styxyang / dnsmasq-chinadns Goto Github PK
View Code? Open in Web Editor NEWA patched version of dnsmasq which filters out some spurious IP
License: GNU General Public License v2.0
dnsmasq-chinadns's People
Contributors
Stargazers
Watchers
Forkers
cyfdecyf rampagex liyvhg afdnlw lafengnan dyis mljack vmlinz zihuxinyu repo-archives 11liju ym jyuny1 mba811 happyjake seevil fqtools noscripter wesavetheworld guoxiaoqiao jn7163 materone yssource antewu sangdandnsmasq-chinadns's Issues
貌似最近投毒的ip有更新？
最为显明的就是googlevideo.com解析的结果 要怎么才能收集？
使用了2天，经常会出现这个问题。
[Error] dial tcp: lookup tieba.baidu.com: no such host
重新刷新一次，就可以了。
dnsmasq.conf，除了cache加大了，其他都默认的，系统debian 7。
dnsmasq.resolv.conf 用的是223.5.5.5和8.8.8.8
以前用dnsmasq 没遇到过。
please update root-zone trust-anchors in trust-anchors.conf file
Users of your software that enable DNSSEC will not be able to validate DNS after October the 11th 2018.
Your repository contains a trust-anchors.conf file without the new DNSSEC trust-anchors:
trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
It should also include:
trust-anchor=.,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
More information can be found at: https://www.icann.org/resources/pages/ksk-rollover
Please don’t hesitate to get in touch.
Warmly,
Roy Arends
ICANN
请问能否考虑一下 windows 用户？
RT。谢谢。
不能检测DNS劫持中的空包污染问题
关于空包污染： http://www.lifetyper.com/2014/07/the-bogus-empty-response-from-dns-hijack-of-gfw.html
这个问题主要出现在国内DNS上，查询结果：
$ dig scontent-a.cdninstagram.com @114.114.114.114
; <<>> DiG 9.10-P2 <<>> scontent-a.cdninstagram.com @114.114.114.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26312
;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;scontent-a.cdninstagram.com. IN A
;; AUTHORITY SECTION:
cdninstagram.com. 30 IN NS b.ns.igcdn.com.
cdninstagram.com. 30 IN NS a.ns.igcdn.com.
;; ADDITIONAL SECTION:
a.ns.igcdn.com. 30 IN A 69.171.239.11
b.ns.igcdn.com. 30 IN A 69.171.255.11
;; Query time: 12 msec
;; SERVER: 114.114.114.114#53(114.114.114.114)
;; WHEN: Fri Aug 01 12:32:53 2014
;; MSG SIZE rcvd: 129
$ dig scontent-a.cdninstagram.com @202.96.96.68
; <<>> DiG 9.10-P2 <<>> scontent-a.cdninstagram.com @202.96.96.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 46616
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;scontent-a.cdninstagram.com. IN A
;; Query time: 6 msec
;; SERVER: 202.96.96.68#53(202.96.96.68)
;; WHEN: Fri Aug 01 12:35:25 2014
;; MSG SIZE rcvd: 56
使用谷歌 DNS 是有 A记录的
$ dig scontent-a.cdninstagram.com @8.8.4.4
; <<>> DiG 9.10-P2 <<>> scontent-a.cdninstagram.com @8.8.4.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43137
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;scontent-a.cdninstagram.com. IN A
;; ANSWER SECTION:
scontent-a.cdninstagram.com. 41 IN A 31.13.79.10
;; Query time: 163 msec
;; SERVER: 8.8.4.4#53(8.8.4.4)
;; WHEN: Fri Aug 01 12:43:24 2014
;; MSG SIZE rcvd: 72
ChinaDNS-C 可以处理这个问题，可以参考一下。
--help 参数
可不可以在--help里面加上 --spurious-ip 和 --spurious-ip-file 的参数
我想利用 dnsmasq --help |grep 'spurious-ip' 来判断是否包含了这个功能 进而进行类似更新spurious ip 列表或者启用关闭等设置的命令行
当前版本的 spurious-ip 设置无效
刚根据新版编译的，启动后日志有读取 spurious-ip 记录，但是对DNS污染不起作用。
降级至之前版本后是正常的，附上查询记录，运行环境 OpenWrt 。
$ dig www.youtube.com
; <<>> DiG 9.10-P2 <<>> www.youtube.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49286
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.youtube.com. IN A
;; ANSWER SECTION:
www.youtube.com. 18018 IN A 59.24.3.173
;; Query time: 8 msec
;; SERVER: 192.168.1.5#53(192.168.1.5)
;; WHEN: Mon Jul 07 14:22:26 D1 2014
;; MSG SIZE rcvd: 60
$ dig www.youtube.com
; <<>> DiG 9.10-P2 <<>> www.youtube.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26285
;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.youtube.com. IN A
;; ANSWER SECTION:
www.youtube.com. 21599 IN CNAME youtube-ui.l.google.com.
youtube-ui.l.google.com. 899 IN CNAME youtube-ui-china.l.google.com.
youtube-ui-china.l.google.com. 179 IN A 173.194.72.113
youtube-ui-china.l.google.com. 179 IN A 173.194.72.138
youtube-ui-china.l.google.com. 179 IN A 173.194.72.139
youtube-ui-china.l.google.com. 179 IN A 173.194.72.101
youtube-ui-china.l.google.com. 179 IN A 173.194.72.102
youtube-ui-china.l.google.com. 179 IN A 173.194.72.100
;; Query time: 77 msec
;; SERVER: 192.168.1.5#53(192.168.1.5)
;; WHEN: Mon Jul 07 14:29:44 D1 2014
;; MSG SIZE rcvd: 205
使用一段时间会占用过多cup
今天我用了3个小时就出现cpu占用45%左右的情况，造成程序半死状态不能正常工作，只有kill -9强制才能重启
另外求个spurious-ip功能的补丁文件 我试试回到上个版本怎么样
关于配置文件
请问dnsmasq.conf 配置文件，还支持server=/domain/ip 格式吗？
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.