, > > Jean-Philippe > > ___ > Dnsmasq-discuss mailing list > Dnsmasq-discuss@lists.thekelleys.org.uk > https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss
Re: [Dnsmasq-discuss] config error is REFUSED (EDE: not ready) since v2.86
Hi Dominik, Thank you for trying. Le 22/09/2021 à 14:05, Dominik Derigs a écrit : Hey Jean-Philippe, The config is different in your two tries, but I guess this is just a typo. Yes. Anyway, I repeated your test on latest master and it is still showing the same as v2.86. Yes, on my side too. Going back, I noticed that v2.85 is the last that still works for me. On Wed, 2021-09-22 at 12:29 +0200, Jean-Philippe Lambert wrote: Is this a bug I guess so and it is likely linked to On Wed, 2021-09-22 at 12:29 +0200, Jean-Philippe Lambert wrote: dnsmasq: warning: no upstream servers configured But I precisely do not want an other server to answer, as I would like to redirect all traffic... I get the same result when adding --local='/#/' $ sudo ./bin/dnsmasq --no-daemon --log-queries=extra --log-debug --listen-address=127.0.0.1 --address='/#/127.0.0.1' --no-hosts --no-resolv --local='/#/' Password: dnsmasq: started, version 2.86 cachesize 150 dnsmasq: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile dnsmasq: setting --bind-interfaces option because of OS limitations dnsmasq: warning: no upstream servers configured dnsmasq: using only locally-known addresses for # dnsmasq: cleared cache dnsmasq: 1 127.0.0.1/64713 query[A] a.com from 127.0.0.1 dnsmasq: 1 127.0.0.1/64713 config error is REFUSED (EDE: not ready) Best, Jean-Philippe ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss
Re: [Dnsmasq-discuss] config error is REFUSED (EDE: not ready) since v2.86
Hey Jean-Philippe, The config is different in your two tries, but I guess this is just a typo. > --address='/#/127.0.1' > --address='/#/127.0.0.1' Anyway, I repeated your test on latest master and it is still showing the same as v2.86. On Wed, 2021-09-22 at 12:29 +0200, Jean-Philippe Lambert wrote: > Is this a bug I guess so and it is likely linked to On Wed, 2021-09-22 at 12:29 +0200, Jean-Philippe Lambert wrote: > dnsmasq: warning: no upstream servers configured Best, Dominik ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss
Re: [Dnsmasq-discuss] config error is REFUSED (EDE: not ready) since v2.86
Hello, I tried to simplify my example. With dnsmasq v2.86, I am not able to use the catch-all form of the address parameter any more, while it still worked for v2.85. Is this a bug or am I missing some parameter? With v.2.86 I get the message 'config error is REFUSED (EDE: not ready)' for any query: $ sudo ./bin/dnsmasq --no-daemon --log-queries=extra --log-debug --listen-address=127.0.0.1 --address='/#/127.0.1' --no-hosts --no-resolv dnsmasq: started, version 2.86 cachesize 150 dnsmasq: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile dnsmasq: setting --bind-interfaces option because of OS limitations dnsmasq: warning: no upstream servers configured dnsmasq: cleared cache dnsmasq: 1 127.0.0.1/57098 query[A] a.com from 127.0.0.1 dnsmasq: 1 127.0.0.1/57098 config error is REFUSED (EDE: not ready) $ dig @127.0.0.1 a.com ; <<>> DiG 9.8.3-P1 <<>> @127.0.0.1 a.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 47287 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;a.com. IN A ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed Sep 22 10:44:20 2021 ;; MSG SIZE rcvd: 23 With v2.85, dnsmasq answers as expected: $ sudo ./bin/dnsmasq --no-daemon --log-queries=extra --log-debug --listen-address=127.0.0.1 --address='/#/127.0.0.1' --no-hosts --no-resolv dnsmasq: started, version 2.85 cachesize 150 dnsmasq: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile dnsmasq: setting --bind-interfaces option because of OS limitations dnsmasq: cleared cache dnsmasq: 1 127.0.0.1/55225 query[A] a.com from 127.0.0.1 dnsmasq: 1 127.0.0.1/55225 config a.com is 127.0.0.1 $ dig @127.0.0.1 a.com ; <<>> DiG 9.8.3-P1 <<>> @127.0.0.1 a.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4983 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;a.com. IN A ;; ANSWER SECTION: a.com. 0 IN A 127.0.0.1 ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed Sep 22 10:45:18 2021 ;; MSG SIZE rcvd: 39 Regards, Jean-Philippe Lambert ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss
[Dnsmasq-discuss] config error is REFUSED (EDE: not ready) since v2.86
Hello, I am using dnsmasq in various situations, thanks a lot for this very useful work. I noticed that I am not able to use address=/#/ip since v2.86 (it still worked with v2.85). I am now getting an error. dnsmasq: config error is REFUSED (EDE: not ready) Here is the error with v2.86 on MacOS 10.12.6 (dnsmasq and dig run in separate shells): $ sudo ./bin/dnsmasq --no-daemon --quiet-dhcp --quiet-dhcp6 --quiet-ra --conf-file=./dnsmasq_catchall2.conf --log-debug Password: dnsmasq: started, version 2.86 cachesize 150 dnsmasq: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile dnsmasq: warning: no upstream servers configured dnsmasq: read hosts2 - 11 addresses dnsmasq: query[A] a.com from 127.0.0.1 dnsmasq: config error is REFUSED (EDE: not ready) $ dig @127.0.0.1 a.com ; <<>> DiG 9.8.3-P1 <<>> @127.0.0.1 a.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 44046 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;a.com. IN A ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed Sep 15 01:27:17 2021 ;; MSG SIZE rcvd: 23 I still worked with v2.85 $ sudo ./bin/dnsmasq --no-daemon --quiet-dhcp --quiet-dhcp6 --quiet-ra --conf-file=./dnsmasq_catchall2.conf --log-debug dnsmasq: started, version 2.85 cachesize 150 dnsmasq: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile dnsmasq: read hosts2 - 11 addresses dnsmasq: query[A] a.com from 127.0.0.1 dnsmasq: config a.com is 10.0.0.2 $ dig @127.0.0.1 a.com ; <<>> DiG 9.8.3-P1 <<>> @127.0.0.1 a.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11515 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;a.com. IN A ;; ANSWER SECTION: a.com. 0 IN A 10.0.0.2 ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed Sep 15 01:28:56 2021 ;; MSG SIZE rcvd: 39 dnsmasq_catchall2.conf # listen-address=10.0.0.2 > # Temporary test listen-address=127.0.0.1 # domain=my.domain addn-hosts=hosts2 # generic catch-all address=/#/10.0.0.2 # this allows to resolve unqualified names expand-hosts domain=my.domain no-hosts no-resolv bogus-priv bind-interfaces # For debugging purposes, log each DNS query as it passes through # dnsmasq. log-queries hosts2 10.0.0.1my.domain 10.0.0.1www.my.domain 10.0.0.1t.my.domain 10.0.0.1t 10.0.0.1t1.my.domain 10.0.0.1t1 10.0.0.2t2.my.domain 10.0.0.2t2 10.0.0.2localdhcp 10.0.0.2localdns 10.0.0.2localserver Regards, Jean-Philippe Lambert ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss