using udpsvd in a dns walled garden
George Georgalis <[email protected]> Tue, 10 Mar 2015 11:48:09 -0700
| Newsgroups | gmane.comp.misc.pape.general |
|---|---|
| Message-ID | <CAHK3FNwuTBOaT=hNp9xq6ip2Sx8e21LFbyBn6PtHPqzkj8L5vQ@mail.gmail.com> |
--089e013d0b7a8e89930510f3979c Content-Type: text/plain; charset=UTF-8 Hi - I'd like to configure name service for all but a small subset of dns domains to resolve to 192.168.x.y but I'm having trouble configuring udpsvd. My plan is to route all unacceptable domains to a fuax dns daemon that replys a fixed 192.168.0.1 A records to every udp:53 connection. I've configured dnscache and tinydns to operate a tld for this lan, and properly forward dns requests for acceptable internet domains as well. For unacceptable domain requests, I would prefer quick response to the fixed ip where an informative webserver is configured. If there is a way to configure tinydns give authoritative results for all unconfigured requests that would be perfect, but as far as I can tell, nothing like this works &.:192.168.0.1 =.:192.168.0.1 .*:192.168.0.1 So, I've tried running a service something like (I don't have the exact wire sniffed data handy): udpsvd 192.168.0.53 53 echo "standard dns response" however that sends my echo message to the log program; not to the port 53 socket as expected. Not sure how this works, I even tried: udpsvd 192.168.0.53 53 echo "standard dns response" 1>&0 but that's not sending the echo program's output back to the remote connection as desired. The only queries I would expect at this ip would be for domains that should get a fixed A record response. Can udpsvd be used this way? How? -George -- George Georgalis, (415) 894-2710, http://www.galis.org/ --089e013d0b7a8e89930510f3979c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div><div><div>Hi -<br><br></div>I'd like to configure= name service for all but a small subset of dns domains to resolve to 192.1= 68.x.y but I'm having trouble configuring udpsvd. My plan is to route a= ll unacceptable domains to a fuax dns daemon that replys a fixed 192.168.0.= 1 A records to every udp:53 connection.<br><br></div><div>I've configur= ed dnscache and tinydns to operate a tld for this lan, and properly forward= dns requests for acceptable internet domains as well. For unacceptable dom= ain requests, I would prefer quick response to the fixed ip where an inform= ative webserver is configured.<br><br></div><div>If there is a way to confi= gure tinydns give authoritative results for all unconfigured requests that = would be perfect, but as far as I can tell, nothing like this works<br><br>= &.:192.168.0.1<br>=3D.:192.168.0.1<br>.*:192.168.0.1<br><br></div><div>= So, I've tried running a service something like (I don't have the e= xact wire sniffed data handy):<br><br></div><div>udpsvd 192.168.0.53 53 ech= o "standard dns response"<br><br></div>however that sends my echo= message to the log program; not to the port 53 socket as expected. Not sur= e how this works, I even tried:<br><br>udpsvd 192.168.0.53 53 echo "st= andard dns response" 1>&0<br><br>but that's not sending the= echo program's output back to the remote connection as desired. The on= ly queries I would expect at this ip would be for domains that should get a= fixed A record response. Can udpsvd be used this way? How?<br><br>-George<= br><br><br>-- <br><div class=3D"gmail_signature"><div dir=3D"ltr"><div>Geor= ge Georgalis, (415) 894-2710, <a href=3D"http://www.galis.org/" target=3D"_= blank">http://www.galis.org/</a></div></div></div> </div></div> --089e013d0b7a8e89930510f3979c--