Questions tagged [dns]
For questions pertaining to Domain Name System (DNS), a service that provides the resolution of host names to IP addresses. Use this tag when you are troubleshooting DNS issues, configuring a DNS resolver or server, or are trying to understand DNS's involvement in your situation.
1,476
questions
0
votes
0
answers
18
views
Unbound dns over tls
I have unbound installed and it works just fine (debian testing).
I also have a domain at duckdns.org.
I would like to set DoT on my Android phone as xxxxx.duckdns.org, so i can make all requests go ...
- 1
0
votes
0
answers
13
views
How do I use dhclient to determine if the DHCP server can provide DNS servers?
OS is Debian 10-12. I know in some (most?) cases, a DHCP server will provide DNS servers at the same time as it leases an ip address.
I would like to use dhclient to get a list of DNS servers provided ...
- 753
0
votes
1
answer
29
views
Enable TLS on BIND9
I am trying to enable TLS on my BIND server (9.19.16) which is otherwise working fine. When I add the following code to enable TLS, then my BIND server does not start.
named.conf:
tls local-tls {
...
- 101
0
votes
1
answer
20
views
How to remove DNS options from systemd-resolve
I'm unsure how to change the list of DNS options that resolvconf finds when connecting. systemd-resolve --status outputs
Global
Protocols: -LLMNR -mDNS +DNSOverTLS DNSSEC=no/unsupported
...
0
votes
1
answer
37
views
Keep getting NS record query failed: NXDOMAIN on Kali Linux dnsenum commands
the URL does not matter seeing as I have changed it to different websites multiple times
I am new to Kali and Linux in general
┌──(admin㉿LAPTOP-JCHDG93R)-[~]
└─$ dnsenum --noreverse -o mydomain.xml ...
- 1
0
votes
2
answers
31
views
How to test if DNS over TLS (DoT) with BIND9 forwarders is actually working?
I am using DNS over TLS with BIND9 forwarders using the answer from this questions: link
I can see queries being made successfully but how can I check to see if the queries are using DoT or are they ...
- 101
0
votes
1
answer
39
views
BIND9 not starting due to apparmor error
I have BIND version 9.19.16 installed on my Ubuntu server. However, it does not start the BIND service. When I try systemctl start bind9 it takes a minute or so and then returns with the following ...
- 101
2
votes
0
answers
63
views
Application does DNS outside of its Network Namespace?
I am using unshare to create a network namespace:
unshare -rn bash
I already have the a working setup with veth-interfaces as described in this guide:
https://josephmuia.ca/2018-05-16-net-namespaces-...
- 21
0
votes
0
answers
19
views
how can I find the PTR file for the revers DNS record [duplicate]
where can I find the file that include the PTR result?
this file ( smtp-relay.mycar.com.)
or this (41.32.28.172.in-addr.arpa.)
#dig +noall +answer -x 172.28.32.41
41.32.28.172.in-addr.arpa. 1200 IN ...
0
votes
1
answer
54
views
My DNS changes on its own but its changes can't be observed through /etc/resolv.conf
I made a script to print /etc/resolv.conf and ping result of www.reddit.com for every second. I used Cloudflare's DNS (1.1.1.1) because reddit is blocked in my country but bypassable using DNS. It ...
0
votes
3
answers
65
views
Is checking /etc/hosts and /etc/resolv.conf sufficient to know that no server is trying to falsely represent itself as another?
Say I want to make sure that no malicious actor or process has made an attempt to falsely represent a legitimate web server with their own malicious server on Linux, anticipating that the user will ...
- 103
0
votes
2
answers
51
views
How to get systemd to not override DNS settings for a network interface?
I'm trying to set my DNS to 1.1.1.1. I've edited /etc/systemd/resolved.conf to contain:
[Resolve]
DNS=1.1.1.1
FallbackDNS=8.8.8.8
But it seems like that setting is being overwritten on a per-...
- 101
0
votes
0
answers
48
views
Postfix delivers messages locally despite configuration for discovering external agent
A small node operates several web applications attached to a domain.
The same domain is used for mailboxes, hosted off site by a commercial service.
On the name server operated by the registrar, A, ...
- 330
0
votes
1
answer
50
views
Change mail from header in sendmail
We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail. We are trying to configure now SPF and DMARC records for these DNS ...
1
vote
0
answers
31
views
Redirect a URL to another URL
I use Linux (Arch) as my daily operating system. I believe I'm too addicted to YouTube, so I would like to redirect all requests to youtube.com to wikipedia.org so that when I write youtube.com in the ...
- 111
1
vote
0
answers
254
views
How do I fix my DNS on Ubuntu 23.04?
I am running Ubuntu 23.04 and I cannot resolve nameservers. When I run resolvectl status I get the following:
Global
Protocols: -LLMNR -mDNS -DNSOverTLS DNSSEC=n0/unsupported
resolv.conf mode: ...
