TechnitiumSoftware / DnsServer

Technitium DNS Server
https://technitium.com/dns/
GNU General Public License v3.0
4.22k stars 415 forks source link

Do you want to add the dns diversion file? #489

Closed Potterli20 closed 1 year ago

Potterli20 commented 1 year ago

It's like a diversion file for dnsproxy, right? https://github.com/AdguardTeam/AdGuardHome/wiki/Configuration#upstreams-for-domains

ShreyasZare commented 1 year ago

Thanks for the post. This feature already exists and is called Conditional Forwarder Zone. You have to create a zone for the specific domain name and specify a forwarder while creating it.

Potterli20 commented 1 year ago

Thanks for the post. This feature already exists and is called Conditional Forwarder Zone. You have to create a zone for the specific domain name and specify a forwarder while creating it.

The difference is that my domain name is relatively large, about 50m dns diversion files, which is different from this one. I use dns diversion files, which are files

Potterli20 commented 1 year ago

Thanks for the post. This feature already exists and is called Conditional Forwarder Zone. You have to create a zone for the specific domain name and specify a forwarder while creating it.

This is the dns diversion file:https://file.trli.club:2083/dns-hosts/dns-adguardhome/blacklist_full.txt

ShreyasZare commented 1 year ago

Thanks for the details. Will consider to have some option for this.

Potterli20 commented 1 year ago

Thanks for the details. Will consider to have some option for this.

okk

ShreyasZare commented 1 year ago

I think, this feature can be implemented with a DNS App so will think on it and post updates.

Potterli20 commented 1 year ago

I think, this feature can be implemented with a DNS App so will think on it and post updates.

Can only be enough to use the sub-tour file that is the best, if there is a standard format can also write, because my diversion file has http3 protocol, such as h3://dns.google, may not be supported on the app.

ShreyasZare commented 1 year ago

I think, this feature can be implemented with a DNS App so will think on it and post updates.

Can only be enough to use the sub-tour file that is the best, if there is a standard format can also write, because my diversion file has http3 protocol, such as h3://dns.google, may not be supported on the app.

HTTP/3 is supported in .NET so wont be an issue. Also, DNS-over-QUIC support will be available soon in the DNS server.

Potterli20 commented 1 year ago

I think, this feature can be implemented with a DNS App so will think on it and post updates.

Can only be enough to use the sub-tour file that is the best, if there is a standard format can also write, because my diversion file has http3 protocol, such as h3://dns.google, may not be supported on the app.

HTTP/3 is supported in .NET so wont be an issue. Also, DNS-over-QUIC support will be available soon in the DNS server.

I suggest you give me a standard format so that I can generate the file. Thank you

ShreyasZare commented 1 year ago

I think, this feature can be implemented with a DNS App so will think on it and post updates.

Can only be enough to use the sub-tour file that is the best, if there is a standard format can also write, because my diversion file has http3 protocol, such as h3://dns.google, may not be supported on the app.

HTTP/3 is supported in .NET so wont be an issue. Also, DNS-over-QUIC support will be available soon in the DNS server.

I suggest you give me a standard format so that I can generate the file. Thank you

The DNS app will just use the same file that you posted link for. It will use it similar to a block list by downloading it periodically so it stays updated.

Potterli20 commented 1 year ago

I think, this feature can be implemented with a DNS App so will think on it and post updates.

Can only be enough to use the sub-tour file that is the best, if there is a standard format can also write, because my diversion file has http3 protocol, such as h3://dns.google, may not be supported on the app.

HTTP/3 is supported in .NET so wont be an issue. Also, DNS-over-QUIC support will be available soon in the DNS server.

I suggest you give me a standard format so that I can generate the file. Thank you

The DNS app will just use the same file that you posted link for. It will use it similar to a block list by downloading it periodically so it stays updated.

Thank you. Thank you.

Potterli20 commented 1 year ago

I think, this feature can be implemented with a DNS App so will think on it and post updates.

Can only be enough to use the sub-tour file that is the best, if there is a standard format can also write, because my diversion file has http3 protocol, such as h3://dns.google, may not be supported on the app.

HTTP/3 is supported in .NET so wont be an issue. Also, DNS-over-QUIC support will be available soon in the DNS server.

I suggest you give me a standard format so that I can generate the file. Thank you

The DNS app will just use the same file that you posted link for. It will use it similar to a block list by downloading it periodically so it stays updated.

When will the dns app be available?

ShreyasZare commented 1 year ago

When will the dns app be available?

It will take a while. I first have to implement DNS-over-QUIC support and once that's done then will get to working on this app.

Potterli20 commented 1 year ago

When will the dns app be available?

It will take a while. I first have to implement DNS-over-QUIC support and once that's done then will get to working on this app.

okk

Potterli20 commented 1 year ago

When will the dns app be available?

