[SOLVED] DNS error on Alpine Linux

black-clover · 10-05-2022, 01:36 AM

Hello,

On Alpine Linux, when I try to connect to certain websites such as https://lists.alpinelinux.org/, https://joewing.net/projects/, or https://stackexchange.com
I get a DNS error "website can't be found".

1) This happens on 3 different fresh Alpine installs (default settings, both lts and edge kernels) on the same laptop.
2) This happens on several different browsers (Firefox-esr, Falkon, Qutebrowser, Epyphany, Surf, Luakit) that use different web engines.
3) This does not happen on Devuan on the same laptop.
4) This DOES NOT happen using Dillo on Alpine (I'm curious as to why? How does Dillo identify websites differently?)
5) I have no router, proxy, firewall. Just a normal wifi connection.
6) On Alpine, other pages like google.com or alpinelinux.org work fine.

Any suggestions as to troubleshoot the problem?

Here some tests I ran on Alpine & Devuan:

ALPINE

Code:

$ dig https://lists.alpinelinux.org/lists

; <<>> DiG 9.18.7 <<>> https://lists.alpinelinux.org/lists
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35289
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;https://lists.alpinelinux.org/lists. IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022092700 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 192.168.1.254#53(192.168.1.254) (UDP)
;; WHEN: Tue Sep 27 16:43:06 PDT 2022
;; MSG SIZE  rcvd: 139

DEVUAN

Code:

dig https://lists.alpinelinux.org/lists

; <<>> DiG 9.16.33-Debian <<>> https://lists.alpinelinux.org/lists
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16646
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;https://lists.alpinelinux.org/lists. IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022093002 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Fri Sep 30 16:23:00 PDT 2022
;; MSG SIZE  rcvd: 139

ALPINE

Code:

$ dig https://joewing.net/projects/jwm/

; <<>> DiG 9.18.7 <<>> https://joewing.net/projects/jwm/
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3210
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;https://joewing.net/projects/jwm/. IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022092700 1800 900 604800 86400

;; Query time: 136 msec
;; SERVER: 192.168.1.254#53(192.168.1.254) (UDP)
;; WHEN: Tue Sep 27 16:44:18 PDT 2022
;; MSG SIZE  rcvd: 137

DEVUAN

Code:

$ dig https://joewing.net/projects/jwm/

; <<>> DiG 9.16.33-Debian <<>> https://joewing.net/projects/jwm/
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27745
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;https://joewing.net/projects/jwm/. IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022093002 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Fri Sep 30 16:24:31 PDT 2022
;; MSG SIZE  rcvd: 137

ALPINE

Code:

$ dig https://stackexchange.com/

; <<>> DiG 9.18.7 <<>> https://stackexchange.com/
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64384
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;https://stackexchange.com/.	IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022092700 1800 900 604800 86400

;; Query time: 42 msec
;; SERVER: 192.168.1.254#53(192.168.1.254) (UDP)
;; WHEN: Tue Sep 27 17:11:44 PDT 2022
;; MSG SIZE  rcvd: 130

DEVUAN

Code:

$ dig https://stackexchange.com/

; <<>> DiG 9.16.33-Debian <<>> https://stackexchange.com/
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39524
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;https://stackexchange.com/.	IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022093002 1800 900 604800 86400

;; Query time: 47 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Fri Sep 30 16:26:50 PDT 2022
;; MSG SIZE  rcvd: 130

ALPINE

Code:

$ delv lists.alpinelinux.org/
;;   validating ./SOA: got insecure response; parent indicates it should be secure
;;   validating ./SOA: got insecure response; parent indicates it should be secure
;; no valid RRSIG resolving 'org//DS/IN': 192.168.1.254#53
;; broken trust chain resolving 'lists.alpinelinux.org//A/IN': 192.168.1.254#53
;; resolution failed: broken trust chain

DEVUAN

Code:

$ delv lists.alpinelinux.org/
;;   validating ./SOA: got insecure response; parent indicates it should be secure
;;   validating ./SOA: got insecure response; parent indicates it should be secure
;; no valid RRSIG resolving 'org//DS/IN': 192.168.1.254#53
;; broken trust chain resolving 'lists.alpinelinux.org//A/IN': 192.168.1.254#53
;; resolution failed: broken trust chain

ALPINE

Code:

$ curl https://lists.alpinelinux.org/
curl: (6) Could not resolve host: lists.alpinelinux.org

$ ping lists.alpinelinux.org
ping: bad address 'lists.alpinelinux.org'

$ sudo curl https://alpinelinux.org/
<!DOCTYPE html>
<html lang="en">
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <meta name="description" content="Alpine Linux">
        <title>index | Alpine Linux</title>

        <link rel="stylesheet" href="/css/pure-min.css" />
        <link rel="stylesheet" href="/css/grids-responsive-min.css" />
        <link rel="stylesheet" href="/css/font-awesome.min.css" />
        <link rel="stylesheet" href="/css/styles.css" />
        <link rel="shortcut icon" href="/alpine-logo.ico" />
    </head>
    <body>
        <div id="wrapper">
            <header class="pure-g" id="header">
                <div class="pure-u-1 pure-u-lg-4-24">
                    <div class="logo">
                        <a href="/"><img src="/alpinelinux-logo.svg" class="pure-img" alt="" /></a>
                    </div>
                </div>
                <input type="checkbox" id="menu-toggle-cb">
                <label id="menu-toggle" for="menu-toggle-cb" onclick><s class="bar"></s><s class="bar"></s><s class="bar"></s></label>
                <div class="pure-u-1 pure-u-lg-20-24 box-relative menu-wrapper">
                    <nav class="pure-menu pure-menu-horizontal menu-local">
                        <ul class="pure-menu-list">
                            <li class="pure-menu-item"><a href="/about" class="pure-menu-link">About</a></li>
                            <li class="pure-menu-item"><a href="/downloads" class="pure-menu-link">Downloads</a></li>
                            <li class="pure-menu-item"><a href="/releases" class="pure-menu-link">Releases</a></li>
                            <li class="pure-menu-item"><a href="/community" class="pure-menu-link">Community</a></li>
                            <li class="pure-menu-item"><a href="/sponsors" class="pure-menu-link">Sponsors</a></li>
                        </ul>
                    </nav>
                    <nav class="pure-menu pure-menu-horizontal menu-external">
                        <ul class="pure-menu-list">
                            <li class="pure-menu-item"><a href="https://docs.alpinelinux.org" class="pure-menu-link">docs</a></li>
                            <li class="pure-menu-item"><a href="https://wiki.alpinelinux.org" class="pure-menu-link">wiki</a></li>
                            <li class="pure-menu-item"><a href="https://gitlab.alpinelinux.org" class="pure-menu-link">git</a></li>
                            <li class="pure-menu-item"><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues" class="pure-menu-link">issues</a></li>
                            <li class="pure-menu-item"><a href="https://pkgs.alpinelinux.org" class="pure-menu-link">packages</a></li>
                            <li class="pure-menu-item"><a href="https://mirrors.alpinelinux.org" class="pure-menu-link">mirrors</a></li>
                            <li class="pure-menu-item"><a href="https://security.alpinelinux.org" class="pure-menu-link">security</a></li>
                        </ul>
                    </nav>
                </div>
            </header>
            <div class="banner">
                <div class="banner-content">
                    <h1>Small. Simple. Secure.</h1>
                    <h3>Alpine Linux is a security-oriented, lightweight Linux distribution based on musl libc and busybox.</h3>
                </div>
            </div>
            <div id="content" class="index">
                <div class="pagedate">
                    <time datetime=""></time>
                </div>
                <div class="pure-g">
   
