On Mon, Jun 16, 2025 at 3:15 PM Uroš Mikanovič
<uros.mikano...@radiostudent.si> wrote:
>
> Thanks for the tips, I figured something out.
>
> Seems like mdns4_minimal is "shy". In the case of the "minimal" version
> of `nss-mdns`, from the README:
>
>  > * If the request does not end with `.local` or `.local.`, it is
>  >   rejected. Example: `example.test` is rejected.
>  >
>  > * If the request has more than two labels, it is rejected. Example:
>  >  `foo.bar.local` is rejected. **This is the two-label limit
>  >   heuristic.**
>  >
>  > * If, during a request, the system-configured unicast DNS (specified
>  >   in `/etc/resolv.conf`) reports an `SOA` record for the top-level
>  >  `local` name, the request is rejected. Example: `host -t SOA local`
>  >   returns something other than `Host local not found:
>  >   3(NXDOMAIN)`. **This is the unicast SOA heuristic.**
>  >
>  > * Otherwise, the request is processed.
>
> The first two points seem satisfied with `BRNBCF4D4182ECD.local`.
>
> `host -t SOA local` returns:
>
> ```
> local has SOA record local. nobody.invalid. 1 3600 1200 604800 10800
> ```
>
> Not sure what to make of that as I don't really understand the point and

I'm guessing [whoever did this] is trying not to stomp all over
people/orgs that are using the local. domain in DNS _and_  prevent
xxx.local. name lookups from hitting the root DNS servers.

Do we not like IPv6?  why mdns4 instead of mdns?

$ grep '^host' /etc/nsswitch.conf
hosts:          files mdns_minimal [NOTFOUND=return] dns

This is my wife's Canon printer:
$ ping 3EFEE0000000.local
PING 3EFEE0000000.local(3EFEE0000000.local
(fe80::dec2:c9ff:fe3e:fee0%enp1s0)) 56 data bytes
64 bytes from 3EFEE0000000.local (fe80::dec2:c9ff:fe3e:fee0%enp1s0):
icmp_seq=1 ttl=64 time=3.24 ms
64 bytes from 3EFEE0000000.local (fe80::dec2:c9ff:fe3e:fee0%enp1s0):
icmp_seq=2 ttl=64 time=2.25 ms
64 bytes from 3EFEE0000000.local (fe80::dec2:c9ff:fe3e:fee0%enp1s0):
icmp_seq=3 ttl=64 time=2.27 ms
^C

  <.. snip ..>

> I am still interested in what in my setup clashes with the way Debian
> configures `nsswitch.conf` by default.

Maybe you need to have the SOA for the local. domain return NXDOMAIN?

$ host -t SOA local
Host local not found: 3(NXDOMAIN)

I dunno.. plenty too many guesses on my part here :(

Lee

Reply via email to