EdgeRouter PPtP Server访问本地DNS服务

UBNT EdgeRouter 自带了PPTP Server,典型的配置方法是

官方参考guide: https://help.ubnt.com/hc/en-us/articles/205220840-EdgeMAX-PPTP-VPN-with-local-users-RADIUS

这个案例里,我的路由eth0是LAN口,eth0的IP是 192.168.100.1,这个配置下我的pptp客户端能正常访问到我的内网的机器。
但是如果我需要把DNS设成 192.168.100.1,DNS请求就会一直没响应。
路由端抓 UDP 53 的包,可以看到pptp客户端发出的dns请求,但是没有回包。
看了眼/etc/dnsmasq.conf:

man dnsmasq

-i, –interface=
Listen only on the specified interface(s). Dnsmasq automatically adds the loopback (local) interface to the list of interfaces to use when the –interface option is used. If no –interface or –listen-address options
are given dnsmasq listens on all available interfaces except any given in –except-interface options. IP alias interfaces (eg “eth1:0”) cannot be used with –interface or –except-interface options, use –listen-
address instead. A simple wildcard, consisting of a trailing ‘*’, can be used in –interface and –except-interface options.

尝试了加一个 interface=pptp*,无效。
顺手先把dnsmasq的请求隔离到一个新的网段 192.168.101.0/24,服务端的local-ip设成 192.168.101.1,推送dns 192.168.101.1,再设置options ‘listen-address=192.168.101.1’,解决。
全部命令如下

EdgeRouter PPtP Server访问本地DNS服务 by @sskaje: https://sskaje.me/2016/02/edgerouter-pptp-server-dns-service/

Incoming search terms:

dnsmasq 劫持所有域名

dns劫持以前都是黑名单模式
有需要拦截的加server劫持整个域名解析

或者单个address劫持单记录

还可以通配模式

白名单模式先劫持所有域名

开放解析的时候只需要加server指向正常的DNS服务器就行

dnsmasq 劫持所有域名 by @sskaje: https://sskaje.me/2015/09/dnsmasq-%e5%8a%ab%e6%8c%81%e6%89%80%e6%9c%89%e5%9f%9f%e5%90%8d/

Incoming search terms:

Mac DNS解析失败

OS X 10.10.4
使用ping提示ping: cannot resolve xxx.xxx.xxx: Unknown host
但是使用dig可以解析域名。

Mac DNS解析失败 by @sskaje: https://sskaje.me/2015/07/mac-dns%e8%a7%a3%e6%9e%90%e5%a4%b1%e8%b4%a5/

Incoming search terms:

EdgeRouter同时更新TunnelBroker和HE.NET DDNS

之前文章里TunnelBroker for EdgeRouter Lite提及TunnelBroker和He.net DDNS同时更新的解决方案,后来证实不是那么稳定。

其实TunnelBroker.net里提供了解决方案。
在TunnelBroker.net的Tunnel Details里,选择Advanced,最下边的一组配置是HE Dynamic DNS Settings
Hostname填入HE.NET的DDNS域名,API Key填DDNS域名的更新key。

然后修改EdgeRouter的配置:

EdgeRouter同时更新TunnelBroker和HE.NET DDNS by @sskaje: https://sskaje.me/2015/06/edgerouter%e5%90%8c%e6%97%b6%e6%9b%b4%e6%96%b0tunnelbroker%e5%92%8che-net-ddns/

Incoming search terms:

HE.net Dynamic DNS on Ubiquiti Router

HE.net provides free DDNS service, compatible with DynDNS’s update format.
Link: Dynamic DNS on HE.net.

I’m using Ubiquiti EdgeRouter Lite, Dynamic DNS support can be found from web GUI console, but the server address is not configurable.

Here is a copy of my config:

You can also configure from CLI.

1 Pick the right interface
2 Set server
3 DO NOT SAVE OR UPDATE FROM WEB GUI CONSOLE!

HE.net Dynamic DNS on Ubiquiti Router by @sskaje: https://sskaje.me/2015/03/he-net-ddns-on-ubnt-router/

Incoming search terms: