After upgrading to Ubuntu 16.04 dnsmasq fails to answer quires from subnets other then it's interfaces belong to. I wonder if there is an option that allows to add trusted subnets?
Here is the log messageIgnoring query from non-local network
1 Answer
From the v2.69 changelog:
Add --local-service. Accept DNS queries only from hosts whose address is on a local subnet, ie a subnet for which an interface exists on the server. This option only has effect if there are no --interface --except-interface, --listen-address or --auth-server options. It is intended to be set as a default on installation, to allow unconfigured installations to be useful but also safe from being used for DNS amplification attacks.So, the fix is to make sure you don't have the local-service option in any conf files (including any pre-installed ones such as in /usr/local/etc/dnsmasq.conf) and include one of the above listed options in your conf file. E.g. --interface=eth0.