    <div class="pure-u-1 pure-u-md-1-2">
        <div class="l-box">
            <h2>
                <a href="/atom.xml" class="atom"><i class="fa fa-rss"></i></a>
                Alpine News
            </h2>
            <ul class="home-list">
                <li><time>2022-08-09</time>  <a href="posts/Alpine-3.13.12-3.14.8-3.15.6-3.16.2-released.html">Alpine 3.13.12, 3.14.8, 3.15.6 and 3.16.2 released</a></li>
                <li><time>2022-07-19</time>  <a href="posts/Alpine-3.13.11-3.14.7-3.15.5-released.html">Alpine 3.13.11, 3.14.7 and 3.15.5 released</a></li>
                <li><time>2022-07-18</time>  <a href="posts/Alpine-3.16.1-released.html">Alpine 3.16.1 released</a></li>
                <li><time>2022-07-14</time>  <a href="posts/Alpine-edge-signing-keys-rotated.html">Alpine Linux edge signing keys rotated</a></li>
                <li><time>2022-05-23</time>  <a href="posts/Alpine-3.16.0-released.html">Alpine 3.16.0 released</a></li>
                <li><time>2022-04-04</time>  <a href="posts/Alpine-3.12.12-3.13.10-3.14.6-3.15.4-released.html">Alpine 3.12.12, 3.13.10, 3.14.6 and 3.15.4 released</a></li>
                <li><time>2022-03-28</time>  <a href="posts/Alpine-3.12.11-3.13.9-3.14.5-3.15.3-released.html">Alpine 3.12.11, 3.13.9, 3.14.5 and 3.15.3 released</a></li>
                <li><time>2022-03-23</time>  <a href="posts/Alpine-3.15.2-released.html">Alpine 3.15.2 released</a></li>
                <li><time>2022-03-17</time>  <a href="posts/Alpine-3.12.10-3.13.8-3.14.4-released.html">Alpine 3.12.10, 3.13.8 and 3.14.4 released</a></li>
                <li><time>2022-03-16</time>  <a href="posts/Alpine-3.15.1-released.html">Alpine 3.15.1 released</a></li>
            </ul>
            <a class="pure-button read-more" href="/posts">Read more</a>
        </div>

    </div>

    <div class="pure-u-1 pure-u-md-1-2">
        <div class="l-box">
            <h2>
                <a href="https://gitlab.alpinelinux.org/alpine/aports" class="cgit">
                    <i class="fa fa-git "></i>
                </a>
                Latest development
            </h2>
            <ul class="home-list">
                <li><time datetime="2022-09-25T16:02:09+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=74f61701edaa5d508c9e88afabfa3ded2e68a84e">community&#x2F;blender: add secfixes</a></li>
                <li><time datetime="2022-09-25T16:01:56+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=7beb358cd7bbc0274171afeec44d559530be0acf">testing&#x2F;pyradio: new aport</a></li>
                <li><time datetime="2022-09-25T16:00:36+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=c858a64a79b2ee539842d426797e56dc4e116def">community&#x2F;cawbird: upgrade to 1.5</a></li>
                <li><time datetime="2022-09-25T13:30:05+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=27c35b856963248835c0f4aa73357b30fade8e12">testing&#x2F;kubeseal: upgrade to 0.18.5</a></li>
                <li><time datetime="2022-09-25T13:29:50+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=9d4f375a4a50225899123ed4175e1bc74b8fc515">testing&#x2F;pulumi: upgrade to 3.40.1</a></li>
                <li><time datetime="2022-09-25T13:29:37+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=a2e73cb2c2a74001736c86d3b054ecc3a514261e">testing&#x2F;helmfile: upgrade to 0.146.0</a></li>
                <li><time datetime="2022-09-25T13:11:28+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=28587110462765c47324b0c10390e7ddc7b9afd9">testing&#x2F;streamlink: upgrade to 5.0.1</a></li>
                <li><time datetime="2022-09-25T12:27:49+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=75fe20474a9cbfc2c0c7d2059f2c4eccd2ca90b7">community&#x2F;opencl: upgrade to 2022.09.23</a></li>
                <li><time datetime="2022-09-25T12:17:21+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=932c434d6a7cf825b77c914607b82773b921f785">testing&#x2F;crowdsec: add default config files</a></li>
                <li><time datetime="2022-09-25T11:59:01+00:00">2022-09-25</time>  <a href="http://git.alpinelinux.org/aports/commit/?id=6fea84eaf2768c792887f51b802d6d9d8a5a2bf5">community&#x2F;zoneminder: upgrade to 1.36.26</a></li>
            </ul>
            <a class="pure-button read-more" href="https://gitlab.alpinelinux.org/alpine/aports/-/commits/master">Read more</a>
        </div>
    </div>