It will take a while. I first have to implement DNS-over-QUIC support and once that's done then will get to working on this app.

When will v10.1 be released??

ShreyasZare commented 1 year ago

When will v10.1 be released??

The next update v11 should be available by first week of Feb.

Potterli20 commented 1 year ago

When will v10.1 be released??

The next update v11 should be available by first week of Feb.

okkk,So we can use the shunt file? Is it also exploitable?

ShreyasZare commented 1 year ago

okkk,So we can use the shunt file? Is it also exploitable?

Please share links for shunt file samples or any documentation.

Potterli20 commented 1 year ago

okkk,So we can use the shunt file? Is it also exploitable?

Please share links for shunt file samples or any documentation.

document:https://github.com/AdguardTeam/AdGuardHome/wiki/Configuration#upstreams-for-domains

file:https://file.trli.club:2083/dns-hosts/dns-adguardhome/whitelist_full.txt

ShreyasZare commented 1 year ago

okkk,So we can use the shunt file? Is it also exploitable?

Please share links for shunt file samples or any documentation.

document:https://github.com/AdguardTeam/AdGuardHome/wiki/Configuration#upstreams-for-domains

file:https://file.trli.club:2083/dns-hosts/dns-adguardhome/whitelist_full.txt

What is the difference between the diversion file and shunt file?

Potterli20 commented 1 year ago

okkk,So we can use the shunt file? Is it also exploitable?

Please share links for shunt file samples or any documentation.

document:https://github.com/AdguardTeam/AdGuardHome/wiki/Configuration#upstreams-for-domains

file:https://file.trli.club:2083/dns-hosts/dns-adguardhome/whitelist_full.txt

What is the difference between the diversion file and shunt file?

This shunting file plays a clean dns in China or other countries. If dns is used in China, the dns will be polluted. If dns is not used, the DNS will be polluted all the time, resulting in the failure to access the website

Potterli20 commented 1 year ago

If you use geoip, it's a hassle, it's a hassle to use geoip locally

ShreyasZare commented 1 year ago

What is the difference between the diversion file and shunt file?

This shunting file plays a clean dns in China or other countries. If dns is used in China, the dns will be polluted. If dns is not used, the DNS will be polluted all the time, resulting in the failure to access the website

Isn't the diversion file the same thing then? Both files you shared are just a bunch of domain names which needs to be conditionally forwarded. There does not seem to be any difference between both of them.

ShreyasZare commented 1 year ago

If you use geoip, it's a hassle, it's a hassle to use geoip locally

What is geoip?

Potterli20 commented 1 year ago

If you use geoip, it's a hassle, it's a hassle to use geoip locally

What is geoip?

mosdns relies on geoip to perform the shunt

ShreyasZare commented 1 year ago

If you use geoip, it's a hassle, it's a hassle to use geoip locally

What is geoip?

mosdns relies on geoip to perform the shunt

I am not aware of mosdns features or how it works. I have not yet understood what is the difference between the two files you want to be implemented.

Potterli20 commented 1 year ago

If you use geoip, it's a hassle, it's a hassle to use geoip locally

What is geoip?

mosdns relies on geoip to perform the shunt

I am not aware of mosdns features or how it works. I have not yet understood what is the difference between the two files you want to be implemented.

In fact, I do not know mosdns, geoip is based on regional ip distribution, and domain name is based on domain name distribution. Both help speed up domain access.Shunt file is a good thing

ShreyasZare commented 1 year ago

Technitium DNS Server v11 is now available which now has Advanced Forwarding DNS app that supports Adguard config file. Do check and let me know your feedback.

Potterli20 commented 1 year ago

Technitium DNS Server v11 is now available which now has Advanced Forwarding DNS app that supports Adguard config file. Do check and let me know your feedback

okkk好的

Potterli20 commented 1 year ago

Hello, how to check the dns file has taken effect? Here's how I set it up Screenshot_2023-02-19-12-12-01-294_com.android.browser.jpg

Screenshot_2023-02-19-12-12-15-034_com.android.browser.jpg

ShreyasZare commented 1 year ago

The proxy & forwarder in the DNS server's Settings section does not have any effect on the Advanced Forwarding app.

To test if the app is working as expected, you should test it with DNS Client tab to check if a domain name from the config is resolving as expected.

If you want to be 100% sure, you can run Wireshark or tcpdump on the DNS server and then test for a domain name using the DNS client tab and check which upstream server the DNS server connects to.

Potterli20 commented 1 year ago

The proxy & forwarder in the DNS server's Settings section does not have any effect on the Advanced Forwarding app.

To test if the app is working as expected, you should test it with DNS Client tab to check if a domain name from the config is resolving as expected.

