Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Public DNS resolver availability #156

Open
clehner opened this issue May 6, 2022 · 2 comments
Open

Public DNS resolver availability #156

clehner opened this issue May 6, 2022 · 2 comments

Comments

@clehner
Copy link

clehner commented May 6, 2022

The DNS page lists a public IP address for a DNS server: https://github.com/nycmeshnet/docs/blob/6ed7b1cea987f333d2c919e611c4255408bac978/content/networking/dns.md#top-level-domains

199.167.59.10 - Public DNS Resolver for anyone in the world. No Logs, No filtering.

I see the host 199.167.59.10 answers DNS queries from inside the mesh, including for the .mesh TLD. However, I don't find it to be reachable from outside the mesh - via DNS queries or pings.
Here is traceroute info from a DigitalOcean NYC3 VPS:

traceroute to 199.167.59.10 (199.167.59.10), 30 hops max, 60 byte packets
 1  * * *
 2  10.74.7.40 (10.74.7.40)  1.166 ms 10.74.7.46 (10.74.7.46)  1.150 ms 10.74.7.38 (10.74.7.38)  1.134 ms
 3  138.197.248.250 (138.197.248.250)  1.531 ms  1.873 ms 138.197.248.238 (138.197.248.238)  1.688 ms
 4  138.197.248.54 (138.197.248.54)  1.546 ms 138.197.248.56 (138.197.248.56)  1.558 ms 138.197.248.58 (138.197.248.58)  1.634 ms
 5  138.197.244.40 (138.197.244.40)  1.789 ms  1.772 ms  1.756 ms
 6  375pearl.nycmesh.net (206.82.104.151)  1.905 ms !N  1.088 ms !N *

Possible fixes for this issue:

  1. Update the page to clarify that 199.167.59.10 is only for use in the mesh (and/or other specific networks?)
  2. Enable 199.167.59.10 to respond to DNS queries from outside the mesh.
@zgiles
Copy link
Contributor

zgiles commented Oct 14, 2022

Greetings,
Talked about also in #157 , I'm putting here an example of resolving that works. Please let me know if otherwise

$ nslookup mail.mesh.nycmesh.net 199.167.59.10
Server:		199.167.59.10
Address:	199.167.59.10#53

Non-authoritative answer:
Name:	mail.mesh.nycmesh.net
Address: 10.70.140.70

$ nslookup google.com 199.167.59.10
Server:		199.167.59.10
Address:	199.167.59.10#53

Non-authoritative answer:
Name:	google.com
Address: 142.250.80.78
Name:	google.com
Address: 2607:f8b0:4006:80c::200e

@clehner
Copy link
Author

clehner commented Oct 14, 2022 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants