dnsmasq not filtering

bong.mau · 04-20-2020, 03:37 AM

Hi
Env Debian 9.12
dnsmasq 2.76-5+deb9u2
in /etc/dnsmasq.conf i put the following line
address=/akamaized.net/127.0.0.1
but if issue
ping mediagol-meride-tv.akamiazed.net
it does not route to local host 127.0.0.1
it find an answering internet router...
what i'm missing ?
thanks in adavance
Maurizio

bong.mau · 04-20-2020, 04:19 AM

going in /etc/init.d and restarting dnsmasq it issue a message stating resolv.conf not find ...according to debian wiki i set in dnsmasq the line
no-resolv
now dnsmasq starts without issuing any error messages ...
but it still does not work ..ping continue to reach destination servers

bong.mau · 04-20-2020, 05:16 AM

Hi
i write again into dnsmasq.conf
# no-resolv
then i go in /etc and i issue
ls -l resolv.conf
lrwxrwxrwx 1 root root 35 Apr 20 11:58 resolv.conf -> /var/run/NetworkManager/resolv.conf
opening the file i can read
# Generated by NetworkManager
nameserver 192.168.42.129
i write as first line
nameserver 127.0.0.1
save the file and restart dnsmasq service
issue
ping mediagol-meride-tv.akamaized.net
it correctly routes to localhost
but resolv.conf is generated automatically each time network manager starts
so i lost at every boot "nameserver 127.0.0.1"
how to proceeed ?
any help will be appreciated
Maurizio

berndbausch · 04-20-2020, 05:50 AM

Quote:

Originally Posted by bong.mau

but resolv.conf is generated automatically each time network manager starts
so i lost at every boot "nameserver 127.0.0.1"

If your problem is the nameserver, do this:

Code:

nmcli con

to list all NetworkManager connections.

Then pick the connection that attaches the computer to the internet and

Code:

nmcli con mod CONNECTION ipv4.dns 127.0.0.1
nmcli con up CONNECTION

where CONNECTION is the correct connection.

Or use the dns directive in /etc/NetworkManager/NetworkManager.conf. See man NetworkManager.conf.

wpeckham · 04-20-2020, 07:07 AM

DNSMasq reads the /etc/hosts file to pre-load tables. I suggest you put an entry "127.0.0.1 <name>" for the hosts you want to block by redirecting to localhost. That will preload that filtering into DNSMasq on startup.

bong.mau · 04-20-2020, 07:53 AM

Hi
I already use hosts file to filter data ....but in hosts file i have to specify the full address name ....in the dnsmasq.conf i can specify address=/akamaized.net/
and it blocks all domain addresses ...
this trackers are smart and use a lot of different address ...
there is a github hosts file well maintened ...but it is huge and network performances decrease ...