TechnitiumSoftware / DnsServer

Technitium DNS Server
https://technitium.com/dns/
GNU General Public License v3.0
4.25k stars 418 forks source link

Can you provide doc for setting up Technitium DNS Server. Because I still cannot get the right DNS record even using DNS-over-TOR. #937

Closed basicallynewbie closed 4 months ago

basicallynewbie commented 4 months ago

I use docker to set up Technitium DNS Server. 192.168.1.2 is my server ip.

docker compose ``` version: "3" services: dns-server: container_name: dns-server hostname: dns-server image: technitium/dns-server:latest" ports: - "5380:5380/tcp" #DNS web console (HTTP) - "192.168.1.2:53:53/udp" #DNS service - "192.168.1.2:53:53/tcp" #DNS service - "192.168.1.2:853:853/udp" #DNS-over-QUIC service environment: - DNS_SERVER_DOMAIN=dns-server volumes: - config:/etc/dns restart: unless-stopped sysctls: - net.ipv4.ip_local_port_range=1024 65000 volumes: config: ```

After it's up, I logged in, went to "Settings" "Proxy & Forwarders", selected "DNS-over-QUIC" in "Forwarder Protocol", selected "AdGuard (DNS-over-QUIC)" in "Quick Select", and clicked "Save Settings". Then pointed my pc dns server to 192.168.1.2.

I used nslookup to test the domain "youtube.com" which is blocked by GFW. "youtube.com"'s true A record are: 142.251.16.91, 142.251.16.93, 142.251.16.136, 142.251.16.190. But what I get were 108.160.169.174 and 108.160.163.117 which are none of them. And I tried DoT, DoH, DoTOR. Only DNS record changed, but not match right ones. And I tried some sites which are known to under dns pollution, but can be still visited by manually setting up dns record. Still no help.

I thought my Technitium DNS Server container could get the right DNS record from AdGuard using DNS-over-QUIC.

ShreyasZare commented 4 months ago

Thanks for asking. Please ensure to clear cache when changing the forwarder. If a record exists in cache then it will be used even when you change the forwarder.

I would also recommend that you use the DNS Client tab on the web panel to first test the forwarder you wish to use with the DNS server. You can then test to see what IP address is being returned by the upstream server.

basicallynewbie commented 4 months ago

Thank you so much. It does get the right DNS record after clear my pc's dns cache.