Dnsmasq spawned by neutron-dhcp-agent should use bind-dynamic option instead of bind-interfaces
Bug #1828473 reported by
Slawek Kaplonski
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
Fix Released
|
Low
|
Brian Haley |
Bug Description
According to warning log from dnsmasq:
May 09 23:08:59 devstack-ubuntu-ovs dnsmasq[27287]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Option bind-interfaces is available since dnsmasq 2.63 (https:/
To post a comment you must log in.
It does seem like this should work correctly. Let me throw something up to see how it behaves in testing.