[Bug 1205086] Re: lxc-net dnsmasq --strict-order breaks dns for lxc non-recursive nameserver

[Serge Hallyn]

There is concern that removing strict-order would at least double the
dns traffic for most users, and is not the proper fix.

>From irc logs (#ubuntu-server, feb 24)

<stgraber> If the reporter is using a desktop machine, the real fix is to use NetworkManager which will properly setup dnsmasq to only use the VPN dns server for requests relevant to it
<stgraber> hallyn: ok, so just did some tests. The problem there is clearly that the remote dns server is misconfigured. Trying with mine, I get NXDOMAIN for an invalid domain from a recursive server (as I should) but SERVFAIL for a domain outside the scope of a non-recursive server.
<stgraber> SERVFAIL causes dnsmasq to query the next server, NXDOMAIN doesn't.
<stgraber> SERVFAIL is nsd's response when non-recursive. REFUSED is bind's response when non-recursive. Both work with dnsmasq.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1205086

Title:
  lxc-net dnsmasq --strict-order breaks dns for lxc non-recursive
  nameserver

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1205086/+subscriptions