- 11
0
votes
0
answers
35
views
Websites hosted outside Germany seem to be inaccessible from VPS
I have a VPS mail server from the service provider Contabo running and today it has stopped being able to send mail to my gmail account. Digging into the problem I discovered that most domains don't ...
- 285
0
votes
0
answers
27
views
Bind9 how to use RPZ zone for specific subnets
I already have 1 master(192.168.130.32) 4 slaves(192.168.130.35) and 2 authoritative(192.168.130.33) servers with bind9.
My point is to get RPZ(192.168.130.37) from external DNS servers, but I want to ...
- 111
0
votes
1
answer
79
views
Dynamic IP with dnsmasq
I am building a black box NAS for a friend, that is going to run a few docker containers with things like NextCloud and a few other services. By black box I mean that it should be setup in a way that ...
- 13
0
votes
1
answer
372
views
How do I permanently configure the DNS resolution in Ubuntu for ALL programs/layers for specific interfaces
Is there a way I can permanently set the DNS preference of my Ubuntu laptop for specific network interfaces?
I am relying on a wifi network that is not that predictable.
I don't have access to the ...
- 455
0
votes
0
answers
57
views
Best practice to accept RPZ in Bind9
I am currently managing DNS servers using bind9. I have a Master server that serves as the control node for four slave servers and two authoritative servers.
I am interested in implementing remote ...
- 111
0
votes
0
answers
36
views
Setting global DNS via systemd-resolve CLI
Is there any way to set a global (not per interface) DNS server using the systemd-resolve command line tool? From the help it does not seem like this (--set-dns requires an interface). The usecase I ...
- 283
0
votes
0
answers
19
views
BIND9 reverse lookup not working
I wanted to setup my own DNS on lan. I managed to get working forward lookup but for some unknown reason reverse lookup is not working.
downloaded bind9
apt-get install bind9
/etc/bind/named.conf....
0
votes
1
answer
275
views
How to enable DNS over HTTPS (DoH) on Pop!_OS 22.04
I recently started using Quad9 DNS and now want to enable DoH(not DoT). I was looking to enable it without any third party software (This is already possible on Windows). All the guides I can find are ...
- 1
0
votes
1
answer
49
views
Is it possible to change DNS only for a specific program?
For some reason, my DNS provider blocks torrent trackers as it appears.
(Proven by connecting to my VPN provider with his DNS which solves the DNS problem.)
But generally speaking, I otherwise like ...
- 27.8k
0
votes
2
answers
3k
views
Can't resolve domain names after upgrading to Debian 12
After upgrading Debian11/KDE to Debian12, restarting and running sudo apt-get upgrade it shows errors like Could not resolve ftp.XX.debian.org. These also show when running sudo apt-get update. I then ...
- 4,058
0
votes
1
answer
114
views
Curl always trying to connect with http in home network
Tldr;
From my home network on a (MacOS Venture 13.4): curl https://ifconfig.me works but curl ifconfig.me or curl http://ifconfig.me not working.
When connecting to other networks both work fine. Is ...
- 101
1
vote
1
answer
86
views
How do I get BIND (DNS) to be authoritative about a tld for more than a minute
I tried to block the .zip TLD on my laptop (running fedora 38) with bind.
Installing bind
Updating named.conf:
options {
listen-on port 53 { 127.0.0.1; };
listen-on-v6 port 53 { ::1; };
...
- 121
-1
votes
1
answer
25
views
Troubleshooting DNS access issue on local network
I have installed a DNS by creating the two zones on my server, CentOS 7. Here are the steps:
vi /etc/hosts
etienne credo.local etienne
yum install bind bind-utils
vi /etc/named.config
zone"...
- 1
0
votes
0
answers
43
views
nslookup dbwr-scan does not have desired results on Rocky Linux 8.7
The following command fails to resolve the scan addresses
-------------------------------------------------
[root@dbwr1 ~]# nslookup dbwr-scan
Server: 192.168.1.1
Address: 192.168.1.1#53
Non-...
- 1
0
votes
0
answers
204
views
/etc/named.conf error with command systemctl status named.service
I am using Rocky Linux 8.7 on 64-bit
I am configuring and trying to start a BIND domain as follows:
[root@dbwr1 ~]# ls -l /var/named/localdomain.zone
-rw-r-----. 1 root named 506 May 14 19:29 /var/...
- 1
0
votes
0
answers
48
views
FreeIPA LDAP load balancing
I'm setting up FreeIPA servers in my home lab. A total of 3 servers.
I also want to be able to load balance between these servers, or at least use DNS for this. I'm not installing IPAclient on my ...
- 137
0
votes
0
answers
461
views
DNS leak over Wireguard due to NetworkManager
I recently setup a VPS to run PiHole and Wireguard. One a system (running Pop OS 22.04 with kernel 6.2.6) connected to the VPS and with the VPS set as the gateway and DNS (it is running a local ...
