dns - 我没有收到来自 dnsmasq 的答案(dns 回复)

Question

标题说明了一切:我没有从 dnsmasq 收到答案(dns 回复)。

我看到 Dnsmasq 收到查询并处理它们(在日志或详细前台)，但没有任何返回。

例如:

stephane@mirror:/home/stephane doas dnsmasq -d -R 
dnsmasq: started, version 2.76 cachesize 150
dnsmasq: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN   DHCP DHCPv6 no-Lua TFTP no-conntrack ipset auth no-DNSSEC loop-detect  no-inotify
dnsmasq-dhcp: DHCP, IP range 10.0.0.20 -- 10.0.255.250, lease time 12h
dnsmasq-dhcp: DHCPv6 stateless on re2
dnsmasq-dhcp: DHCPv4-derived IPv6 names on re2
dnsmasq-dhcp: router advertisement on re2
dnsmasq-dhcp: DHCPv6 stateless on fd00:2016:22:dec::, constructed for re2
dnsmasq-dhcp: DHCPv4-derived IPv6 names on fd00:2016:22:dec::, constructed for re2
dnsmasq-dhcp: router advertisement on fd00:2016:22:dec::, constructed for re2
dnsmasq-dhcp: DHCPv6 stateless on 2a06:4000:1576::, constructed for re2
dnsmasq-dhcp: DHCPv4-derived IPv6 names on 2a06:4000:1576::, constructed for re2
dnsmasq-dhcp: router advertisement on 2a06:4000:1576::, constructed for re2
dnsmasq-dhcp: RTR-ADVERT(re2) fd00:2016:22:dec::
dnsmasq-dhcp: RTR-ADVERT(re2) 2a06:4000:1576::
dnsmasq-dhcp: IPv6 router advertisement enabled
...
dnsmasq: 1 fd00:2016:22:dec::3/26860 /etc/hosts 2a06:4000:1576:: is mirror.22decembre.eu
dnsmasq: 2 2a06:4000:1576::2/46016 query[AAAA] u38868.mec086b732EDa.sOS.aTLas.RIPE.NEt.22DecEmbre.eU from 2a06:4000:1576::2
dnsmasq: 2 2a06:4000:1576::2/46016 config u38868.mec086b732EDa.sOS.aTLas.RIPE.NEt.22DecEmbre.eU is NXDOMAIN
dnsmasq: 3 2a06:4000:1576::2/60217 query[DNSKEY] 22dEceMbre.EU from 2a06:4000:1576::2
dnsmasq: 3 2a06:4000:1576::2/60217 config 22dEceMbre.EU is NXDOMAIN
dnsmasq: 4 127.0.0.1/32500 query[A] www.facebook.com from 127.0.0.1
dnsmasq: 4 127.0.0.1/32500 forwarded www.facebook.com to fd00:2016:22:dec::3
dnsmasq: 4 127.0.0.1/32500 reply www.facebook.com is <CNAME>
dnsmasq: 4 127.0.0.1/32500 reply star-mini.c10r.facebook.com is 157.240.11.35

所以在这里我很清楚 Dnsmasq 解析 FB 地址。这是我提出的要求:

stephane@mirror:/home/stephane dig @127.0.0.1 www.facebook.com

; <<>> DiG 9.4.2-P2 <<>> @127.0.0.1 www.facebook.com
; (1 server found)
;; global options:  printcmd
;; connection timed out; no servers could be reached
stephane@mirror:/home/stephane

如果我在主机上启动另一个 DNS 守护程序并进行相同的查询，我会得到答案，所以它与防火墙无关。我从本地主机或远程主机、ipv4 或 ipv6 得到相同的结果。我不明白有什么问题。

Answer 1

所以麻烦来了，因为我没有

bind-interfaces

在 conf' 文件中。一旦我激活了这个选项，一切都很好。