Reviewed: https://review.opendev.org/670692 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=7ec7fd8fdf4dae028469b644c922cc47e8a6eab1 Submitter: Zuul Branch: stable/queens
commit 7ec7fd8fdf4dae028469b644c922cc47e8a6eab1 Author: Brian Haley <email address hidden> Date: Thu May 9 22:33:02 2019 -0400
Use --bind-dynamic with dnsmasq instead of --bind-interfaces
Dnsmasq emits a warning when started in most neutron deployments:
dnsmasq[27287]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Since option --bind-dynamic is available since dnsmasq 2.63 (https://github.com/liquidm/dnsmasq/blob/master/FAQ#L239) and we require 2.67, change to use this option instead.
Change-Id: Id7971bd99b04aca38180ff109f542422b1a925d5 Closes-bug: #1828473 (cherry picked from commit 09ee9347864d731ce7ccf241178559815e82f57c)
Reviewed: https:/ /review. opendev. org/670692 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=7ec7fd8fdf4 dae028469b644c9 22cc47e8a6eab1
Committed: https:/
Submitter: Zuul
Branch: stable/queens
commit 7ec7fd8fdf4dae0 28469b644c922cc 47e8a6eab1
Author: Brian Haley <email address hidden>
Date: Thu May 9 22:33:02 2019 -0400
Use --bind-dynamic with dnsmasq instead of --bind-interfaces
Dnsmasq emits a warning when started in most neutron deployments:
dnsmasq[27287]: LOUD WARNING: use --bind-dynamic rather than
--bind- interfaces to avoid DNS amplification attacks via
these interface(s)
Since option --bind-dynamic is available since dnsmasq 2.63 /github. com/liquidm/ dnsmasq/ blob/master/ FAQ#L239) and
(https:/
we require 2.67, change to use this option instead.
Change-Id: Id7971bd99b04ac a38180ff109f542 422b1a925d5 ce7ccf241178559 815e82f57c)
Closes-bug: #1828473
(cherry picked from commit 09ee9347864d731