Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 202422 - net-dns/djbdns-1.05-r21 + USE=ipv6: dnscache refuses connections on ::1
Summary: net-dns/djbdns-1.05-r21 + USE=ipv6: dnscache refuses connections on ::1
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Unspecified (show other bugs)
Hardware: All All
: High normal
Assignee: Michael Hanselmann (hansmi) (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-12-15 21:37 UTC by Tavin Cole
Modified: 2007-12-20 20:09 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tavin Cole 2007-12-15 21:37:30 UTC
if any DNS client such as dnsqr or rblsmtpd connects to dnscache on ::1 instead of 127.0.0.1, the connection is refused.  this happens e.g. when /etc/resolv.conf is deleted or empty.  there is no documentation i can find for how to whitelist ::1 in root/ip, but i have tried simply placing an empty file named ::1 in root/ip, with no effect.

Reproducible: Always

Steps to Reproduce:
# sh -c 'dnsqr any gentoo.org &'; netstat -np |fgrep dnsqr; sleep 20
udp        0      0 ::1:20147               ::1:53                  ESTABLISHED 18968/dnsqr         
255 gentoo.org:
connection refused
# ls /var/dnscache/root/ip
127.0.0.1  ::1




other programs such as ping have no trouble resolving DNS queries because they connect on 127.0.0.1.  placing "nameserver 127.0.0.1" in /etc/resolv.conf cures the problem as it causes dnsqr & family to connect on 127.0.0.1.

the bottom line is that there seems to be no way to tell dnscache to accept connections on ipv6 addresses.
Comment 1 Michael Hanselmann (hansmi) (RETIRED) gentoo-dev 2007-12-16 21:10:48 UTC
This is not Gentoo specific. Please contact the upstream developer of the IPv6 patch, Felix von Leitner: http://www.fefe.de/dns/
Comment 2 Tavin Cole 2007-12-17 16:53:53 UTC
could someone formally involved with gentoo please try?  i already contacted Felix prior to submitting this bug report and i don't think he believes me.  if upstream won't do anything, what do we do?
Comment 3 Tavin Cole 2007-12-19 00:26:54 UTC
reopening b/c upstream is non-responsive
Comment 4 Tavin Cole 2007-12-20 20:09:40 UTC
my apologies, i have too many systems with divergent configurations :)

the solution is to set $IP to ::1 when running dnscache.

dnsqr & family happily default to connecting to ::1 when /etc/resolv.conf is absent, while other programs like ping and telnet use 127.0.0.1 when /etc/resolv.conf is absent, so it becomes necessary to explicitly choose one or the other as nameserver in /etc/resolv.conf, and set $IP to match.