Lookyloo / uwhoisd

A 'Universal WHOIS' proxy server - you query it, it gives back the correct details
MIT License
11 stars 3 forks source link

restricted network usage? #8

Closed juju4 closed 3 months ago

juju4 commented 1 year ago

is it possible to use uwhoisd with a restricted network with webproxy/firewall?

$ more /var/log/uwhoisd_error.log 
Unable to fetch the PublicSuffixList: <urlopen error [Errno -3] Temporary failure in name resolution>
Unable to fetch the PublicSuffixList: <urlopen error [Errno -3] Temporary failure in name resolution>
+ ../../redis/src/redis-server ./cache.conf
+ ../../redis/src/redis-server ./whowas.conf
Unable to fetch the PublicSuffixList: <urlopen error [Errno -3] Temporary failure in name resolution>
Unable to fetch the PublicSuffixList: <urlopen error [Errno -3] Temporary failure in name resolution>
Unable to fetch the PublicSuffixList: <urlopen error [Errno -3] Temporary failure in name resolution>
Unable to fetch the PublicSuffixList: <urlopen error [Errno -3] Temporary failure in name resolution>
Unable to fetch the PublicSuffixList: <urlopen error [Errno -3] Temporary failure in name resolution>
+ ../../redis/src/redis-server ./cache.conf
+ ../../redis/src/redis-server ./whowas.conf
Unable to fetch the PublicSuffixList: <urlopen error [Errno -3] Temporary failure in name resolution>

Locally, publicsuffix.org or www.google.com resolves correctly. Seeing authorized queries for publicsuffix.org in my webproxy logs

From a firewall perspective, what is needed outside of web and whois 43/tcp? any recommended tests?

Thanks Tested with HEAD on ubuntu 22.04 with setup from ansible role

Rafiot commented 1 year ago

It should be possible, but it is not tested.

The error you're getting seems to refer to a DNS issue. I'm not sure how to debug that one.

For context, uWhoisd uses the system command whois to resolve the queries (ipv4/v6, domain, ASN), and I think whois mostly uses 43/tcp, but it may sometimes use other port, I'm not sure.

Are you seeing any blocked requests on your firewall? That would be the first thing to check.