PDA

View Full Version : 12.04 running DNSMASQ by default


Ocky
May 10th, 2012, 01:11 PM
New. I didn't see that before. 12.04 running DNSMASQ by default. https://wiki.ubuntu.com/PrecisePangolin/ReleaseNotes/UbuntuDesktop (5th bullet point).

See also http://ubuntuforums.org/showthread.php?t=1968061

To disable:- (for those that want to)

/etc/NetworkManager/NetworkManager.conf

and comment the

dns=dnsmasq

line. Then do a

sudo restart network-manager

BrandiCandi
May 10th, 2012, 02:13 PM
I'm not clear on whether this is a big deal or not in terms of security on my Ubuntu box. Have you gotten a sense of the problem?

Kerodo
May 10th, 2012, 02:21 PM
I was having dns lookup issues randomly, maybe every 10 or 15 lookups, but it was annoying. I commented out the dnsmasq line mentioned above, and the problem went away. All is well now... Don't know what it means, but it works.....

Hungry Man
May 10th, 2012, 02:43 PM
I also don't see much of an issue especially since caching is off by default.

BrandiCandi
May 10th, 2012, 11:05 PM
There are some additional comments in that thread from today. It sounds like it was much ado about nothing- DNSMASQ doesn't seem to be a security problem. (Do I smell FUD?)

Apparently DNSMASQ causes some functionality problems for some people, so the workaround will be useful for them.

Ocky
May 11th, 2012, 03:50 AM
-{ Quote: "There are some additional comments in that thread from today. It sounds like it was much ado about nothing- DNSMASQ doesn't seem to be a security problem. (Do I smell FUD?)

Apparently DNSMASQ causes some functionality problems for some people, so the workaround will be useful for them." }-
Yeah, nothing to worry about ..

-{ Quote: " it’s configuration that is generated by NetworkManager and really only meant to be used as a local resolver. As such, it also only listens on 127.0.0.1, which should make it impossible to access from external systems." }-

funkydude
May 11th, 2012, 10:16 AM
Confusing, I thought the point of making such a critical change was to alleviate issues, not replace the old issues with new ones? :/

Glad to hear it's not a security issue, I'm not a fan of having to tinker with such things after an install.