aha:

ddstreet@lp1886128:~$ sudo iptables -n -t security -L OUTPUT
Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     tcp  --  0.0.0.0/0            168.63.129.16        owner UID match 0
DROP       tcp  --  0.0.0.0/0            168.63.129.16        ctstate 
INVALID,NEW


it seems like this is being added by walinuxagent:

Jul 13 16:21:15 lp1886128 python3[1298]: 2020/07/13 16:21:15.672132 INFO 
ExtHandler Successfully added Azure fabric firewall rules
Jul 13 16:21:15 lp1886128 python3[1298]: 2020/07/13 16:21:15.683188 INFO 
ExtHandler Firewall rules:
Jul 13 16:21:15 lp1886128 python3[1298]: Chain INPUT (policy ACCEPT 0 packets, 
0 bytes)
Jul 13 16:21:15 lp1886128 python3[1298]:     pkts      bytes target     prot 
opt in     out     source               destination
Jul 13 16:21:15 lp1886128 python3[1298]: Chain FORWARD (policy ACCEPT 0 
packets, 0 bytes)
Jul 13 16:21:15 lp1886128 python3[1298]:     pkts      bytes target     prot 
opt in     out     source               destination
Jul 13 16:21:15 lp1886128 python3[1298]: Chain OUTPUT (policy ACCEPT 0 packets, 
0 bytes)
Jul 13 16:21:15 lp1886128 python3[1298]:     pkts      bytes target     prot 
opt in     out     source               destination
Jul 13 16:21:15 lp1886128 python3[1298]:        0        0 ACCEPT     tcp  --  
*      *       0.0.0.0/0            168.63.129.16        owner UID match 0
Jul 13 16:21:15 lp1886128 python3[1298]:        0        0 DROP       tcp  --  
*      *       0.0.0.0/0            168.63.129.16        ctstate INVALID,NEW


** Also affects: walinuxagent (Ubuntu)
   Importance: Undecided
       Status: New

** Summary changed:

- systemd-resolved does not resolve address due to udp payload size.
+ walinuxagent blocks DNS fallback to TCP

** Changed in: systemd (Ubuntu)
       Status: In Progress => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1886128

Title:
  walinuxagent blocks DNS fallback to TCP

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1886128/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to