[Cerowrt-devel] local dns-sd requests being forwarded to upstream servers on CeroWRT?

[Dave Taht]

On Thu, Apr 24, 2014 at 5:33 AM, Aaron Wood <woody77 at gmail.com> wrote:
> Using CeroWRT 3.10.36-4, I'm seeing the following in the logs:
>
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> b._dns-sd._udp.96.42.30.172.in-addr.arpa from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: forwarded
> b._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8

I don't think it should do that.

Am curious if it happens from the ethernet interface.



> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> db._dns-sd._udp.96.42.30.172.in-addr.arpa from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: forwarded
> db._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> r._dns-sd._udp.96.42.30.172.in-addr.arpa from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: forwarded
> r._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> dr._dns-sd._udp.96.42.30.172.in-addr.arpa from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: forwarded
> dr._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> lb._dns-sd._udp.96.42.30.172.in-addr.arpa from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: forwarded
> lb._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> b._dns-sd._udp.home.lan from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: config
> b._dns-sd._udp.home.lan is NXDOMAIN
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> db._dns-sd._udp.home.lan from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: config
> db._dns-sd._udp.home.lan is NXDOMAIN

The NXDOMAINS seem sane.

> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> r._dns-sd._udp.home.lan from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: config
> r._dns-sd._udp.home.lan is NXDOMAIN
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> dr._dns-sd._udp.home.lan from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: config
> dr._dns-sd._udp.home.lan is NXDOMAIN
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: query[PTR]
> lb._dns-sd._udp.home.lan from 172.30.42.99
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: config
> lb._dns-sd._udp.home.lan is NXDOMAIN
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> b._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8

Shouldn't do that either.

> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> db._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> r._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> dr._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> lb._dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _dns-sd._udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> _udp.96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 96.42.30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 30.172.in-addr.arpa to 8.8.8.8
> Thu Apr 24 14:15:14 2014 daemon.info dnsmasq[13365]: dnssec-query[DS]
> 30.172.in-addr.arpa to 8.8.8.8
>
> 172.39.42.99 is my OSX laptop, and 172.39.42.96 is ip 0 in the sw10 subnet?
> The router has no leases active for that particular ip, and it doesn't have
> an arp entry on my laptop...
>
> -Aaron
>
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel at lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
>



-- 
Dave Täht

NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article