Ton of 0.0.0.0.in-addr.arpa requests

Help
1

I am enabled pi-hole dns and dhcp on my raspberry pi 4. I'm noticing a ton of arpa queries for 0.0.0.0.in-addr.arpa and 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa. I'm getting about 5/sec. It's filling up my logs and giving me a million queries per night. Is there any way to stop these? Thanks

2

What client is generating these requests? How are the requests being resolved by Pi-hole?

3

Here are 2 device examples. Each device is a smartthings hub that I'm using in bridge mode. Not sure why one device is getting a response while the other is being refused. Probably because I have IPV6 turned off at the router.

Mar 4 13:34:35 dnsmasq[32703]: query[PTR] 0.0.0.0.in-addr.arpa from 10.0.0.59
Mar 4 13:34:35 dnsmasq[32703]: config 0.0.0.0 is NXDOMAIN

Mar 4 13:34:35 dnsmasq[32703]: query[PTR] 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa from 10.0.0.59
Mar 4 13:34:35 dnsmasq[32703]: config :: is NXDOMAIN

Mar 4 13:34:35 dnsmasq[32703]: query[PTR] 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa from 10.0.0.72
Mar 4 13:34:35 dnsmasq[32703]: cached 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa is (null)
Mar 4 13:34:35 dnsmasq[32703]: config error is REFUSED

Mar 4 13:34:35 dnsmasq[32703]: query[PTR] 0.0.0.0.in-addr.arpa from 10.0.0.72
Mar 4 13:34:35 dnsmasq[32703]: cached 0.0.0.0.in-addr.arpa is (null)
Mar 4 13:34:35 dnsmasq[32703]: config error is REFUSED

Thanks!

4

Hard to answer without knowing your exact configuration. How are the two devices different? Does it always happen like this or was it rather a coincidence that .59 asked first and .72 second?

5

How does a SmartThings hub have a bridge mode? I have an older version without this. The hub just joins the network and uses the network connection to reach the Samsung servers.

6

The order is arbitrary. Just picked them out of the middle of the log file. The 2 devices are mesh network nodes called Smarthings Connect Hub made by Samsung. They create a mesh network with 1 SSID so you can extend your wifi throughout your house. I have a 3rd, but it's not plugged in.

The bridge mode is what's in the settings of the SmartThings app. I'm not bridging a wifi network though. it acts as it's own wifi router with it's own SSID.

Thanks!

7

You might want to check the Samsung forums for any information on this PTR request.

8

I have. Can't hurt to ask. Thx!

12

@eric859 I'd like to have a look at your exact configuration because this config line looks a bit suspicious and I'm unable to reproduce this locally, so far:

Please upload a debug log and post just the token that is generated after the log is uploaded by running the following command from the Pi-hole host terminal:

pihole -d

or do it through the Web interface:

Tools > Generate Debug Log

13

I appreciate it, but I got rid of the offending mesh hubs. There was no support and you have very minimal configuration ability. Newer routers reach as far in my house as I need, so all it well. Thanks again.

1 Like
15

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.