#1140716 [dnsmasq] Log spam every second, 90 MB of logs in a day

Package:
dnsmasq
Source:
dnsmasq
Submitter:
Roman Mamedov
Date:
2026-06-24 22:17:02 UTC
Severity:
normal
#1140716#5
Date:
2026-06-24 22:07:37 UTC
From:
To:
A config like this:
-----
no-hosts
no-negcache
no-resolv

server=2606:4700:4700::1111
server=2606:4700:4700::1001
server=1.1.1.1
server=1.0.0.1

server=2001:4860:4860::8888
server=2001:4860:4860::8844
server=8.8.8.8
server=8.8.4.4

interface=vmbr0
except-interface=lo
bind-interfaces
dhcp-authoritative
dhcp-range=100.64.39.100,100.64.39.240,240h
-----

Results in dnsmasq absolutely spamming the daemon.log on my machine, writing
the same two lines every second:
-----
Jun 24 22:04:31 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:32 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:32 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:33 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:33 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:34 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:34 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:35 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:35 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:36 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:36 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:37 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:37 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:38 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:38 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:39 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:39 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:40 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:40 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:41 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:41 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:42 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:42 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:43 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:43 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:44 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:44 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:45 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:45 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:46 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:46 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:47 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:47 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:48 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:48 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:49 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:49 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:50 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:50 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:51 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:51 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
Jun 24 22:04:52 len dnsmasq[1565]: LOUD WARNING: listening on 100.64.39.1 may accept requests via interfaces other than vmbr0
Jun 24 22:04:52 len dnsmasq[1565]: LOUD WARNING: use --bind-dynamic rather than --bind-interfaces to avoid DNS amplification attacks via these interface(s)
-----
I really don't suppose this was intended to log repeatedly every second
without end. Think about embedded systems with limited disk space, or limited
flash endurance. Or just about people who will now miss other important stuff
in the log because of you. And "Loud warning", who cares it is just somewhere
in some log file. If you wanted to actually warn people of an issue, do that
as a part of daemon start or restart, visibly on the console.

As an aside, "bind-dynamic" is nowhere not even close a replacement for
bind-interfaces, welcome to real world deployments, thanks.