Not able to access domain pointing to my IP address

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
T-z3P
DD-WRT Novice


Joined: 18 Nov 2011
Posts: 23

PostPosted: Mon Nov 29, 2021 19:36    Post subject: Not able to access domain pointing to my IP address Reply with quote
Hello,

Not sure I have posted in the right part of the forum, but here it is:

I have an issue where I'm not able to resolve domains that are pointing to my IP address when I'm inside the network (This site can’t be reached), regardless the client used (mobile, pc) or the internet browser used.

You have the network topology attached.

When pinging 1.mysupersecretdomain.tld it goes to 123.45.6.7, so it is indeed pointing where it is supposed to.

Code:
C:\Users\MySuperSecretUsername>ping 1.mysupersecretdomain.tld

Pinging 1.mysupersecretdomain.tld [123.45.6.7] with 32 bytes of data:
Reply from 123.45.6.7: bytes=32 time<1ms TTL=64
Reply from 123.45.6.7: bytes=32 time=2ms TTL=64
Reply from 123.45.6.7: bytes=32 time<1ms TTL=64
Reply from 123.45.6.7: bytes=32 time<1ms TTL=64

Ping statistics for 123.45.6.7:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 2ms, Average = 0ms


Nslookup shows ok to me.

Code:
C:\Users\MySuperSecretUsername>nslookup 1.mysupersecretdomain.tld
Server:  WRT32X-DD-WRT
Address:  192.168.1.1

Non-authoritative answer:
Name:    1.mysupersecretdomain.tld
Address:  123.45.6.7


The funny thing (which is driving me mad) is that, when using the LTE connection with my mobile phone, the web page is loading just fine, SSL is in place, as it should be. Simply put, when trying to access 1.mysupersecretdomain.tld outside my network, everything works as expected.

Any ideas before I decide to smash the router with a hammer? It's obviously something I'm doing wrong with my router config, altough I don't have anything fancy in place. Only 2 isolated VAPs with different DHCP servers and a Wireguard server.

_________________
Linksys WRT32X - DD-WRT v3.0-r50551 std (10/19/22)
Linksys EA6300 - DD-WRT v3.0-r40167 (backup router if something goes wrong with the main one)
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 13113
Location: Texas, USA

PostPosted: Mon Nov 29, 2021 19:58    Post subject: Reply with quote
Probably a result of dns rebind protection. One of these should solve it:
Code:
rebind-domain-ok=/mysupersecretdomain.tld/
rebind-localhost=ok

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
At some point, people just get plain tired of this place.
Because they are tired of bottom-feeders and the same old hat.

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
T-z3P
DD-WRT Novice


Joined: 18 Nov 2011
Posts: 23

PostPosted: Mon Nov 29, 2021 20:25    Post subject: Reply with quote
Thank you for your reply. I have tried that, but it doesn't work. I can't access 1.mysupersecretdomain.tld. Additionally, the DHCP fails. In order to get a valid IP address, I will have to set it manually on the client. Connecting to a Wi-Fi doesn't works as o result of DHCP not working.
_________________
Linksys WRT32X - DD-WRT v3.0-r50551 std (10/19/22)
Linksys EA6300 - DD-WRT v3.0-r40167 (backup router if something goes wrong with the main one)
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 13113
Location: Texas, USA

PostPosted: Mon Nov 29, 2021 21:08    Post subject: Reply with quote
Then there is another problem elsewhere with your configuration. I can only guess you are using the static IP inputs on the main page, querying in strict order, and not using a no-resolv directive with server= entries in your additional dnsmasq config, among other things. Best way is to provide visuals of your applicable configurations and more information so we can have a better chance at successfully troubleshooting this.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
At some point, people just get plain tired of this place.
Because they are tired of bottom-feeders and the same old hat.

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
T-z3P
DD-WRT Novice


Joined: 18 Nov 2011
Posts: 23

PostPosted: Mon Nov 29, 2021 21:24    Post subject: Reply with quote
DHCP-Authoritative is disabled
Recursive DNS Resolving (Unbound) is disabled
Forced DNS Redirection is disabled

Other than that, please check the attachment. If there is anything else that you feel like it is relevant, please let me know.

And yes, the DNS was set from main page, not from additional dnsmasq options. I have tried without DNS servers (just using the ISP-provided DNS servers) and it's still not working...

_________________
Linksys WRT32X - DD-WRT v3.0-r50551 std (10/19/22)
Linksys EA6300 - DD-WRT v3.0-r40167 (backup router if something goes wrong with the main one)
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 13113
Location: Texas, USA

PostPosted: Mon Nov 29, 2021 21:32    Post subject: Reply with quote
Not sure why you even have telnet enabled; not sure why you don't have klogd enabled...

There is plenty of info IRT SmartDNS in this thread, especially on this page:

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=323896&postdays=0&postorder=asc&start=45

Probably a configuration issue....

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
At some point, people just get plain tired of this place.
Because they are tired of bottom-feeders and the same old hat.

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 10819
Location: Netherlands

PostPosted: Tue Nov 30, 2021 7:38    Post subject: Reply with quote
Try (Additional DNSMasq options):

address=/1.mysupersecretdomain.tld/"local-ip-of router"

e.g.:
address=/1.mysupersecretdomain.tld/192.168.1.1

or with the external IP:
address=/1.mysupersecretdomain.tld/123.45.6.7

_________________
Routers:Netgear R7800, R7000, R6400v1, R6400v2, Linksys EA8500, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum