DNS adblocking ignored on connected clients with Internet access provided over WiFi in 'Client' modeopenwrt: dns resolving error from wifi connected devicesHow to configure Linux Mint 18.2 for a Captive WiFi Access Point with no Internet AccessMap DNS requests coming from specific client MAC with dnsmasqUse DHCP-provided DNS or not based on connected network
Implication of namely
How to install cross-compiler on Ubuntu 18.04?
One verb to replace 'be a member of' a club
How could indestructible materials be used in power generation?
What is the fastest integer factorization to break RSA?
Getting extremely large arrows with tikzcd
OP Amp not amplifying audio signal
If a warlock makes a Dancing Sword their pact weapon, is there a way to prevent it from disappearing if it's farther away for more than a minute?
Is it possible to map the firing of neurons in the human brain so as to stimulate artificial memories in someone else?
Why was the shrink from 8″ made only to 5.25″ and not smaller (4″ or less)
Is it "common practice in Fourier transform spectroscopy to multiply the measured interferogram by an apodizing function"? If so, why?
What Exploit Are These User Agents Trying to Use?
How to travel to Japan while expressing milk?
Forgetting the musical notes while performing in concert
What is required to make GPS signals available indoors?
Should I tell management that I intend to leave due to bad software development practices?
Did 'Cinema Songs' exist during Hiranyakshipu's time?
How do conventional missiles fly?
How can saying a song's name be a copyright violation?
Bullying boss launched a smear campaign and made me unemployable
Can I hook these wires up to find the connection to a dead outlet?
How to stretch the corners of this image so that it looks like a perfect rectangle?
Why were 5.25" floppy drives cheaper than 8"?
Can someone clarify Hamming's notion of important problems in relation to modern academia?
DNS adblocking ignored on connected clients with Internet access provided over WiFi in 'Client' mode
openwrt: dns resolving error from wifi connected devicesHow to configure Linux Mint 18.2 for a Captive WiFi Access Point with no Internet AccessMap DNS requests coming from specific client MAC with dnsmasqUse DHCP-provided DNS or not based on connected network
0
Ad-blocking is done through 'dnsmasq' which reads a hosts file, when logged into the OpenWrt device blocking works as expected:
PING s0.2mdn.net (0.0.0.0): 56 data bytes
64 bytes from 127.0.0.1: seq=0 ttl=64 time=0.268 ms
...
However on a computer that is connected to the OpenWrt router (wired or wireless) blocking does not work.
danielsokolowski@DANDC-OFFICE:~$ ping s0.2mdn.net
Pinging s0-2mdn-net.l.google.com [172.217.1.166] with 32 bytes of data:
Reply from 172.217.1.166: bytes=32 time=22ms TTL=56
..
Some info :
root@481:~# cat /etc/resolv.conf
search lan
nameserver 127.0.0.1
root@481:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.0.1 0.0.0.0 UG 0 0 0 wlan0
10.4.81.0 * 255.255.255.0 U 0 0 0 br-lan
192.168.0.0 * 255.255.255.0 U 0 0 0 wlan0
root@481:~# netstat -lp | grep dnsmasq
tcp 0 0 192.168.0.103:domain 0.0.0.0:* LISTEN 1890/dnsmasq
tcp 0 0 localhost:domain 0.0.0.0:* LISTEN 1890/dnsmasq
tcp 0 0 481.lan:domain 0.0.0.0:* LISTEN 1890/dnsmasq
...
tcp 0 0 localhost:domain :::* LISTEN 1890/dnsmasq
...
udp 0 0 192.168.0.103:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 localhost:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 481.lan:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 0.0.0.0:bootps 0.0.0.0:* 1890/dnsmasq
...
root@481:~#
danielsokolowski@DANDC-OFFICE:~$ ipconfig
Windows IP Configuration
...
