WNR3500L v2 Dnsmasq problem

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3
Author Message
o2bad455
DD-WRT User


Joined: 08 Oct 2015
Posts: 189

PostPosted: Wed Nov 03, 2021 22:27    Post subject: Reply with quote
Thanks Alozaros! Your explanation helped and I'll look into those options.
_________________
My DD-WRT Routers:
Linksys WRT1900ACS - Marvell (2x): r48646
Netgear R7000 - Broadcom (3x): r47720
Netgear R9000 - Atheros (1x): r47608
PC x86-64 VM - Atheros (1x): r46316
Linksys WRT54G/GS - Broadcom (4x): r44715
Sponsor
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 5009
Location: UK, London, just across the river..

PostPosted: Wed Nov 03, 2021 23:09    Post subject: Reply with quote
o2bad455 wrote:
Thanks Alozaros! Your explanation helped and I'll look into those options.


glad you sorted it...as well you can find good guides at the Sticky's or look at those green and red links in my signature...

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 48646 WAP
TP-Link WR1043NDv2 -DD-WRT 48865 Gateway,DNS,AP Isolation,Ad-Block,Firewall,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 -DD-WRT 48886 Gateway,DNS,Ad-Block,Firewall,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 -Gargoyle OS 1.13.0b AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear R7800 --DD-WRT 48886 Gateway,DNS,AD-Block,AP&Net Isolation,VLAN's,Firewall,DoT,Vanilla
Netgear R9000 --DD-WRT 48886 Gateway,DNS,AD-Block,AP Isolation,Firewall,Forced DNS,DoT,2,4Ghz only,Vanilla
Broadcom
Netgear R7000 ---DD-WRT 48886 Gateway,DNS,AD-Block,Firewall,Forced DNS,VLAN's,DoT,VPN
------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
o2bad455
DD-WRT User


Joined: 08 Oct 2015
Posts: 189

PostPosted: Wed Nov 03, 2021 23:28    Post subject: Reply with quote
Yep, there's a lot under the hood here and apparently some slope to the learning curve.

I hadn't looked at DNS in a while, but just noticed that @redhawk0 showed "RFC4039 Rapid Commit support" as enabled, so I gave it a try.

Enabling RFC4039 on current build unexpectedly allowed IPV6 DNS servers that I hadn't seen since intentionally blocking IPV6 (this network is intentionally IPV4-only for now).

Disabling RFC4039 nixed all the IPV6 DNS servers leaving just the IPV4 DNS servers, FWIW. I'm not quite sure what's going on there or if it poses any risk, but I thought I should mention it.

_________________
My DD-WRT Routers:
Linksys WRT1900ACS - Marvell (2x): r48646
Netgear R7000 - Broadcom (3x): r47720
Netgear R9000 - Atheros (1x): r47608
PC x86-64 VM - Atheros (1x): r46316
Linksys WRT54G/GS - Broadcom (4x): r44715
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 5009
Location: UK, London, just across the river..

PostPosted: Thu Nov 04, 2021 0:01    Post subject: Reply with quote
RFC4039 is in fact 2 way message exchange instead of the normal 4 way...it speeds up the DHCP, i don't know exactly how it fetches ISP DNS v6 servers along to the DNS config..but as you said it does, it could be a bug..

https://datatracker.ietf.org/doc/rfc4039/

i don't have it 'on' as im skeptic about it, as well my devices get DHCP quite fast don't need faster...at all..

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 48646 WAP
TP-Link WR1043NDv2 -DD-WRT 48865 Gateway,DNS,AP Isolation,Ad-Block,Firewall,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 -DD-WRT 48886 Gateway,DNS,Ad-Block,Firewall,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 -Gargoyle OS 1.13.0b AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear R7800 --DD-WRT 48886 Gateway,DNS,AD-Block,AP&Net Isolation,VLAN's,Firewall,DoT,Vanilla
Netgear R9000 --DD-WRT 48886 Gateway,DNS,AD-Block,AP Isolation,Firewall,Forced DNS,DoT,2,4Ghz only,Vanilla
Broadcom
Netgear R7000 ---DD-WRT 48886 Gateway,DNS,AD-Block,Firewall,Forced DNS,VLAN's,DoT,VPN
------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
thommy181
DD-WRT User


Joined: 16 Mar 2019
Posts: 262
Location: Szczecin, Poland EU

PostPosted: Thu Nov 04, 2021 11:43    Post subject: Reply with quote
o2bad455 wrote:
thommy181 wrote:

Additional configuration
- no resolv
- server=8.8.8.8
- domain-needed
- expand-hosts
- no-negcache


I see a typo where "no resolv" should be "no-resolv". Hopefully it's just in your post, but I think it could be an issue if also in your config.

GENERAL QUESTION: When usisng DNSmasq, how can I list the current DNS server IPs? That is, not just the one currently in use but any that could be used (such as if my provider managed to reinsert theirs)? Online checks (e.g., ipleak.net) only seem to catch those recently used. The hypothetical scenario would be if ALL of those momentarily failed (and not even all of my server= are shown), what are the other possibilities potentially available to the router for fallback? Is there any single file or buffer that lists them all, or perhaps a small collection of files and buffers that could be dumped?


I'm check configuration in GUI and there is OK. I have "no-resolv" value. I have 8.8.8.8 DNS resolver in configuration. When I'm make test via DNSLEAK online service there it was many servers located in Warsaw (Poland is my country). Probably it's situation where all that servers try to translate data of domain and router sudddenly is flood. Presumably it is, because when issue is active I have always 100% cpu usage. Currently I will continue to observe my device. Issue is still actual. I'm stay on 47608 DD-WRT build.
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 12482
Location: Texas, USA

PostPosted: Thu Nov 04, 2021 14:53    Post subject: Reply with quote
You're going to continue to have problems if you rely on only one dns server / resolver. I don't know how much clearer it can be explained to you.
_________________
Official Forum Rules, Guidelines & Helpful InformationFirmware FAQInstallation WikiWhere Do I Download Firmware‽
DON'T use Chromium-based browsersRTFM/STFW TL;DR is NOT an excuse. • Why Should I Care What Color the Bikeshed Is‽
Please DO NOT PM me with questions; Ask in the forum. ---------------------- Linux User #377467 counter.li.org / linuxcounter.net
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 5009
Location: UK, London, just across the river..

PostPosted: Thu Nov 04, 2021 15:10    Post subject: Reply with quote
kernel-panic69 wrote:
You're going to continue to have problems if you rely on only one dns server / resolver. I don't know how much clearer it can be explained to you.


thommy181
yep this is true...its advised to have more than 1, its
a good practice to have 3,4,5,6 it wont hurt..unless those are contradicting each other with web filtering...
try to use 8.8.8.8 and 1.1.1.1
personally i avoid 8.8.8.8 for a reason...and i know lots of ppl, that do the same...

the reason you see many results in dnsleak test is because 8.8.8.8 is using transponders/ local servers in your location that are directly connected to 8.8.8.8 because you are not close enough...

https://www.lifewire.com/free-and-public-dns-servers-2626062

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 48646 WAP
TP-Link WR1043NDv2 -DD-WRT 48865 Gateway,DNS,AP Isolation,Ad-Block,Firewall,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 -DD-WRT 48886 Gateway,DNS,Ad-Block,Firewall,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 -Gargoyle OS 1.13.0b AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear R7800 --DD-WRT 48886 Gateway,DNS,AD-Block,AP&Net Isolation,VLAN's,Firewall,DoT,Vanilla
Netgear R9000 --DD-WRT 48886 Gateway,DNS,AD-Block,AP Isolation,Firewall,Forced DNS,DoT,2,4Ghz only,Vanilla
Broadcom
Netgear R7000 ---DD-WRT 48886 Gateway,DNS,AD-Block,Firewall,Forced DNS,VLAN's,DoT,VPN
------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
Evengard
DD-WRT Novice


Joined: 03 Jul 2021
Posts: 15

PostPosted: Mon Nov 08, 2021 21:54    Post subject: Reply with quote
Seems like my problem was indeed a combination of strict-order with all-servers. Which is weird because it worked on an older build.
Anyways, seems to be fixed.
Goto page Previous  1, 2, 3 Display posts from previous:    Page 3 of 3
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum