Endian Bugtracker
Endian Issue Tracker

Viewing Issue Simple Details Jump to Notes ] View Advanced ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0001173 [Endian Firewall] Application Level Proxies major always 2008-07-28 20:46 2009-10-27 13:02
Reporter kfason View Status public  
Assigned To peter
Priority normal Resolution fixed  
Status closed   Product Version 2.2-rc1
Summary 0001173: DNS lookups are not showing SRV records for underscore entries
Description If you do a nslookup from a client for say '_sip._tls.microsoft.com" it returns nothing found, but if you use a specific DNS server such as 4.2.2.2 it resolves it correctly. This causes havoc for MS Communicator and possibly other AD items that lookup underscore DNS entries.

DNSMasq was 2.38 and latest is 2.43 I believe.
Additional Information nslookup -type=all _sip._tls.microsoft.com
Server: EFW.my.domain.com
Address: 172.20.0.254

*** No all records (ANY) records available for _sip._tls.microsoft.com

---

nslookup -type=all _sip._tls.microsoft.com 4.2.2.2
Server: vnsc-bak.sys.gtei.net
Address: 4.2.2.2

Non-authoritative answer:
_sip._tls.microsoft.com SRV service location:
          priority = 0
          weight = 0
          port = 443
          svr hostname = sip.microsoft.com
Tags No tags attached.
Attached Files

- Relationships

-  Notes
(0001513)
kfason (reporter)
2008-08-09 08:08

Found the problem. in you have option filterwin2k enabled. It needs to be commented out for SRV records to resolve correctly. This affects not just Microsoft Communicator in my original ticket portion but also many SIP products use SRV records.

# Uncomment this to filter useless windows-originated DNS requests
# which can trigger dial-on-demand links needlessly.
# Note that (amongst other things) this blocks all SRV requests,
# so don't use it if you use eg Kerberos.
# This option only affects forwarding, SRV records originating for
# dnsmasq (via srv-host= lines) are not suppressed by it.
#filterwin2k
(0001514)
kfason (reporter)
2008-08-09 08:23

forgot path.

/etc/dnsmasq.conf.tmpl I believe.
(0001733)
peter (administrator)
2008-10-21 16:57

i changed this to be default in 2.3

- Issue History
Date Modified Username Field Change
2008-07-28 20:46 kfason New Issue
2008-08-09 08:08 kfason Note Added: 0001513
2008-08-09 08:23 kfason Note Added: 0001514
2008-08-11 10:57 peter Status new => acknowledged
2008-08-11 10:57 peter Target Version => 2.2
2008-09-10 17:41 chris Target Version 2.2 => 2.3
2008-10-10 16:03 peter Status acknowledged => new
2008-10-10 16:03 peter Assigned To => peter
2008-10-21 16:57 peter Note Added: 0001733
2008-10-21 16:57 peter Status new => resolved
2008-10-21 16:57 peter Fixed in Version => 2.3
2008-10-21 16:57 peter Resolution open => fixed
2009-10-27 13:02 peter Status resolved => closed

Copyright © 2005-2008 Endian, SRL. All rights reserved.


Mantis [^]
Copyright © 2000 - 2008 Mantis Group
Powered by Mantis Bugtracker