using udpsvd in a dns walled garden

George Georgalis <[email protected]> Tue, 10 Mar 2015 11:48:09 -0700
Newsgroups gmane.comp.misc.pape.general
Message-ID <CAHK3FNwuTBOaT=hNp9xq6ip2Sx8e21LFbyBn6PtHPqzkj8L5vQ@mail.gmail.com>
--089e013d0b7a8e89930510f3979c
Content-Type: text/plain; charset=UTF-8

Hi -

I'd like to configure name service for all but a small subset of dns
domains to resolve to 192.168.x.y but I'm having trouble configuring
udpsvd. My plan is to route all unacceptable domains to a fuax dns daemon
that replys a fixed 192.168.0.1 A records to every udp:53 connection.

I've configured dnscache and tinydns to operate a tld for this lan, and
properly forward dns requests for acceptable internet domains as well. For
unacceptable domain requests, I would prefer quick response to the fixed ip
where an informative webserver is configured.

If there is a way to configure tinydns give authoritative results for all
unconfigured requests that would be perfect, but as far as I can tell,
nothing like this works

&.:192.168.0.1
=.:192.168.0.1
.*:192.168.0.1

So, I've tried running a service something like (I don't have the exact
wire sniffed data handy):

udpsvd 192.168.0.53 53 echo "standard dns response"

however that sends my echo message to the log program; not to the port 53
socket as expected. Not sure how this works, I even tried:

udpsvd 192.168.0.53 53 echo "standard dns response" 1>&0

but that's not sending the echo program's output back to the remote
connection as desired. The only queries I would expect at this ip would be
for domains that should get a fixed A record response. Can udpsvd be used
this way? How?

-George


-- 
George Georgalis, (415) 894-2710, http://www.galis.org/

--089e013d0b7a8e89930510f3979c
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div><div>Hi -<br><br></div>I&#39;d like to configure=
 name service for all but a small subset of dns domains to resolve to 192.1=
68.x.y but I&#39;m having trouble configuring udpsvd. My plan is to route a=
ll unacceptable domains to a fuax dns daemon that replys a fixed 192.168.0.=
1 A records to every udp:53 connection.<br><br></div><div>I&#39;ve configur=
ed dnscache and tinydns to operate a tld for this lan, and properly forward=
 dns requests for acceptable internet domains as well. For unacceptable dom=
ain requests, I would prefer quick response to the fixed ip where an inform=
ative webserver is configured.<br><br></div><div>If there is a way to confi=
gure tinydns give authoritative results for all unconfigured requests that =
would be perfect, but as far as I can tell, nothing like this works<br><br>=
&amp;.:192.168.0.1<br>=3D.:192.168.0.1<br>.*:192.168.0.1<br><br></div><div>=
So, I&#39;ve tried running a service something like (I don&#39;t have the e=
xact wire sniffed data handy):<br><br></div><div>udpsvd 192.168.0.53 53 ech=
o &quot;standard dns response&quot;<br><br></div>however that sends my echo=
 message to the log program; not to the port 53 socket as expected. Not sur=
e how this works, I even tried:<br><br>udpsvd 192.168.0.53 53 echo &quot;st=
andard dns response&quot; 1&gt;&amp;0<br><br>but that&#39;s not sending the=
 echo program&#39;s output back to the remote connection as desired. The on=
ly queries I would expect at this ip would be for domains that should get a=
 fixed A record response. Can udpsvd be used this way? How?<br><br>-George<=
br><br><br>-- <br><div class=3D"gmail_signature"><div dir=3D"ltr"><div>Geor=
ge Georgalis, (415) 894-2710, <a href=3D"http://www.galis.org/" target=3D"_=
blank">http://www.galis.org/</a></div></div></div>
</div></div>

--089e013d0b7a8e89930510f3979c--