Seji64 / SniDust

SmartDNS Proxy to hide your GeoLocation. Based on DnsDist and nginx
GNU General Public License v3.0
156 stars 43 forks source link

New port change introduces invalid CIDR address error #51

Closed presentpro closed 7 months ago

presentpro commented 7 months ago

Sorry if this is not well explained, I'm not an expert in this area.

Since the new update for changing the ports, it continued to work to some extent without making changes. However, if I change the ports in the yaml (using docker compose) file as recommended in the docs I end up with an error code and it no longer works, won't respond to DNS queries. New ports below:

ports:
            - 443:8443
            - 80:8080

I get the following error code:

2024-04-08T17:22:25Z ERR invalid CIDR address: /32 acl=cidr

Additionally, this may be related to using the old port method - but I have always had an issue with the below errors, and random crashes which I feel may be related but could never get to the bottom of:

Error while retrieving the security update for version dnsdist-1.8.2: Unable to get a valid Security Status update
Failed to retrieve security status update for '1.8.2' on dnsdist-1.8.2.security-status.secpoll.powerdns.com.

SniDust becomes unresponsive with lots of these types of errors in the logs:

2024-04-08T17:08:30Z ERR dial tcp: lookup diplomys-goznak.ru on 127.0.0.11:53: no such host service=http
2024-04-08T17:08:41Z ERR dial tcp: lookup www.askmarugujarat.in on 127.0.0.11:53: no such host service=http
2024-04-08T17:08:45Z ERR dial tcp: lookup www.kindergruppeklitzeklein.de on 127.0.0.11:53: no such host service=http
2024-04-08T17:08:48Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:08:57Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:06Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:25Z ERR dial tcp: lookup www.robinneefs.be on 127.0.0.11:53: no such host service=http
2024-04-08T17:09:27Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:28Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:34Z ERR dial tcp: lookup reyesestetica.webgarden.es on 127.0.0.11:53: no such host service=http
2024-04-08T17:09:34Z ERR dial tcp 103.205.254.243:80: connect: connection timed out service=http
2024-04-08T17:09:34Z ERR dial tcp 103.205.254.243:80: connect: connection timed out service=http
2024-04-08T17:09:34Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:35Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http

Any recommendations on how to fix these issues. Appreciate work on SniDust

Seji64 commented 7 months ago

Are you sure you have the latest Image Version? Looks Like new Config Mixed up with an old Image

presentpro commented 7 months ago

That sounds like it would make sense, is there any to tell in the logs, or another change I should make in the compose file. I thought the yaml compose file line below would use the latest image?

image: 'ghcr.io/seji64/snidust:main'

presentpro commented 7 months ago

Thank you, you were correct my normal update still hadn't pulled the most recent image. I manually refreshed this again and the image now is able to run with nginx. There are still 2 errors shown, I'm not sure whether these are going to similarly relate to crashes downstream as before, or whether this is now fully resolved..

Error while retrieving the security update for version dnsdist-1.8.2: Unable to get a valid Security Status update
Failed to retrieve security status update for '1.8.2' on dnsdist-1.8.2.security-status.secpoll.powerdns.com.
Seji64 commented 7 months ago

these are no errors => safe to ignore