dfx334
July 10, 2023, 7:21pm
1
Hello,
could anyone help me understand what kind of query the "type0" is? In my network I have a device which is sending out type0 query which are refused to be resolved. In the domain field there is only a dot and no domain name. I couldn't find any explanation around about it.
Thank you!
Could you provide some sample lines for those requests from your log files at /var/log/pihole/pihole.log
?
dfx334
July 10, 2023, 8:07pm
3
Sure, here it is. It tries few times then it stop. It is an air conditioner who relies on a cloud service but it work without any issues.
Jul 10 20:15:08 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:08 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:08 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:08 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:11 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:11 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:11 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:16 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:16 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:16 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:34 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:34 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:34 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:37 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:37 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:37 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:42 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:42 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:42 dnsmasq[3136452]: reply error is REFUSED
I am not aware of a DNS resource record type of 0.
Typically, an A record request (type 1) for .
would be common to start recursive resolution, where the .
dot would refer to the DNS root zone.
EDIT: A respective log line would have looked like this:
dnsmasq[3136452]: query[A] . from 192.168.178.21
What you observe seems like a glitch in the device's software making that request.
dfx334
July 10, 2023, 8:22pm
5
Never heard of it too. I was starting to think about a glitch as well.
Where is the "type0" phrase coming from? Is Pi-hole's Query log showing that?
dfx334
July 11, 2023, 6:47pm
7
It appears in the queries list of the device, in the column "type".
system
Closed
August 1, 2023, 6:48pm
8
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.