- 1
1
vote
0
answers
68
views
Modify DNS local tables to test user experience
Im trying to implement some algorithms that I've developed for my thesis research in a real scenario. Basically, I have gathered my DNS traffic from the last month and I'm getting my most 'relevant' ...
0
votes
0
answers
94
views
Configure IPv6 DNS server via DHCP in LXC container
I have an LXC container created and started as follows:
sudo lxc-create -t debian -n mylxc -- --release bullseye
sudo lxc-start -n mylxc
sudo lxc-attach -n mylxc
On the LXC host I have a DHCP server ...
- 153
0
votes
0
answers
154
views
Unbound split horizon DNS for NextDNS routing per VLAN
I'm running Unbound version 1.13.2 (the most recent version available on PFSense). I'm trying to do some source based routing of my DNS traffic. I use NextDNS and have set up two profiles, one for ...
0
votes
0
answers
40
views
Can't ping hostnames and IPv6 after router restart
This happened after a router restart.
(no idea if this is relevant but my Windows PC also reverted the DNS settings to an old local server I tested)
I noticed the issue when I ssh'ed to my homelab ...
0
votes
1
answer
45
views
Allow a certain set of domain names corrisponding ip with resolution and whitelisting on the fly
I'm trying to setup a firewall config for a specific machine. The firewall is configured to block all traffic except for a certain set of allowed IPs.
Today I was asked to put on a teamviewer service ...
- 2,714
1
vote
0
answers
78
views
Strange entry in dnsmasq log
In Pihole dashboard I found this error:
Maximum number of concurrent DNS queries reached (max: 150)
Checking the pihole logs, at that time, I found several lines like this :
Apr 14 00:12:39 dnsmasq[...
- 11
1
vote
1
answer
221
views
resolvconf package create corrupt /etc/resolv.conf file
I'm having a weird issue under debian 11 with resolvconf package.
No matter what kind of configuration I throw in, the /etc/resolv.conf file created by resolvconf service is kinda corrupt.
Dig says:
...
- 2,714
1
vote
1
answer
124
views
PowerDNS caching NXDOMAIN for AAAA records, but there is a valid A record
I have a strange problem with PowerDNS. The initial problem described to me was that one HTTP request could be made to domains under staging.corp, but anything after that would fail with a DNS error.
...
- 23
0
votes
0
answers
51
views
How do I access device using hostname that is hosting an access point?
I have an embedded linux device hosting an access point, I set it up like this:
sudo apt install dnsmasq-base -y
nmcli connection add type wifi ifname wlan0 con-name access_point autoconnect yes ssid ...
- 101
0
votes
0
answers
30
views
Bind9 use old file format for zones
with BIND version 9.8
how can I use the old format zone files?
example.com. IN NS ns1.example.com.
instead of the new one
$ORIGIN example. etc etc
thank you so much
- 201
0
votes
1
answer
340
views
How to restore DNS settings in fedora
I recently added a Wi-Fi network, where I manually set it including DNS, but when I get to my home Wi-Fi network, I realize that some applications like Discord don't work, it stays in an infinite ...
0
votes
1
answer
182
views
Why doesn't Brave resolve DNS rewrites?
I have set up AdGuard Home and pointed my router to the AGH instance in order to block ads etc.
I have created a couple of DNS rewrites so that I enter an address to my liking and one of these is ...
- 1,835
0
votes
0
answers
184
views
How to setup a bind9 server for a private home network
My end goal is to setup a DNS server to use in the network 10.0.0.0/24, the network consists of a TP-Link home switch and a workstation running runtu(ubuntu)linux and a laptop connect to that switch, ...
- 1
0
votes
1
answer
139
views
Forward DNS request to mDNS resolution
I use mDNS (with avahi, and libnss-mdns) a lot in my home network. However, I've tried to setup Prometheus, and it simply does not care about system resolution, it just takes the name servers from /...
- 111
0
votes
0
answers
158
views
wget does not always retrive data
I've got a problem with wget, but I do not know where real issue is:
my wget (normally POST data, seems to be correct, tried with GET also the output is the same) does not allways retrive the result (...
- 3
0
votes
1
answer
185
views
Cannot resolve local sub domain on network
I have a raspberry with a dnsmasq server installed (via NetworkManager). I need to be able to resolve *.raspberry.local on my local (private) network.
Here is my config :
In /etc/NetworkManager/...
- 1
0
votes
1
answer
208
views
How to retrieve raw bytes of DNS response?
I want to retrieve raw bytes of DNS response for debugging reason, for example:
dig -t https clickhouse.com
;; ANSWER SECTION:
clickhouse.com. 242 IN HTTPS 1 . alpn="h3,h3-29,...
- 9,307