Expected Behaviour:
All DNS query type should fall into RFC types. Not understand what OTHER type means.
Actual Behaviour:
After upgraded to 5.1, saw a few DNS request type as OTHER.
Debug token:
rkqyomboa6
Please suggest is this expected behaviour? Thanks.
Yes it is. Other
is everything that is not:
A
,
AAAA
,
ANY
,
SRV
,
SOA
,
PTR
,
TXT
,
NAPTR
MX
,
DS
,
RRSIG
,
DNSKEY
pi-hole:development
← pi-hole:new/more_query_types
opened 06:04PM - 28 Jun 20 UTC
**By submitting this pull request, I confirm the following:**
- [X] I have re… ad and understood the [contributors guide](https://github.com/pi-hole/pi-hole/blob/master/CONTRIBUTING.md).
- [X] I have checked that [another pull request](https://github.com/pi-hole/FTL/pulls) for this purpose does not exist.
- [X] I have considered, and confirmed that this submission will be valuable to others.
- [X] I accept that this submission may not be used, and the pull request closed at the will of the maintainer.
- [X] I give this submission freely, and claim no ownership to its content.
**How familiar are you with the codebase?:**
## 10
---
Add support for additional query types. This also implements support for blocking for **all** query types instead of the subset we supported blocking for in v5.0
We already supported:
- `A`,
- `AAAA`,
- `ANY`,
- `SRV`,
- `SOA`,
- `PTR`,
- `TXT`,
- `NAPTR`
New:
- `MX`,
- `DS`,
- `RRSIG`,
- `DNSKEY`, and
- `OTHER` (summing up all other possible DNS types)
Coro
July 16, 2020, 10:51am
3
Looking at the code, these "other" queries were simply not shown before. They likely happened before as well. Please go to your /var/log/pihole.log
and check of which type these queries actually were.
The possible range of types is a short, i.e. it can be anything between 0 and 65535. I don't expect them to code the string relations A
, AAAA
, ... for all of them (even if many are unused).
Is this necessary? Even if so, the appearance of OTHER
is a new feature. Not a bug. Not at all.
Thanks.
The pihole.log shows type=65479.
Probably because my iPhone is on iOS 14 beta.
Coro
July 16, 2020, 11:10am
5
Yes, for reference for others:
Hi all,
I added some a regex to block lists, but they still seem to be coming through. So I took a look at /var/log/pihole.log and found this:
Jun 25 17:51:06 dnsmasq[29440]: query[A] libs.outbrain.com from 192.168.1.203
Jun 25 17:51:06 dnsmasq[29440]: gravity blocked libs.outbrain.com is 0.0.0.0
Jun 25 17:51:06 dnsmasq[29440]: query[type=65479] libs.outbrain.com from 192.168.1.203
Jun 25 17:51:06 dnsmasq[29440]: forwarded libs.outbrain.com to 192.168.1.1
The regex is (\.|^)outbrain\.com$. It…
So this is expected, how should Pi-hole improve on this? I don't think it is necessary to store this number in the database, etc.
system
Closed
August 6, 2020, 11:10am
6
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.