</div> <!-- end pure-g -->


            </div> <!-- end content -->
            <footer>&copy; Copyright 2022 Alpine Linux Development Team all rights reserved | <a href="/privacy-policy.html">Privacy Policy</a></footer>
        </div> <!-- end wrapper -->
    </body>
</html>

bathory · 10-05-2022, 03:21 AM

Quote:

dig https://lists.alpinelinux.org/lists

This is wrong. You don't resolve URLs, but domainnames or hostnames, eg:

Code:

dig lists.alpinelinux.org

; <<>> DiG 9.18.7 <<>> lists.alpinelinux.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61233
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 2e2d90910e4022db01000000633d3dcec578bbaef62142f8 (good)
;; QUESTION SECTION:
;lists.alpinelinux.org.		IN	A

;; Query time: 75 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Wed Oct 05 11:18:22 EEST 2022
;; MSG SIZE  rcvd: 78

Quote:

$ curl https://lists.alpinelinux.org/
curl: (6) Could not resolve host: lists.alpinelinux.org

$ ping lists.alpinelinux.org
ping: bad address 'lists.alpinelinux.org'

$ sudo curl https://alpinelinux.org/
<!DOCTYPE html>
<html lang="en">
<-snip->

I don't know why a normal user cannot resolve a hostname, while using sudo he can...

Emerson · 10-05-2022, 03:57 AM

You say there is no router, yet your DNS has private address. It sure looks like there is a router and it also has a nameserver. You probably could work around your problem by using some other DNS. The output from bathory looks also mysterious, supposedly Slackware but DNS is local, this is common for systemd setups, how Slackware got it?

bathory · 10-05-2022, 08:27 AM

Quote:

Originally Posted by Emerson

The output from bathory looks also mysterious, supposedly Slackware but DNS is local, this is common for systemd setups, how Slackware got it?

What you mean mysterious?
I'm indeed running Slackware, with named running locally both as a resolver and authoritative dns for a couple of domains.

Re. the SERVFAIL response it happens the 1st time you lookup that domain. It resolves correctly the subsequent times. Maybe it's a firewall issue.

Regards

elgrandeperro · 10-05-2022, 09:16 AM

Lots of routers run a small process to forward DNS. It usually is configured on the router or the router gets it from DHCP. Also lots of linux boxes run a small caching server, so that might explain why sometimes it works consistently because it is in local cache.

If you can, I'd check the DNS servers that are on the router. It might be one is in error, but a forwarder is a bit smarter in that it queries both at the same time (usually).

Let start with how to test, lets use google's dns.

dig -t a @8.8.8.8 lists.alpinelinux.org

;; QUESTION SECTION:
;lists.alpinelinux.org. IN A

;; ANSWER SECTION:
lists.alpinelinux.org. 3600 IN A 147.75.101.119

This should work. Then query your local dns:

dig -t a @192.168.1.254 lists.alpinelinux.org

I did notice that alpinelinux.org is not verifying correctly in DNSSEC to .org for the delegation. That possibly could be the problem.

Also, consult your /etc/resolv.conf, whether you are getting DNS servers from DHCP or hard coded.

black-clover · 10-05-2022, 10:49 PM

Thanks for the feedback.
To clarify, I connect both on Alpine and Devuan from the same laptop to a wifi modem to the same point. Both /etc/resolv.conf files are identical. On both distros I connect through wpa_supplicant.

here are the output from the commands on both Devuan and Alpine.

DEVUAN

Code:

$ dig lists.alpinelinux.org

; <<>> DiG 9.16.33-Debian <<>> lists.alpinelinux.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15425
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;lists.alpinelinux.org.		IN	A

;; ANSWER SECTION:
lists.alpinelinux.org.	3600	IN	A	147.75.101.119

;; Query time: 431 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Wed Oct 05 20:23:56 PDT 2022
;; MSG SIZE  rcvd: 66

ALPINE

Code:

$ dig lists.alpinelinux.org

; <<>> DiG 9.18.7 <<>> lists.alpinelinux.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4451
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;lists.alpinelinux.org.		IN	A

;; ANSWER SECTION:
lists.alpinelinux.org.	2839	IN	A	147.75.101.119

;; Query time: 43 msec
;; SERVER: 192.168.1.254#53(192.168.1.254) (UDP)
;; WHEN: Wed Oct 05 20:36:36 PDT 2022
;; MSG SIZE  rcvd: 66

