search

pymumu / smartdns

A local DNS server to obtain the fastest website IP for the best Internet experience, support DoT, DoH. 一个本地DNS服务器，获取最快的网站IP，获得最佳上网体验，支持DoH，DoT。
https://pymumu.github.io/smartdns/
GNU General Public License v3.0
8.44k stars 1.08k forks source link

constant update after update to latest master #1497

Closed micron10 closed 1 year ago

micron10 commented 1 year ago

Hi after update to latest master , i see daemon constant update dns records.... seee log :

[2023-09-18 14:19:35,653][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:35,693][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 44975, group: default [2023-09-18 14:19:35,696][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:35,721][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 30076, group: default [2023-09-18 14:19:35,724][ INFO][ dns_server.c:3477] result: sl, client: 128.116.31.33, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:35,785][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 39586, group: default [2023-09-18 14:19:35,788][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:35,794][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 44980, group: default [2023-09-18 14:19:35,797][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:35,836][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 37661, group: default [2023-09-18 14:19:35,839][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:35,870][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 27404, group: default [2023-09-18 14:19:35,873][ INFO][ dns_server.c:3477] result: sl, client: 128.116.31.33, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:35,931][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 28197, group: default [2023-09-18 14:19:35,934][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:35,944][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 62426, group: default [2023-09-18 14:19:35,948][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:35,989][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 14016, group: default [2023-09-18 14:19:35,992][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,017][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 60997, group: default [2023-09-18 14:19:36,020][ INFO][ dns_server.c:3477] result: sl, client: 128.116.31.33, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:36,079][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 60129, group: default [2023-09-18 14:19:36,082][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:36,088][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 8582, group: default [2023-09-18 14:19:36,092][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:36,131][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 52963, group: default [2023-09-18 14:19:36,134][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:36,164][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 6503, group: default [2023-09-18 14:19:36,167][ INFO][ dns_server.c:3477] result: sl, client: 128.116.31.33, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,223][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 61664, group: default [2023-09-18 14:19:36,226][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:36,244][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 50526, group: default [2023-09-18 14:19:36,248][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,283][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 29833, group: default [2023-09-18 14:19:36,286][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:36,312][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 56705, group: default [2023-09-18 14:19:36,315][ INFO][ dns_server.c:3477] result: sl, client: 128.116.31.33, qtype: 255, id: 17767, group: default, time: 4ms [2023-09-18 14:19:36,372][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 51838, group: default [2023-09-18 14:19:36,375][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,389][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 35504, group: default [2023-09-18 14:19:36,392][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,427][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 62781, group: default [2023-09-18 14:19:36,430][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,458][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 17411, group: default [2023-09-18 14:19:36,461][ INFO][ dns_server.c:3477] result: sl, client: 128.116.31.33, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,514][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 29492, group: default [2023-09-18 14:19:36,517][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,545][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 51204, group: default [2023-09-18 14:19:36,548][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,576][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 35116, group: default [2023-09-18 14:19:36,579][ INFO][ dns_server.c:3477] result: sl, client: 39.105.161.158, qtype: 255, id: 17767, group: default, time: 3ms [2023-09-18 14:19:36,606][ INFO][ dns_client.c:3859] request: sl, qtype: 255, id: 11129, group: default [2023-09-18 14:19:36,610][ INFO][ dns_server.c:3477] result: sl, client: 128.116.31.33, qtype: 255, id: 17767, group: default, time: 3ms

config :

bind [::]:53 bind [::]:853

server 8.8.8.8 server-tls 8.8.8.8 server 8.8.4.4 server-tls 8.8.4.4 server 1.1.1.1 server-tls 1.1.1.1 server 1.0.0.1 server-tls 1.0.0.1

server 2001:4860:4860::8888

server 2001:4860:4860::8844

server 2606:4700::1111

server-tls 2606:4700::1111

server 2606:4700:4700::1001

server-tls 2606:4700:4700::1001

cache-size 2621440 cache-persist yes cache-file /var/run/smartdns.cache cache-checkpoint-time 86400 prefetch-domain yes serve-expired yes serve-expired-ttl 259200 serve-expired-prefetch-time 21600

tcp-idle-time 120

force-qtype-SOA 65

rr-ttl 600

micron10 commented 1 year ago

Add and log in debug mode:

log.txt

PikuZheng commented 1 year ago

so what is the issue？

micron10 commented 1 year ago

like a flood i think

is it possible to limit query from user number per sec or per min.

do you see log

PikuZheng commented 1 year ago

query sl from 83.85.171.16, qtype: 255

type 255 is not a common dns query. and sl is not a valid domain. maybe you should investigate that why does the client do such a query.

micron10 commented 1 year ago

Thats a problem this is not user in system , this query come from internet and try to use dns.

PikuZheng commented 1 year ago

i see. sometimes network operators will send some fake DNS response information, or detection packets from botnets. maybe adding a firewall on the internet side is a better idea

micron10 commented 1 year ago

add firewall thanks

wzy105 commented 10 months ago

i see. sometimes network operators will send some fake DNS response information, or detection packets from botnets. maybe adding a firewall on the internet side is a better idea

i see. sometimes network operators will send some fake DNS response information, or detection packets from botnets. maybe adding a firewall on the internet side is a better idea

666666大佬英文6到飞起