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . : lan
Link-local IPv6 Address . . . . . : fe80::d940:8d32:8ecf:38b5%13
IPv4 Address. . . . . . . . . . . : 10.4.81.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.4.81.1
...
danielsokolowski@DANDC-OFFICE:~$ ping s0.2mdn.net
Pinging s0-2mdn-net.l.google.com [172.217.164.230] with 32 bytes of data:
Reply from 172.217.164.230: bytes=32 time=17ms TTL=56
Reply from 172.217.164.230: bytes=32 time=29ms TTL=56
openwrt dnsmasq hosts
asked 2 days ago
Daniel SokolowskiDaniel Sokolowski
1355
add a comment |
0
Ad-blocking is done through 'dnsmasq' which reads a hosts file, when logged into the OpenWrt device blocking works as expected:
PING s0.2mdn.net (0.0.0.0): 56 data bytes
64 bytes from 127.0.0.1: seq=0 ttl=64 time=0.268 ms
...
However on a computer that is connected to the OpenWrt router (wired or wireless) blocking does not work.
danielsokolowski@DANDC-OFFICE:~$ ping s0.2mdn.net
Pinging s0-2mdn-net.l.google.com [172.217.1.166] with 32 bytes of data:
Reply from 172.217.1.166: bytes=32 time=22ms TTL=56
..
Some info :
root@481:~# cat /etc/resolv.conf
search lan
nameserver 127.0.0.1
root@481:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.0.1 0.0.0.0 UG 0 0 0 wlan0
10.4.81.0 * 255.255.255.0 U 0 0 0 br-lan
192.168.0.0 * 255.255.255.0 U 0 0 0 wlan0
root@481:~# netstat -lp | grep dnsmasq
tcp 0 0 192.168.0.103:domain 0.0.0.0:* LISTEN 1890/dnsmasq
tcp 0 0 localhost:domain 0.0.0.0:* LISTEN 1890/dnsmasq
tcp 0 0 481.lan:domain 0.0.0.0:* LISTEN 1890/dnsmasq
...
tcp 0 0 localhost:domain :::* LISTEN 1890/dnsmasq
...
udp 0 0 192.168.0.103:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 localhost:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 481.lan:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 0.0.0.0:bootps 0.0.0.0:* 1890/dnsmasq
...
root@481:~#
danielsokolowski@DANDC-OFFICE:~$ ipconfig
Windows IP Configuration
...
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . : lan
Link-local IPv6 Address . . . . . : fe80::d940:8d32:8ecf:38b5%13
IPv4 Address. . . . . . . . . . . : 10.4.81.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.4.81.1
...
danielsokolowski@DANDC-OFFICE:~$ ping s0.2mdn.net
Pinging s0-2mdn-net.l.google.com [172.217.164.230] with 32 bytes of data:
Reply from 172.217.164.230: bytes=32 time=17ms TTL=56
Reply from 172.217.164.230: bytes=32 time=29ms TTL=56
openwrt dnsmasq hosts
asked 2 days ago
Daniel SokolowskiDaniel Sokolowski
1355
@roaima I'm sorry I can't test the wired setup any more....I've updated the question.
– Daniel Sokolowski
2 days ago
dnsmasqis on the router, see updated answer.
– Daniel Sokolowski
2 days ago
So, it's effectively DNS-based ad-blocking, and so the clients would have to be configured to use the router's DNS service in order to take advantage of the ad-blocking. Check which DNS nameserver(s) the WiFi clients are actually using.
– telcoM
yesterday
@telcoM yes but that's the wierd thing, the clients are pointed at my router's DNS, see updated answer, hmm thinking now out loud here I'm thinking it's due to different subnets.
– Daniel Sokolowski
50 mins ago
add a comment |
0
0
0
Ad-blocking is done through 'dnsmasq' which reads a hosts file, when logged into the OpenWrt device blocking works as expected:
PING s0.2mdn.net (0.0.0.0): 56 data bytes
64 bytes from 127.0.0.1: seq=0 ttl=64 time=0.268 ms
...
However on a computer that is connected to the OpenWrt router (wired or wireless) blocking does not work.
danielsokolowski@DANDC-OFFICE:~$ ping s0.2mdn.net
Pinging s0-2mdn-net.l.google.com [172.217.1.166] with 32 bytes of data:
Reply from 172.217.1.166: bytes=32 time=22ms TTL=56
..