If you want to be 100% sure, you can run Wireshark or tcpdump on the DNS server and then test for a domain name using the DNS client tab and check which upstream server the DNS server connects to.

okkk

Potterli20 commented 1 year ago

The proxy & forwarder in the DNS server's Settings section does not have any effect on the Advanced Forwarding app.

To test if the app is working as expected, you should test it with DNS Client tab to check if a domain name from the config is resolving as expected.

If you want to be 100% sure, you can run Wireshark or tcpdump on the DNS server and then test for a domain name using the DNS client tab and check which upstream server the DNS server connects to.

I was wondering which configuration file is a local file? Or what? If I update the dns configuration file, how do I know it has been updated?

ShreyasZare commented 1 year ago

I was wondering which configuration file is a local file? Or what? If I update the dns configuration file, how do I know it has been updated?

The configFile path you specify in the app config is your local file on disk. To update the file you just replace it with a new file and the DNS app will reload it within a minute automatically.

Potterli20 commented 1 year ago

I was wondering which configuration file is a local file? Or what? If I update the dns configuration file, how do I know it has been updated?

The configFile path you specify in the app config is your local file on disk. To update the file you just replace it with a new file and the DNS app will reload it within a minute automatically.

There are still problems. File is valid dnssec is also closed or there is a problem

I feel fine with a custom port with ip like 127.0.0.1.

I also wrote 8.8.8.8 in /etc/resolv.conf, which is also problematic.

ShreyasZare commented 1 year ago

There are still problems. File is valid dnssec is also closed or there is a problem

If possible do share your config. You can email it with relevant screenshots.

I feel fine with a custom port with ip like 127.0.0.1.

I did not get this part.

I also wrote 8.8.8.8 in /etc/resolv.conf, which is also problematic.

The DNS server does not use the /etc/resolv.conf file. It should have the IP address of the DNS server you want to use on the system.

Potterli20 commented 1 year ago

There are still problems. File is valid dnssec is also closed or there is a problem

If possible do share your config. You can email it with relevant screenshots.

I feel fine with a custom port with ip like 127.0.0.1.

I did not get this part.

I also wrote 8.8.8.8 in /etc/resolv.conf, which is also problematic.

The DNS server does not use the /etc/resolv.conf file. It should have the IP address of the DNS server you want to use on the system.

Screenshot_2023-02-20-17-39-55-587_com.android.browser.jpg

Screenshot_2023-02-20-17-40-10-674_com.android.browser.jpg

Screenshot_2023-02-20-17-40-18-748_com.android.browser.jpg

ShreyasZare commented 1 year ago

The DNS app config looks good. Check the DNS logs to see if there was any error in loading the adguard file. Also can you share the "domain-full.txt" file?

Potterli20 commented 1 year ago

The DNS app config looks good. Check the DNS logs to see if there was any error in loading the adguard file. Also can you share the "domain-full.txt" file?

https://file-cn.trli.club:2083/dns-hosts/dns-adguardhome/blacklist_full.txt

Potterli20 commented 1 year ago

The DNS app config looks good. Check the DNS logs to see if there was any error in loading the adguard file. Also can you share the "domain-full.txt" file?

https://file-cn.trli.club:2083/dns-hosts/dns-adguardhome/blacklist_full.txt

This is the file home page https://file-cn.trli.club:2083/dns-hosts/dns-adguardhome/

Potterli20 commented 1 year ago

The DNS app config looks good. Check the DNS logs to see if there was any error in loading the adguard file. Also can you share the "domain-full.txt" file?

See how to modify it over there

ShreyasZare commented 1 year ago

I have found a couple of issues in there so will test it and let you know.

Potterli20 commented 1 year ago

I have found a couple of issues in there so will test it and let you know.

okok

Potterli20 commented 1 year ago

I have found a couple of issues in there so will test it and let you know.

When will it be updated??

ShreyasZare commented 1 year ago

I have found a couple of issues in there so will test it and let you know.

When will it be updated??

Today in few hours. Will post here to let you know.

Potterli20 commented 1 year ago

I have found a couple of issues in there so will test it and let you know.

When will it be updated??

Today in few hours. Will post here to let you know.

okoko

ShreyasZare commented 1 year ago

Technitium DNS Server v11.0.1 is now available that fixes the issue. Do update and let me know your feedback.

Potterli20 commented 1 year ago

Technitium DNS Server v11.0.1 is now available that fixes the issue. Do update and let me know your feedback.

I have updated it, but I need to give you an answer in a day

Potterli20 commented 1 year ago

Technitium DNS Server v11.0.1 is now available that fixes the issue. Do update and let me know your feedback.

It's the same problem. I can't get on the cache

ShreyasZare commented 1 year ago

Technitium DNS Server v11.0.1 is now available that fixes the issue. Do update and let me know your feedback.

It's the same problem. I can't get on the cache

Thanks for the feedback. Please describe the issue in detail and post any errors that you see in logs.