Resolving Host taking a long time unexpectedly

Help
21

Results of grep "query[A.*.nyroc.rr.com" /var/log/pihole.log (only copied a small portion). These ranged from Jan 6, 2020 at 00:59:36 to Jan 6, 2020 at 20:51:10 and there were 955 instances. My chromium browser was not continuously started during this time.

Jan  6 16:43:25 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 16:49:33 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 16:49:33 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 16:51:08 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 16:51:08 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:01:08 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:01:08 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:06:47 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:06:47 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:06:53 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:06:53 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:07:10 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:07:10 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:08:12 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:08:12 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:08:58 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:08:58 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:11:08 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:11:08 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:21:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:21:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:21:37 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:21:37 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:23:58 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:23:58 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:31:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:31:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:41:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:41:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:43:26 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:43:26 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:51:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:51:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:53:42 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:53:42 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:53:58 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 17:53:58 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:01:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:01:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:06:53 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:06:53 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:06:58 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:06:58 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:07:15 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:07:15 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:08:18 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:08:18 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:11:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:11:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:21:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:21:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:25:46 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:25:46 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:31:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:31:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:38:58 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:38:58 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:41:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:41:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:51:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:51:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:53:58 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:53:58 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:57:50 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 18:57:50 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:01:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:01:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:06:58 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:06:58 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:07:04 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:07:04 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:07:21 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:07:21 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:08:23 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:08:23 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:11:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:11:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:21:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:21:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:23:58 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:23:58 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:29:54 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:29:54 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:31:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:31:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:38:59 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:38:59 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:41:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:41:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:43:40 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:43:40 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:51:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 19:51:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:01:10 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:01:10 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:01:58 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:01:58 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:07:04 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:07:04 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:07:09 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:07:09 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:07:26 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:07:26 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:08:29 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:08:29 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:08:42 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:08:42 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:08:59 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:08:59 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:11:10 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:11:10 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:21:10 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:21:10 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:31:10 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:31:10 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:34:02 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:34:02 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:38:59 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:38:59 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:41:10 dnsmasq[577]: query[A] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788
Jan  6 20:41:10 dnsmasq[577]: query[AAAA] wpad.nyroc.rr.com from 2604:6000:150e:cbab:4952:d88d:2955:7788

So you are using a Netgear router

Netgear Nighthawk R7800 router on Router Firmware Version V1.0.2.62

Results of grep "search" /etc/resolv.conf:

pi@PiHole:~ $ grep "search" /etc/resolv.conf
search nyroc.rr.com

On my windows machine that is not connected to pihole (and not experiencing issues):

ipconfig /all | find /i "suffix"
   Primary Dns Suffix  . . . . . . . : <Unrelated domain, removed for privacy>
   DNS Suffix Search List. . . . . . : <Unrelated domain, removed for privacy>
   Connection-specific DNS Suffix  . :
   Connection-specific DNS Suffix  . :
   Connection-specific DNS Suffix  . :
   Connection-specific DNS Suffix  . : nyroc.rr.com
   Connection-specific DNS Suffix Search List :
   Connection-specific DNS Suffix  . :

On my windows machine that is connected to pihole (and experiencing issues):

ipconfig /all | find /i "suffix"
   Primary Dns Suffix  . . . . . . . : 
   DNS Suffix Search List. . . . . . : nyroc.rr.com
   Connection-specific DNS Suffix  . : nyroc.rr.com
   Connection-specific DNS Suffix Search List :
   Connection-specific DNS Suffix  . :

I did not set up the nyroc.rr.com as the DNS suffix, but I'm also noticing that on my iOS device as the "Search Domain" (and have had a hell of a time trying to get that to use pihole as seen here and here, to the point that I've given up). Any idea how that's being populated?

22

Quick update:

As in everything in the tech world, turning it off and turning it on again seems to have resolved it for now, although I needed to turn off/on the primary windows machine rather than anything associated with pihole. This looks like a windows issue rather than a pihole issue.

That being said, any thoughts around the nyroc.rr.com domain would be appreciated because that is still a mystery to me. It does not look like these queries are showing up anymore, so they may have been the cause.

