Adsuck – a small DNS server that spoofs blacklisted addresses

Re:Adsuck – a small DNS server that spoofs blacklisted addre... by jakeogh on Tuesday November 17, 2015 @03:54PM (#10583868)

Correct. And it would be a problem if something was listening on 80/443/whatever. That's why '--dest-ip' can be set.

from man dnsmasq:

  -B, --bogus-nxdomain=<ipaddr>
 Transform replies which contain the IP address given into "No such domain" replies.
 This is intended to counteract a devious move made by Verisign in September 2003
 when they started returning the address of an advertising web page in response to
 queries for unregistered names, instead of the correct NXDOMAIN response. This
 option tells dnsmasq to fake the correct response when it sees this behaviour. As
 at Sept 2003 the IP address being returned by Verisign is 64.94.110.11

Is there another way to get dnsmasq to return NXDOMAIN? If I am reading this correctly, one would need to do 'dnsgate --dest-ip 127.2.2.2' and then tell dnsmasq '--bogus-nxdomain=127.2.2.2'.

[ Parent | on HN ]

Re:Adsuck – a small DNS server that spoofs blacklisted addre... by egwynn on Sunday November 22, 2015 @06:48PM (#10612041)

Only just followed up on this thread. Yes. My dnsmasq.conf contains:

  servers-file=/usr/local/etc/dnsmasq-servers.conf

and then that file contains a lot of lines like:

  server=/taboola.com/

The docs don’t tell you that this results in NXDOMAIN for the server whose IP you didn’t specify. It seems to work!

[ Parent | on HN ]

Re:Adsuck – a small DNS server that spoofs blacklisted addre... by jakeogh on Thursday December 03, 2015 @03:41AM (#10668550)

Much better! Fixed: https://github.com/jakeogh/dnsgate/commit/62bfa78ac27586d048...

[ Parent | on HN ]

Re:Adsuck – a small DNS server that spoofs blacklisted addre... by StavrosK on Tuesday November 17, 2015 @07:09PM (#10584976)

That's fantastic, thank you for the tip!

[ Parent | on HN ]