Menu
What's new
By:
Filters Better Search

Stubby-Installer-Asuswrt-Merlin

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Comparing outputs now.....Would this have something to do with it?

upload_2019-4-6_16-50-31.png


upload_2019-4-6_16-51-50.png


Could this be as result of the Pixelserv CA in the Administration?

upload_2019-4-6_16-53-2.png


I am not sure what it looks like in yours.
 
You need that no-resolve in /tmp/etc/dnsmasq.conf
 
If that works the installer is messed up for the AX88U ;):)
 
Well, reinstalled Stubby:

Code: 
Haveged successfully updated
 Shutting down haveged...              done.
 Starting haveged...              done.
Required dnsmasq parm no-resolv found in /tmp/etc/dnsmasq.conf
Required dnsmasq parm server=127.0.0.1#5453 found in /tmp/etc/dnsmasq.conf
Adding server=0::1#5453 to /jffs/configs/dnsmasq.conf.add
Required dnsmasq parm server=/pool.ntp.org/1.1.1.1 found in /tmp/etc/dnsmasq.conf
Existing stubby.yml found
stubby.yml backed up to stubby.yml.2019-04-06_17-24-47
stubby.yml downloaded successfully
S61stubby downloaded successfully

and I am still getting:

Code: 
@RT-AX88U-29F0:/tmp/home/root# nslookup github.com
Server:    192.168.50.1
Address 1: 192.168.50.1 router.asus.com

Name:      github.com
Address 1: 192.30.253.112 lb-192-30-253-112-iad.github.com
Address 2: 192.30.253.113 lb-192-30-253-113-iad.github.com

I have this in my /jffs/configs/dnsmasq.conf.add:

Code: 
no-resolv
server=127.0.0.1#5453

server=/pool.ntp.org/1.1.1.1

proxy-dnssec
server=0::1#5453


This is bizarre....@Adamm and @Xentrk, any thoughts on why this is?
 
Marin said:
I have this in my /jffs/configs/dnsmasq.conf.add:

Code: 
no-resolv
server=127.0.0.1#5453

server=/pool.ntp.org/1.1.1.1

proxy-dnssec
server=0::1#5453
Click to expand...
I have this in the same file.
Code: 
server=127.0.0.1#5453
server=0::1#5453
server=/pool.ntp.org/1.1.1.1
 
Marin said:
Do you have it in yours?
Click to expand...
Yes I do. The contents of the file above is like that because I use the dnssec settings in he gui. Not proxy-dnssec.
 
I added "no-resolv" there but still I get:

Code: 
7@RT-AX88U-29F0:/tmp/home/root# nslookup github.com
Server:    192.168.50.1
Address 1: 192.168.50.1 router.asus.com

Name:      github.com
Address 1: 192.30.253.113 lb-192-30-253-113-iad.github.com
Address 2: 192.30.253.112 lb-192-30-253-112-iad.github.com

I am lost....
 
....maybe getting closer to a factory reset and "from scratch" AMTM install....but I just did that with 384.10. I have unistalled Stubby several times in the last few days and installed it back but not sure why this is.....I am wondering if any Entware updates may be the cause for this.....uhmmm. Although I never use Option 3 from AMTM (always use the ep option from Diversion)....
 
In my /jffs/configs/dnsmasq.conf.add:
Code: 
server=127.0.0.1#5453
server=0::1#5453
server=/pool.ntp.org/1.1.1.1

No proxy-dnssec for me.
Nothing else in this file.
In /tmp/etc/dnsmasq.conf I have:
Code: 
no-resolv

Among a pile of other stuff.
Have you tried a removal of stubby and a reinstall after it reboots you?
 
Copy my stuff and bounce stubby.
 
Yes, I always reboot and allow for the router to stabilize a bit before attempting...

....and have updated the installer as well:

Code: 
sh /jffs/scripts/install_stubby.sh

but no luck....oh well....I will take a close look at my configuration to see if there is anything there....

