[Bug 780956] New: dnsmasq as started by libvirt passes too many query to upstream DNS
https://bugzilla.novell.com/show_bug.cgi?id=780956 https://bugzilla.novell.com/show_bug.cgi?id=780956#c0 Summary: dnsmasq as started by libvirt passes too many query to upstream DNS Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: jfehlig@suse.com ReportedBy: rhafer@suse.com QAContact: qa-bugs@suse.de Found By: Development Blocker: --- The dnsmasq instances started by libvirt is configured so that it will forward e.g AAAA and MX queries for hosts in the same domain as the virtual net to upstream DNS servers. This should not happenend and is especially problematic if the upstream DNS is configured to forward queries for those domains back to the libvirt started dnsmasq instance (you get a loop). The solution to this problem is to have libvirt start dnsmasq with the --local command line option. A similar bug already got reported to RH bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=849787 A fix is already upstream in the master branch and I prepared 12.2 packages for testing in home:rhafer:branches:openSUSE:12.2:Update (the Factory version is already recent enough to contain the fix AFAICS). It's seems to work well so far on my system. I'd really like to see this released as maintenance update for 12.2. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=780956 https://bugzilla.novell.com/show_bug.cgi?id=780956#c1 James Fehlig <jfehlig@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #1 from James Fehlig <jfehlig@suse.com> 2012-09-27 21:56:09 UTC --- Ok, I'll add this to my list of bugs for the next 12.2 update, which might be a bit with vacation and the openstack summit. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=780956 https://bugzilla.novell.com/show_bug.cgi?id=780956#c2 James Fehlig <jfehlig@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |rhafer@suse.com --- Comment #2 from James Fehlig <jfehlig@suse.com> 2012-10-11 22:40:48 UTC --- Ralf, I've updated the libvirt package in Virtualization:openSUSE12.2 with latest stable release of libvirt 0.9.11 (0.9.11.6), which includes the fix referenced in the RH bugzilla. Can you give it a try? I'll be doing a 12.2 update for libvirt soon. Thanks! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=780956 https://bugzilla.novell.com/show_bug.cgi?id=780956#c3 Ralf Haferkamp <rhafer@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED InfoProvider|rhafer@suse.com | --- Comment #3 from Ralf Haferkamp <rhafer@suse.com> 2012-10-12 15:40:21 CEST --- Seems to work now. Thanks! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=780956 https://bugzilla.novell.com/show_bug.cgi?id=780956#c4 James Fehlig <jfehlig@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #4 from James Fehlig <jfehlig@suse.com> 2012-10-12 21:40:18 UTC --- Ok, I've started a maintenance request for the 12.2 libvirt package, MR#138011. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=780956 https://bugzilla.novell.com/show_bug.cgi?id=780956#c5 --- Comment #5 from Swamp Workflow Management <swamp@suse.de> 2012-10-22 12:09:12 UTC --- openSUSE-RU-2012:1378-1: An update that solves two vulnerabilities and has one errata is now available. Category: recommended (moderate) Bug References: 780432,780956,780966 CVE References: cve-2012-3445,cve-2012-4423 Sources used: openSUSE 12.2 (src): libvirt-0.9.11.6-1.5.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com