DEVUAN

Code:

$ dig -t a @8.8.8.8 lists.alpinelinux.org

; <<>> DiG 9.16.33-Debian <<>> -t a @8.8.8.8 lists.alpinelinux.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33837
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;lists.alpinelinux.org.		IN	A

;; ANSWER SECTION:
lists.alpinelinux.org.	3600	IN	A	147.75.101.119

;; Query time: 43 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Wed Oct 05 20:27:03 PDT 2022
;; MSG SIZE  rcvd: 66

ALPINE

Code:

$ dig -t a @8.8.8.8 lists.alpinelinux.org

; <<>> DiG 9.18.7 <<>> -t a @8.8.8.8 lists.alpinelinux.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18625
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;lists.alpinelinux.org.		IN	A

;; ANSWER SECTION:
lists.alpinelinux.org.	3600	IN	A	147.75.101.119

;; Query time: 26 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Wed Oct 05 20:38:07 PDT 2022
;; MSG SIZE  rcvd: 66

DEVUAN

Code:

$ dig -t a @192.168.1.254 lists.alpinelinux.org

; <<>> DiG 9.16.33-Debian <<>> -t a @192.168.1.254 lists.alpinelinux.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59494
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;lists.alpinelinux.org.		IN	A

;; ANSWER SECTION:
lists.alpinelinux.org.	3600	IN	A	147.75.101.119

;; Query time: 239 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Wed Oct 05 20:28:20 PDT 2022
;; MSG SIZE  rcvd: 66

ALPINE

Code:

$ dig -t a @192.168.1.254 lists.alpinelinux.org

; <<>> DiG 9.18.7 <<>> -t a @192.168.1.254 lists.alpinelinux.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11837
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;lists.alpinelinux.org.		IN	A

;; ANSWER SECTION:
lists.alpinelinux.org.	2919	IN	A	147.75.101.119

;; Query time: 9 msec
;; SERVER: 192.168.1.254#53(192.168.1.254) (UDP)
;; WHEN: Wed Oct 05 20:39:40 PDT 2022
;; MSG SIZE  rcvd: 66

elgrandeperro · 10-06-2022, 07:42 AM

Obviously, DNS is working fine on both.

Try and use curl or wget. Like "wget https://lists.alpinelinux.org" or "curl https://lists.alpinelinux.org"
curl displays on terminal, wget writes a file (index.html).

Does /etc/nsswitch.conf for the hosts line have "files dns" or similar?

Do you run with a VPN or proxy? That is the only reason I can think of having different browsers having different results. (Some browsers pick up the proxy settings automatically, some have to be configured)

Emerson · 10-06-2022, 09:55 AM

Firefox has something they call DNS-over-HTTPS, not sure if it is enabled by default.

black-clover · 10-06-2022, 03:27 PM

I tried with Firefox both DNS-over-HTTP enabled and disabled. It does not seem to make a difference.
The error is pretty much there on all browsers, except Dillo.
I have no proxy and disabled this option in all installs.
Since Alpine is pretty much barebones, my doubt is that i'm missing some package that would add complete functionality to the browsers but does not come as a dependency on any of them.

Here's the output on wget and curl.

DEVUAN

Code:

$ wget https://lists.alpinelinux.org
--2022-10-06 13:15:08--  https://lists.alpinelinux.org/
Resolving lists.alpinelinux.org (lists.alpinelinux.org)... 147.75.101.119
Connecting to lists.alpinelinux.org (lists.alpinelinux.org)|147.75.101.119|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1696 (1.7K) [text/html]
Saving to: ‘index.html’

index.html                100%[==================================>]   1.66K  --.-KB/s    in 0s      

2022-10-06 13:15:25 (22.7 MB/s) - ‘index.html’ saved [1696/1696]

ALPINE

Code:

$ wget https://lists.alpinelinux.org
--2022-10-06 13:08:45--  https://lists.alpinelinux.org/
Resolving lists.alpinelinux.org (lists.alpinelinux.org)... failed: Try again.
wget: unable to resolve host address 'lists.alpinelinux.org'

