{"id":644,"date":"2014-03-31T21:06:03","date_gmt":"2014-04-01T02:06:03","guid":{"rendered":"http:\/\/www.thegatesofdawn.ca\/wordpress\/?p=644"},"modified":"2021-04-13T00:09:32","modified_gmt":"2021-04-13T05:09:32","slug":"dns-problems-with-windows-dnsmasq-ipv6-and-cname","status":"publish","type":"post","link":"https:\/\/www.thegatesofdawn.ca\/wordpress\/posts\/2014\/03\/31\/dns-problems-with-windows-dnsmasq-ipv6-and-cname\/","title":{"rendered":"DNS problems with Windows, Dnsmasq, IPv6 and CNAME"},"content":{"rendered":"

I’ve been trying to set up a git<\/a> repository on a server in my home.\u00a0 I wasn’t sure exactly which computer I should set it up on, and I want to be able to move it to another computer later without breaking the connections to it.\u00a0 I thought maybe I could do this by setting up some magic in my network’s DNS server, giving the same computer two names in DNS: both its own name, and also the name “git”.\u00a0 Then I could change the name “git” to point to another computer later, if I wanted to.\u00a0 But things didn’t work out very well at first.<\/p>\n

<\/p>\n

My router is running DD-WRT<\/a>, which uses Dnsmasq<\/a> to provide the DHCP and DNS functions.\u00a0 I learned about DNS’s “CNAME<\/a>” records, which allow you to create “canonical” names that point to other “real” names.\u00a0 It seemed perfect.<\/p>\n

I figured out how to configure Dnsmasq to do that.\u00a0 Other pages talk about how to do this too, so I won’t go into the details here.\u00a0 But It didn’t work for me.\u00a0 When I tried “ping git” on my PC, it couldn’t resolve the name.<\/p>\n

Actually, after a great deal of debugging, I discovered that it did actually work on other computers in my house.\u00a0 All of them, in fact.\u00a0 Just not the one in my home office.\u00a0 It happens to be a Windows XP box, but then so were some of the other ones I tried it on.<\/p>\n

This led me to suspect something weird about the DNS name resolution going on with that particular computer.\u00a0 I tried using “nslookup git” on the same PC, and it found it.\u00a0 But “ping git” still could not.\u00a0 Weird.\u00a0 Apparently “nslookup” does not use the same DNS resolver as the Windows system itself, which kind of limits its usefulness for debugging issues with the resolver.\u00a0 But this, apparently, is a common problem with many causes, possibly involving NetBIOS, and LMHOSTS files, and a bunch of other stuff.\u00a0 Nothing I found really addressed my problem, though.<\/p>\n

Eventually, I installed Wireshark<\/a>, so I could see exactly what was going to and from the DNS server.\u00a0 This finally clued me in.\u00a0 When I executed the “ping git” command, the request that Windows sent to my DNS server was asking for an IPv6 address record (type “AAAA”), rather than the IPv4 record (type “A”) that you might expect (since I don’t use IPv6).\u00a0 And DNSmasq gave a “not found” response. When I observed the name resolution done by “nslookup”, it requested an IPv4 “A” record, and got a proper response (which included both the “git” CNAME record, and the A record for the actual server that it pointed to.)<\/p>\n

It was at this point that I recalled that this particular PC was the only WIndows XP box in the house that had IPv6 installed.\u00a0 I don’t know why it was installed, or when, but there it was.\u00a0 I wasn’t using IPv6, and I even disabled the IPv6 interface in the LAN connection properties, but it still seems to affect how Windows XP handles DNS resolution.\u00a0 But somehow it still worked for other names in my DNS, though, that weren’t using a CNAME record.\u00a0 Perhaps there’s some bug in how Dnsmasq handles CNAME records when an IPv6 AAAA record is requested.<\/p>\n

Anyway, in the end the solution was to uninstall the IPv6 support, using the command “netsh int ipv6 uninstall”.\u00a0 After that, “ping git” started working properly, returning the IP address of the computer that my CNAME record currently has “git” mapped to.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

I’ve been trying to set up a git repository on a server in my home.\u00a0 I wasn’t sure exactly which computer I should set it up on, and I want to be able to move it to another computer later without breaking the connections to it.\u00a0 I thought maybe I could do this by setting […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[112,110,113,111,108,114,109],"class_list":["post-644","post","type-post","status-publish","format-standard","hentry","category-tech","tag-cname","tag-dns","tag-dnsmasq","tag-ipv6","tag-windowsxp","tag-wireshark","tag-xp"],"_links":{"self":[{"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/posts\/644"}],"collection":[{"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/comments?post=644"}],"version-history":[{"count":4,"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/posts\/644\/revisions"}],"predecessor-version":[{"id":761,"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/posts\/644\/revisions\/761"}],"wp:attachment":[{"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/media?parent=644"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/categories?post=644"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thegatesofdawn.ca\/wordpress\/wp-json\/wp\/v2\/tags?post=644"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}