I also generated a new server certificate but that did not make any difference...so Pixelserve CA as a potential issue is ruled out
 
Marin said:
I did...thank you, I appreciate it. But it didn't resolve my solution....
Click to expand...
I think it might be on behalf of folks using router VPN clients, but Stubby-Installer put a line in my /etc/dnsmasq.conf for a servers file which contains 192.168.50.1. Yet my lookup server shows as 127.0.0.1.
Code: 
# grep server /etc/dnsmasq.conf
servers-file=/tmp/resolv.dnsmasq
server=127.0.0.1#5453
server=0::1#5453
server=/pool.ntp.org/1.1.1.1

# cat /tmp/resolv.dnsmasq
server=192.168.50.1

# drill github.com
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 32172
;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; github.com.  IN      A

;; ANSWER SECTION:
github.com.     22      IN      A       192.30.253.113
github.com.     22      IN      A       192.30.253.112

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 102 msec
;; EDNS: version 0; flags: ; udp: 1452
;; SERVER: 127.0.0.1
;; WHEN: Sat Apr  6 19:20:17 2019
;; MSG SIZE  rcvd: 91

# nslookup github.com
Server:    127.0.0.1
Address 1: 127.0.0.1 localhost.localdomain

Name:      github.com
Address 1: 192.30.253.112 lb-192-30-253-112-iad.github.com
Address 2: 192.30.253.113 lb-192-30-253-113-iad.github.com
 
Last edited:
Marin said:
This is interesting indeed.....not sure why my IP is being picked instead.

I don't have "no-resolv" in my /tmp/dnsmasq.conf either but again it is not on /jffs/configs/dnsmasq.conf.add as this says:

View attachment 16915
Click to expand...
If anything, not having no-resolv might help.
Code: 
# ls -la /etc/resolv.conf
lrwxrwxrwx    1 HdB34266 root            20 Apr  6 18:45 /etc/resolv.conf -> /rom/etc/resolv.conf

# cat /rom/etc/resolv.conf
nameserver 127.0.0.1
 
Marin said:
Yes, I always reboot and allow for the router to stabilize a bit before attempting...

....and have updated the installer as well:

Code: 
sh /jffs/scripts/install_stubby.sh

but no luck....oh well....I will take a close look at my configuration to see if there is anything there....

I also generated a new server certificate but that did not make any difference...so Pixelserve CA as a potential issue is ruled out
Click to expand...


Just want to add that on a fresh M&M Config with no features or scripts enabled, this is my output.
Code: 
ASUSWRT-Merlin RT-AC86U 384.10-2 Wed Apr  3 22:32:15 UTC 2019
admin@RT-AC86U:/tmp/home/root# nslookup github.com
Server:    127.0.0.1
Address 1: 127.0.0.1 localhost.localdomain

Name:      github.com
Address 1: 192.30.253.112 lb-192-30-253-112-iad.github.com
Address 2: 192.30.253.113 lb-192-30-253-113-iad.github.com
admin@RT-AC86U:/tmp/home/root#

Marin, I hope this helps in some way.
 
Resetting and reinstalling everything slowly....I will report soon if output changes once Stubby is installed...thanks for the feedback everyone
 
I can confirm on a brand new installation that Stubby includes my router's IP under the Server's name :(:(:(

Code: 
@RT-AX88U-29F0:/tmp/home/root# drill github.com
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 44462
;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; github.com.    IN    A

;; ANSWER SECTION:
github.com.    12    IN    A    192.30.253.113
github.com.    12    IN    A    192.30.253.112

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 140 msec
;; EDNS: version 0; flags: ; udp: 1452
;; SERVER: 192.168.50.1
;; WHEN: Sat Apr  6 21:56:48 2019
;; MSG SIZE  rcvd: 91

Code: 
@RT-AX88U-29F0:/tmp/home/root# nslookup github.com
Server:    192.168.50.1
Address 1: 192.168.50.1 router.asus.com

Name:      github.com
Address 1: 192.30.253.112 lb-192-30-253-112-iad.github.com
Address 2: 192.30.253.113 lb-192-30-253-113-iad.github.com

My /jffs/configs/dnsmasq.conf.add content:

Code: 
server=127.0.0.1#5453
server=0::1#5453
server=/pool.ntp.org/1.1.1.1
proxy-dnssec

And there is no "no-resolv" in /tmp/dnsmasq.conf

Has anything changed in this installation recently?
 