DEVUAN

Code:

$ curl https://lists.alpinelinux.org
<!DOCTYPE html>

<html lang="en">
<head>
<meta charset="utf8"/>
<meta content="width=device-width, initial-scale=1" name="viewport"/>
<meta content="#ffffff" name="theme-color"/>
<title>Alpine Linux Mailing Lists</title>
<link href="https://alpinelinux.org/alpine-logo.ico" rel="icon"/>
<link href="/static/main.min.52f37db7.css" rel="stylesheet"/>
</head>
<body>
<nav class="container navbar navbar-light navbar-expand-sm">
<a class="navbar-brand" href="/">
<img height="30" src="https://alpinelinux.org/alpinelinux-logo.svg"/>
</a>
<ul class="navbar-nav mr-auto d-none d-sm-flex">
<li class="nav-item active">
<a class="nav-link" href="https://lists.alpinelinux.org">lists</a>
</li>
<li class="nav-item">
<a class="nav-link" href="https://meta.alpinelinux.org">meta</a>
</li>
</ul>
<div class="login">
<span class="navbar-text">
<a href="https://meta.alpinelinux.org/oauth/authorize?client_id=e01433a6fb79949c&amp;scopes=profile&amp;state=%2F%3F">Log in</a>
    —
    <a href="https://meta.alpinelinux.org">Register</a>
</span>
</div>
</nav>
<div class="container">
<div class="row">
<div class="col-md-8">
<p>
      Welcome to <strong>lists.alpinelinux.org</strong>! This is the mailing list service
      for <a href="https://alpinelinux.org">Alpine Linux</a>.
    </p>
<a class="btn btn-primary" href="/lists/~alpine">
      Browse mailing lists <span aria-hidden="true" class="icon icon-caret-right"><svg viewbox="0 0 192 512" xmlns="http://www.w3.org/2000/svg"><path d="M0 384.662V127.338c0-17.818 21.543-26.741 34.142-14.142l128.662 128.662c7.81 7.81 7.81 20.474 0 28.284L34.142 398.804C21.543 411.404 0 402.48 0 384.662z"></path></svg>
</span>
</a>
</div>
</div>
</div>
</body>

ALPINE

Code:

$ curl https://lists.alpinelinux.org
curl: (6) Could not resolve host: lists.alpinelinux.org

elgrandeperro · 10-06-2022, 05:04 PM

What is the hosts line of /etc/nsswitch.conf and /etc/resolv.conf?

You can temporarily change the nameserver in /etc/resolv.conf but we already saw they both work.

I am not familiar with dillo, I wonder if it uses its own config? In the very old days, browsers had their own network settings and did not utilize the system wide ones. It looks like it has several ways to configure /etc/dillorc and ~/.dillo/dillorc.

What I would do is if you have tcpdump like "tcpdump -i NETWORK port 53" where NETWORK is the network device like eth0 or wlan0 while running the browser to see how it is getting results or trying to get DNS results.

Emerson · 10-06-2022, 05:12 PM

Works with sudo, but not for user. Permissions somewhere. Running it with strace could clear the picture.

black-clover · 10-06-2022, 11:06 PM

/etc/nsswitch.conf
hosts: files dns
/etc/resolv.conf
nameserver 192.168.1.254

Code:

tcpdump -i wlan0 port 53
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on wlan0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
21:04:42.475006 IP alpine.domain.name.57046 > RTK_GW.domain.name.53: 32321+ A? incoming.telemetry.mozilla.org. (48)
21:04:42.475047 IP alpine.domain.name.57046 > RTK_GW.domain.name.53: 32801+ AAAA? incoming.telemetry.mozilla.org. (48)
21:04:42.475813 IP alpine.domain.name.56524 > RTK_GW.domain.name.53: 55757+ A? incoming.telemetry.mozilla.org. (48)
21:04:42.486076 IP alpine.domain.name.59007 > RTK_GW.domain.name.53: 29808+ A? alpinelinux.org. (33)
21:04:42.486289 IP alpine.domain.name.59007 > RTK_GW.domain.name.53: 30264+ AAAA? alpinelinux.org. (33)
21:04:42.488088 IP RTK_GW.domain.name.53 > alpine.domain.name.57046: 32321 3/0/0 CNAME telemetry-incoming.r53-2.services.mozilla.com., CNAME prod.ingestion-edge.prod.dataops.mozgcp.net., A 34.120.208.123 (180)
21:04:42.488123 IP RTK_GW.domain.name.53 > alpine.domain.name.56524: 55757 3/0/0 CNAME telemetry-incoming.r53-2.services.mozilla.com., CNAME prod.ingestion-edge.prod.dataops.mozgcp.net., A 34.120.208.123 (180)
21:04:42.491765 IP alpine.domain.name.38919 > RTK_GW.domain.name.53: 51617+ PTR? 254.1.168.192.in-addr.arpa. (44)
21:04:42.494180 IP RTK_GW.domain.name.53 > alpine.domain.name.59007: 29808 1/0/0 A 147.75.101.119 (49)
21:04:42.494220 IP RTK_GW.domain.name.53 > alpine.domain.name.38919: 51617* 1/0/0 PTR RTK_GW.domain.name. (76)
21:04:42.494405 IP alpine.domain.name.34285 > RTK_GW.domain.name.53: 13562+ PTR? 69.1.168.192.in-addr.arpa. (43)
21:04:42.498165 IP RTK_GW.domain.name.53 > alpine.domain.name.59007: 30264 1/0/0 AAAA 2604:1380:2002:4001::4 (61)
21:04:42.498195 IP RTK_GW.domain.name.53 > alpine.domain.name.34285: 13562* 1/0/0 PTR alpine.domain.name. (75)
21:04:42.586295 IP alpine.domain.name.42016 > RTK_GW.domain.name.53: 46106+ A? alpinelinux.org. (33)
21:04:42.586332 IP alpine.domain.name.42016 > RTK_GW.domain.name.53: 46730+ AAAA? alpinelinux.org. (33)
21:04:42.606196 IP RTK_GW.domain.name.53 > alpine.domain.name.42016: 46106 1/0/0 A 147.75.101.119 (49)
21:04:42.611500 IP RTK_GW.domain.name.53 > alpine.domain.name.42016: 46730 1/0/0 AAAA 2604:1380:2002:4001::4 (61)
21:04:43.260097 IP alpine.domain.name.58603 > RTK_GW.domain.name.53: 13170+ A? joewing.net. (29)
21:04:43.260140 IP alpine.domain.name.58603 > RTK_GW.domain.name.53: 13590+ AAAA? joewing.net. (29)
21:04:43.260459 IP alpine.domain.name.36886 > RTK_GW.domain.name.53: 57003+ A? aboutssl.org. (30)
21:04:43.260490 IP alpine.domain.name.36886 > RTK_GW.domain.name.53: 57387+ AAAA? aboutssl.org. (30)
21:04:43.269619 IP RTK_GW.domain.name.53 > alpine.domain.name.36886: 57003 1/0/0 A 151.101.66.159 (46)
21:04:43.320304 IP RTK_GW.domain.name.53 > alpine.domain.name.58603: 13170 4/0/0 A 185.199.111.153, A 185.199.109.153, A 185.199.108.153, A 185.199.110.153 (93)
21:04:44.976725 IP alpine.domain.name.57046 > RTK_GW.domain.name.53: 32801+ AAAA? incoming.telemetry.mozilla.org. (48)
21:04:45.006848 IP RTK_GW.domain.name.53 > alpine.domain.name.57046: 32801 2/1/0 CNAME telemetry-incoming.r53-2.services.mozilla.com., CNAME prod.ingestion-edge.prod.dataops.mozgcp.net. (254)
21:04:45.763073 IP alpine.domain.name.58603 > RTK_GW.domain.name.53: 13590+ AAAA? joewing.net. (29)
21:04:45.763167 IP alpine.domain.name.36886 > RTK_GW.domain.name.53: 57387+ AAAA? aboutssl.org. (30)
21:04:51.121682 IP alpine.domain.name.35319 > RTK_GW.domain.name.53: 11978+ A? alpinelinux.org. (33)
21:04:51.121722 IP alpine.domain.name.35319 > RTK_GW.domain.name.53: 12446+ AAAA? alpinelinux.org. (33)
21:04:51.130327 IP RTK_GW.domain.name.53 > alpine.domain.name.35319: 11978 1/0/0 A 147.75.101.119 (49)
21:04:51.130360 IP RTK_GW.domain.name.53 > alpine.domain.name.35319: 12446 1/0/0 AAAA 2604:1380:2002:4001::4 (61)
21:04:59.852462 IP alpine.domain.name.54444 > RTK_GW.domain.name.53: 8440+ A? lists.alpinelinux.org. (39)
21:04:59.852498 IP alpine.domain.name.54444 > RTK_GW.domain.name.53: 9004+ AAAA? lists.alpinelinux.org. (39)
21:04:59.861260 IP RTK_GW.domain.name.53 > alpine.domain.name.54444: 8440 1/0/0 A 147.75.101.119 (55)
21:05:02.354568 IP alpine.domain.name.54444 > RTK_GW.domain.name.53: 9004+ AAAA? lists.alpinelinux.org. (39)
21:05:04.858053 IP alpine.domain.name.45749 > RTK_GW.domain.name.53: 25978+ A? lists.alpinelinux.org. (39)
21:05:04.858097 IP alpine.domain.name.45749 > RTK_GW.domain.name.53: 26518+ AAAA? lists.alpinelinux.org. (39)
21:05:04.874885 IP RTK_GW.domain.name.53 > alpine.domain.name.45749: 25978 1/0/0 A 147.75.101.119 (55)
21:05:07.361872 IP alpine.domain.name.45749 > RTK_GW.domain.name.53: 26518+ AAAA? lists.alpinelinux.org. (39)
21:05:12.122833 IP alpine.domain.name.40780 > RTK_GW.domain.name.53: 50275+ A? support.mozilla.org. (37)
21:05:12.122872 IP alpine.domain.name.40780 > RTK_GW.domain.name.53: 50779+ AAAA? support.mozilla.org. (37)
21:05:12.131169 IP RTK_GW.domain.name.53 > alpine.domain.name.40780: 50275 4/0/0 CNAME prod-tp.sumo.mozit.cloud., A 44.240.61.77, A 54.68.34.170, A 44.230.237.182 (123)
21:05:14.625275 IP alpine.domain.name.40780 > RTK_GW.domain.name.53: 50779+ AAAA? support.mozilla.org. (37)
21:05:14.634007 IP RTK_GW.domain.name.53 > alpine.domain.name.40780: 50779 1/1/0 CNAME prod-tp.sumo.mozit.cloud. (157)

