DNS over TCP doesn't work in AppVM

[marmarek]

Reported by Taylor Hornby:

• In all of my AppVMs (debian-based and fedora-based), web browsing works normally except for browsing to certain domains like admin.google.com. On those domains, the browser can't resolve the DNS.

• If you try to do an nslookup in a terminal in the AppVM, you get:

  user@superaccounts:~$ nslookup admin.google.com
  ;; Truncated, retrying in TCP mode.
  ;; Connection to 10.137.2.1#53(10.137.2.1) for admin.google.com failed: host unreachable.
  ^C (... seems to hang forever ...)
  

• Other domains seem to work:

  user@superaccounts:~$ nslookup bqp.io
  Server:        10.137.2.1
  Address:    10.137.2.1#53
  
  Name:    bqp.io
  Address: 192.95.8.31
  

• Using dig instead of nslookup within the AppVM works, even for admin.google.com.

• Here are the resolvers (default):

  user@superaccounts:~$ cat /etc/resolv.conf
  nameserver 10.137.2.1
  nameserver 10.137.2.254
  

• The only thing I've found that seems related is this, mentioning truncation and TCP being firewalled:
  https://groups.google.com/forum/#!searchin/qubes-users/DNS$20truncate/qubes-users/ndbPjm71CxY/haG46YnEJKcJ

I suspect that admin.google.com is victim to this because the result when you query for its A record is huge; you get back 16 IP addresses. The workaround I'm using is to manually edit /etc/resolv.conf, changing the nameserver to 8.8.8.8 and then restarting iceweasel.

[marmarek]

Automated announcement from builder-github

The package qubes-core-vm-3.0.19-1.fc20 has been pushed to the r3.0 testing repository for the Fedora fc20 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

[marmarek]

Automated announcement from builder-github

The package qubes-core-vm-3.0.19-1.fc20 has been pushed to the r3.0 testing repository for the Fedora fc20 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

[marmarek]

Automated announcement from builder-github

The package qubes-core-vm-3.0.19-1.fc21 has been pushed to the r3.0 testing repository for the Fedora fc21 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

[marmarek]

Automated announcement from builder-github

The package qubes-core-vm-3.0.19-1.fc21 has been pushed to the r3.0 testing repository for the Fedora fc21 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

[marmarek]

Automated announcement from builder-github

The package qubes-core-agent_3.0.19-1+deb8u1 has been pushed to the r3.0 testing repository for the Debian jessie template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing jessie-testing, then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

[marmarek]

Automated announcement from builder-github

The package qubes-core-agent_3.0.19-1+deb8u1 has been pushed to the r3.0 testing repository for the Debian jessie template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing jessie-testing, then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

[marmarek]

Automated announcement from builder-github

The package qubes-core-agent_3.0.19-1+deb7u1 has been pushed to the r3.0 testing repository for the Debian wheezy template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing wheezy-testing, then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

[marmarek]

Automated announcement from builder-github

The package qubes-core-agent_3.0.19-1+deb7u1 has been pushed to the r3.0 testing repository for the Debian wheezy template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing wheezy-testing, then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

[marmarek]

Automated announcement from builder-github

The package qubes-core-vm-3.0.19-1.fc20 has been pushed to the r3.0 stable repository for the Fedora fc20 template.
To install this update, please use the standard update command:

sudo yum update

[marmarek]

Automated announcement from builder-github

The package qubes-core-vm-3.0.19-1.fc20 has been pushed to the r3.0 stable repository for the Fedora fc20 template.
To install this update, please use the standard update command:

sudo yum update

[marmarek]

Automated announcement from builder-github

The package qubes-core-vm-3.0.19-1.fc21 has been pushed to the r3.0 stable repository for the Fedora fc21 template.
To install this update, please use the standard update command:

sudo yum update

[marmarek]

Automated announcement from builder-github

The package qubes-core-vm-3.0.19-1.fc21 has been pushed to the r3.0 stable repository for the Fedora fc21 template.
To install this update, please use the standard update command:

sudo yum update

[marmarek]

Automated announcement from builder-github

The package qubes-core-agent_3.0.19-1+deb8u1 has been pushed to the r3.0 stable repository for the Debian jessie template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

[marmarek]

Automated announcement from builder-github

The package qubes-core-agent_3.0.19-1+deb8u1 has been pushed to the r3.0 stable repository for the Debian jessie template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

[marmarek]

Automated announcement from builder-github

The package qubes-core-agent_3.0.19-1+deb7u1 has been pushed to the r3.0 stable repository for the Debian wheezy template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

[marmarek]

Automated announcement from builder-github

The package qubes-core-agent_3.0.19-1+deb7u1 has been pushed to the r3.0 stable repository for the Debian wheezy template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update