Marin said:
I can confirm on a brand new installation that Stubby includes my router's IP under the Server's name :(:(:(

Code: 
@RT-AX88U-29F0:/tmp/home/root# drill github.com
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 44462
;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; github.com.    IN    A

;; ANSWER SECTION:
github.com.    12    IN    A    192.30.253.113
github.com.    12    IN    A    192.30.253.112

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 140 msec
;; EDNS: version 0; flags: ; udp: 1452
;; SERVER: 192.168.50.1
;; WHEN: Sat Apr  6 21:56:48 2019
;; MSG SIZE  rcvd: 91

Code: 
@RT-AX88U-29F0:/tmp/home/root# nslookup github.com
Server:    192.168.50.1
Address 1: 192.168.50.1 router.asus.com

Name:      github.com
Address 1: 192.30.253.112 lb-192-30-253-112-iad.github.com
Address 2: 192.30.253.113 lb-192-30-253-113-iad.github.com

My /jffs/configs/dnsmasq.conf.add content:

Code: 
server=127.0.0.1#5453
server=0::1#5453
server=/pool.ntp.org/1.1.1.1
proxy-dnssec

And there is no "no-resolv" in /tmp/dnsmasq.conf

Has anything changed in this installation recently?
Click to expand...

Was it showing correctly before Stubby was installed? (See my previous post above).

Is your issue just on the RT-AX88U? :(
 
You must log in or register to reply here.

Similar threads

RMerlin
Release Asuswrt-Merlin 3006.102.1 is now available for Wifi 7 devices
4 5 6
Replies
106
Views
16K
jksmurf
J
RMerlin
ANNOUNCEMENT: Asuswrt-Merlin support underway for 3 Wifi 7 routers
5 6 7
Replies
130
Views
25K
scasapending
S
DMcD-EMS-USMC
  • Locked
3006.102 alpha 2 Build(s) Now Available
Replies
2
Views
1K
octopus
octopus
octopus
  • Locked
[ 3006.102 alpha Build(s) ] Testing available build(s)
2 3
Replies
59
Views
11K
octopus
octopus
R
Would any of this make my browsing more secure? (WAN DNS settings)
2
Replies
20
Views
2K
aru
aru
Similar threads
Thread starter Title Forum Replies Date
J Does Asuswrt-Merlin support AiMesh over Wifi? Asuswrt-Merlin 4
Siff Printing from Guest Network (ASUSWRT-Merlin 3004.388.8_2) Asuswrt-Merlin 4
Siff Setting dnsmasq on Asuswrt-Merlin Asuswrt-Merlin 8
Rob Bowlby fwupdate.asuswrt-merlin.net - diversion.ch Down? Asuswrt-Merlin 7
R Wireguard on Asuswrt-Merlin Asuswrt-Merlin 11
M RT-AX88U_PRO Asuswrt-Merlin vs Asuswrt Asuswrt-Merlin 4
AsusFreak Asuswrt-Merlin 3004.388.8_2 - Switching from ‘automatic IP’ to ‘PPPoE’ Asuswrt-Merlin 6
W Long Term Support - Asuswrt-Merlin Router List Asuswrt-Merlin 15
M vpn problems in asuswrt merlin 3004.388.8 Asuswrt-Merlin 72
RMerlin Release Asuswrt-Merlin 3004.388.8_2 is now available Asuswrt-Merlin 469

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Members online

Total: 1,017 (members: 33, guests: 984)
Top