elgrandeperro · 10-07-2022, 09:50 AM

Well it is asking for the A and AAAA record for alpinelinux.org. And it (at least network wise) getting a response.

So is this a "good" one or "bad" one? I assume this is a bad one.

Lets dig direct:

dig +short @192.168.1.254 -t a alpinelinux.org

And we know this works:

dig +short @8.8.8.8 -t a alpinelinux.org

I think these will probably work.

elgrandeperro · 10-07-2022, 10:39 AM

Try dillo or devuan. See if it gets the same response for like lists.alpinelinux.org from tcpdump much like:

21:04:51.130327 IP RTK_GW.domain.name.53 > alpine.domain.name.35319: 11978 1/0/0 A 147.75.101.119 (49)

And that it is the same source RTK_GW (I assume this might be in /etc/hosts?)

Its seems to be working as it should, it is asking and the response is getting back. Whether the browser is interpreting
right, that is the question.

Given what we know now, it is probably not a DNS problem.

firefox-esr like firefox has debugging. You could try that.

But since it is multiple browsers, I am suspecting the builds and some shared library is not working right and they were all built with the same build lib or using the same shared lib. I know dillo is rather bare bones and long history. It might not be built with the same libs.

As emerson wrote, strace would give you the libs that are being called, and you could verify dillo and other browsers work differently.

Emerson · 10-07-2022, 11:03 AM

Another idea, there may be some timeout. I tried to resolve it with 8.8.8.8 (practically instant) and with my own DNS (5+ seconds) first time, subsequent was instant, my DNS does some caching. 8.8.8.8 may have it cached, but for some reason the real chain of queries to root servers takes too long for this record.