23

Your results running the commands have confirmed that nyroc.cc.com is or at least was indeed set as your local domain suffix, and that your router did distrubute this to your clients through DHCP.

As to why your router did this - I am at loss :thinking:

I can only speculate that your ISP distributed this as domain suffix to your router, and your Netgear somehow decided it should use that for your local network as well.
Normally, a router would stick with its preconfigured domain suffix. Most routers do not even allow to alter the local domain suffix off the shelf.

wpad requests directed at the local domain are to be expected on Windows clients, as Windows comes enabled with Web Proxy Auto Discovery by default.
(It wasn't related to your problem at all, but you may consider to turn off WPAD).

Apologies, I should have been more specific in my instructions and/or my grep search command. The following statement would have done better by excluding wpad straight away:

grep "query\[A.*.nyroc.rr.com" /var/log/pihole.log|grep -Fvi "wpad"

Of course, your log will have rolled over by now, so it probably won't bring up anything now.

I wonder if they are really gone, or just have fallen back to a reasonable frequency.

Is your router still issuing nyroc.cc.com as domain suffix?

24

Router is still issuing ryroc.cc.com as the domain suffix, but there is not obvious way to change that (retreve DNS from ISP only returns the IPv4 address, and does not show the search domain or IPv6 address).

You are correct that it is only happening at a lower frequency. This is what I see as of 10:15am local time from that query:

pi@PiHole:~ $ grep "query\[A.*.nyroc.rr.com" /var/log/pihole.log|grep -Fvi "wpad"
Jan  7 00:59:35 dnsmasq[577]: query[AAAA] DiskStation.nyroc.rr.com from 2604:6000:150e:cbab:894c:f39:c5cf:ebf8
Jan  7 01:00:10 dnsmasq[577]: query[A] diskstation.nyroc.rr.com from 2604:6000:150e:cbab:894c:f39:c5cf:ebf8
Jan  7 01:00:10 dnsmasq[577]: query[AAAA] diskstation.nyroc.rr.com from 2604:6000:150e:cbab:894c:f39:c5cf:ebf8
Jan  7 01:00:16 dnsmasq[577]: query[A] diskstation.nyroc.rr.com from 2604:6000:150e:cbab:894c:f39:c5cf:ebf8
Jan  7 01:00:16 dnsmasq[577]: query[AAAA] diskstation.nyroc.rr.com from 2604:6000:150e:cbab:894c:f39:c5cf:ebf8
Jan  7 01:00:16 dnsmasq[577]: query[A] diskstation.nyroc.rr.com from 2604:6000:150e:cbab:894c:f39:c5cf:ebf8
Jan  7 01:00:16 dnsmasq[577]: query[AAAA] diskstation.nyroc.rr.com from 2604:6000:150e:cbab:894c:f39:c5cf:ebf8
Jan  7 07:30:48 dnsmasq[577]: query[AAAA] DiskStation.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:30:58 dnsmasq[577]: query[A] mrcsviuyxcqmzs.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:30:58 dnsmasq[577]: query[A] zjodoqz.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:30:58 dnsmasq[577]: query[A] piawbnnudtvbpif.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:30:58 dnsmasq[577]: query[AAAA] zjodoqz.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:30:58 dnsmasq[577]: query[AAAA] mrcsviuyxcqmzs.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:30:58 dnsmasq[577]: query[AAAA] piawbnnudtvbpif.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:38:49 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:38:49 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:38:57 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:38:57 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:38:59 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 07:38:59 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 08:10:55 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 08:10:55 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 08:11:04 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 08:11:04 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 08:43:04 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 08:43:04 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 08:43:12 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 08:43:12 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 09:15:12 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 09:15:12 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 09:15:20 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 09:15:20 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 09:47:17 dnsmasq[577]: query[A] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7
Jan  7 09:47:17 dnsmasq[577]: query[AAAA] DISKSTATION.nyroc.rr.com from 2604:6000:150e:cbab:391d:14ff:9d76:85a7

I'll likely change the DNS server to something manual rather than let the ISP configure it, but I'm not sure exactly how to identify the search domain in the default netgear firmware.

I appreciate your help. If you have any other thoughts I'll gladly take them, but for now I'd say the issue is closed.

25

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.