Some info :
root@481:~# cat /etc/resolv.conf
search lan
nameserver 127.0.0.1
root@481:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.0.1 0.0.0.0 UG 0 0 0 wlan0
10.4.81.0 * 255.255.255.0 U 0 0 0 br-lan
192.168.0.0 * 255.255.255.0 U 0 0 0 wlan0
root@481:~# netstat -lp | grep dnsmasq
tcp 0 0 192.168.0.103:domain 0.0.0.0:* LISTEN 1890/dnsmasq
tcp 0 0 localhost:domain 0.0.0.0:* LISTEN 1890/dnsmasq
tcp 0 0 481.lan:domain 0.0.0.0:* LISTEN 1890/dnsmasq
...
tcp 0 0 localhost:domain :::* LISTEN 1890/dnsmasq
...
udp 0 0 192.168.0.103:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 localhost:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 481.lan:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 0.0.0.0:bootps 0.0.0.0:* 1890/dnsmasq
...
root@481:~#
danielsokolowski@DANDC-OFFICE:~$ ipconfig
Windows IP Configuration
...
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . : lan
Link-local IPv6 Address . . . . . : fe80::d940:8d32:8ecf:38b5%13
IPv4 Address. . . . . . . . . . . : 10.4.81.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.4.81.1
...
danielsokolowski@DANDC-OFFICE:~$ ping s0.2mdn.net
Pinging s0-2mdn-net.l.google.com [172.217.164.230] with 32 bytes of data:
Reply from 172.217.164.230: bytes=32 time=17ms TTL=56
Reply from 172.217.164.230: bytes=32 time=29ms TTL=56
openwrt dnsmasq hosts
asked 2 days ago
Daniel SokolowskiDaniel Sokolowski
1355
Ad-blocking is done through 'dnsmasq' which reads a hosts file, when logged into the OpenWrt device blocking works as expected:
PING s0.2mdn.net (0.0.0.0): 56 data bytes
64 bytes from 127.0.0.1: seq=0 ttl=64 time=0.268 ms
...
However on a computer that is connected to the OpenWrt router (wired or wireless) blocking does not work.
danielsokolowski@DANDC-OFFICE:~$ ping s0.2mdn.net
Pinging s0-2mdn-net.l.google.com [172.217.1.166] with 32 bytes of data:
Reply from 172.217.1.166: bytes=32 time=22ms TTL=56
..
Some info :
root@481:~# cat /etc/resolv.conf
search lan
nameserver 127.0.0.1
root@481:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.0.1 0.0.0.0 UG 0 0 0 wlan0
10.4.81.0 * 255.255.255.0 U 0 0 0 br-lan
192.168.0.0 * 255.255.255.0 U 0 0 0 wlan0
root@481:~# netstat -lp | grep dnsmasq
tcp 0 0 192.168.0.103:domain 0.0.0.0:* LISTEN 1890/dnsmasq
tcp 0 0 localhost:domain 0.0.0.0:* LISTEN 1890/dnsmasq
tcp 0 0 481.lan:domain 0.0.0.0:* LISTEN 1890/dnsmasq
...
tcp 0 0 localhost:domain :::* LISTEN 1890/dnsmasq
...
udp 0 0 192.168.0.103:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 localhost:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 481.lan:domain 0.0.0.0:* 1890/dnsmasq
udp 0 0 0.0.0.0:bootps 0.0.0.0:* 1890/dnsmasq
...
root@481:~#
danielsokolowski@DANDC-OFFICE:~$ ipconfig
Windows IP Configuration
...
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . : lan
Link-local IPv6 Address . . . . . : fe80::d940:8d32:8ecf:38b5%13
IPv4 Address. . . . . . . . . . . : 10.4.81.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.4.81.1
...
danielsokolowski@DANDC-OFFICE:~$ ping s0.2mdn.net
Pinging s0-2mdn-net.l.google.com [172.217.164.230] with 32 bytes of data:
Reply from 172.217.164.230: bytes=32 time=17ms TTL=56
Reply from 172.217.164.230: bytes=32 time=29ms TTL=56
openwrt dnsmasq hosts
openwrt dnsmasq hosts
asked 2 days ago
Daniel SokolowskiDaniel Sokolowski
1355
asked 2 days ago
Daniel SokolowskiDaniel Sokolowski
1355
edited 48 mins ago
Daniel Sokolowski
asked 2 days ago
Daniel SokolowskiDaniel Sokolowski
1355
asked 2 days ago
Daniel SokolowskiDaniel Sokolowski
1355
asked 2 days ago
Daniel SokolowskiDaniel Sokolowski
1355
1355
@roaima I'm sorry I can't test the wired setup any more....I've updated the question.
– Daniel Sokolowski
2 days ago
dnsmasqis on the router, see updated answer.
– Daniel Sokolowski
2 days ago
So, it's effectively DNS-based ad-blocking, and so the clients would have to be configured to use the router's DNS service in order to take advantage of the ad-blocking. Check which DNS nameserver(s) the WiFi clients are actually using.
– telcoM
yesterday
@telcoM yes but that's the wierd thing, the clients are pointed at my router's DNS, see updated answer, hmm thinking now out loud here I'm thinking it's due to different subnets.
– Daniel Sokolowski
50 mins ago
add a comment |
@roaima I'm sorry I can't test the wired setup any more....I've updated the question.
– Daniel Sokolowski
2 days ago
dnsmasqis on the router, see updated answer.
– Daniel Sokolowski
2 days ago
So, it's effectively DNS-based ad-blocking, and so the clients would have to be configured to use the router's DNS service in order to take advantage of the ad-blocking. Check which DNS nameserver(s) the WiFi clients are actually using.
– telcoM
yesterday
@telcoM yes but that's the wierd thing, the clients are pointed at my router's DNS, see updated answer, hmm thinking now out loud here I'm thinking it's due to different subnets.
– Daniel Sokolowski
50 mins ago
@roaima I'm sorry I can't test the wired setup any more....I've updated the question.
– Daniel Sokolowski
2 days ago
@roaima I'm sorry I can't test the wired setup any more....I've updated the question.
– Daniel Sokolowski
2 days ago
dnsmasq is on the router, see updated answer.– Daniel Sokolowski
2 days ago
dnsmasq is on the router, see updated answer.– Daniel Sokolowski
2 days ago
So, it's effectively DNS-based ad-blocking, and so the clients would have to be configured to use the router's DNS service in order to take advantage of the ad-blocking. Check which DNS nameserver(s) the WiFi clients are actually using.
– telcoM
yesterday
So, it's effectively DNS-based ad-blocking, and so the clients would have to be configured to use the router's DNS service in order to take advantage of the ad-blocking. Check which DNS nameserver(s) the WiFi clients are actually using.
– telcoM
yesterday
@telcoM yes but that's the wierd thing, the clients are pointed at my router's DNS, see updated answer, hmm thinking now out loud here I'm thinking it's due to different subnets.
– Daniel Sokolowski
50 mins ago
@telcoM yes but that's the wierd thing, the clients are pointed at my router's DNS, see updated answer, hmm thinking now out loud here I'm thinking it's due to different subnets.
– Daniel Sokolowski
50 mins ago
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f509757%2fdns-adblocking-ignored-on-connected-clients-with-internet-access-provided-over-w%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
draft saved
draft discarded
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f509757%2fdns-adblocking-ignored-on-connected-clients-with-internet-access-provided-over-w%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
@roaima I'm sorry I can't test the wired setup any more....I've updated the question.
– Daniel Sokolowski
2 days ago
dnsmasqis on the router, see updated answer.– Daniel Sokolowski
2 days ago
So, it's effectively DNS-based ad-blocking, and so the clients would have to be configured to use the router's DNS service in order to take advantage of the ad-blocking. Check which DNS nameserver(s) the WiFi clients are actually using.
– telcoM
yesterday
@telcoM yes but that's the wierd thing, the clients are pointed at my router's DNS, see updated answer, hmm thinking now out loud here I'm thinking it's due to different subnets.
– Daniel Sokolowski
50 mins ago