Dns query type0?

Hello,

could anyone help me understand what kind of query the "type0" is? In my network I have a device which is sending out type0 query which are refused to be resolved. In the domain field there is only a dot and no domain name. I couldn't find any explanation around about it.

Thank you!

Could you provide some sample lines for those requests from your log files at /var/log/pihole/pihole.log?

Sure, here it is. It tries few times then it stop. It is an air conditioner who relies on a cloud service but it work without any issues.

Jul 10 20:15:08 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:08 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:08 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:08 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:11 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:11 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:11 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:16 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:16 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:16 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:34 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:34 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:34 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:37 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:37 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:37 dnsmasq[3136452]: reply error is REFUSED
Jul 10 20:15:42 dnsmasq[3136452]: query . from 192.168.178.21
Jul 10 20:15:42 dnsmasq[3136452]: forwarded . to 127.0.0.1#5335
Jul 10 20:15:42 dnsmasq[3136452]: reply error is REFUSED

I am not aware of a DNS resource record type of 0.

Typically, an A record request (type 1) for . would be common to start recursive resolution, where the . dot would refer to the DNS root zone.
EDIT: A respective log line would have looked like this:

dnsmasq[3136452]: query[A] . from 192.168.178.21

What you observe seems like a glitch in the device's software making that request.

Never heard of it too. I was starting to think about a glitch as well. :slight_smile:

Where is the "type0" phrase coming from? Is Pi-hole's Query log showing that?

It appears in the queries list of the device, in the column "type".

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.