AX88U - Merlin 384.17 - Diversion 4.1.12 - DNS Timeout

[kobejo34]

All

I have the following

AX88U
Merlin 384.17
Diversion 4.1.12

DNSSEC support disabled
Connect to DNS server automatically = no
DNS server 1 = 8.8.8.8
DNS Rebind protecting = yes
DNS-based Filtering = OFF
DHCP server DNS 1 and 2 = blank

I noticed my broswers will hang sometimes looking for dns so I then will do a dig against my router and it will hang sometimes for 10 seconds looking up certain domain (random) and sometimes hang with no resolver found. When I am monitoring the syslog-ng I can see multiple request for DNS.

If I do a dig against @(public DNS server) the query works as designed.

I can make immediate payment for anyone that resolve this issue

 

[dave14305]

Give a sample of /opt/var/log/dnsmasq.log when a domain times out. It should be easy to determine with actual log data.

 

[kobejo34]

Thank you for helping. Three times I queried for cat.com (choosing random names). Only at 12:57.55 was it responded with an answer.

dig yahoo.com

; <<>> DiG 9.10.6 <<>> yahoo.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24963
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;yahoo.com. IN A

;; ANSWER SECTION:
yahoo.com. 1400 IN A 98.137.246.8
yahoo.com. 1400 IN A 98.138.219.231
yahoo.com. 1400 IN A 98.137.246.7
yahoo.com. 1400 IN A 72.30.35.9
yahoo.com. 1400 IN A 72.30.35.10
yahoo.com. 1400 IN A 98.138.219.232

;; Query time: 35 msec
;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Fri Jun 12 12:54:35 EDT 2020
;; MSG SIZE rcvd: 134

~ % dig cat.com

; <<>> DiG 9.10.6 <<>> cat.com
;; global options: +cmd
;; connection timed out; no servers could be reached
[email protected] ~ % dig cat.com

; <<>> DiG 9.10.6 <<>> cat.com
;; global options: +cmd
;; connection timed out; no servers could be reached
[email protected] ~ % dig cat.com

; <<>> DiG 9.10.6 <<>> cat.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18633
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1280
;; QUESTION SECTION:
;cat.com. IN A

;; ANSWER SECTION:
cat.com. 3580 IN A 165.26.233.80
cat.com. 3580 IN A 165.26.232.78

;; Query time: 35 msec
;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Fri Jun 12 12:55:27 EDT 2020
;; MSG SIZE rcvd: 68




Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.72
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.23
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.50
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.186.4
Jun 12 12:55:21 dnsmasq[8130]: query[A] gspe1-ssl.ls.apple.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: cached gspe1-ssl.ls.apple.com is <CNAME>
Jun 12 12:55:21 dnsmasq[8130]: forwarded gspe1-ssl.ls.apple.com to 8.8.8.8
Jun 12 12:55:21 dnsmasq[8130]: query[A] oauthaccountmanager.googleapis.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: cached oauthaccountmanager.googleapis.com is 173.194.219.95
Jun 12 12:55:21 dnsmasq[8130]: query[PTR] 49.0.168.192.in-addr.arpa from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: query[A] gspe1-ssl.ls.apple.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: forwarded gspe1-ssl.ls.apple.com to 8.8.8.8
Jun 12 12:55:21 dnsmasq[8130]: query[A] oauthaccountmanager.googleapis.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: cached oauthaccountmanager.googleapis.com is 173.194.219.95
Jun 12 12:55:21 dnsmasq[8130]: query[A] p35-caldav.icloud.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: cached p35-caldav.icloud.com is <CNAME>
Jun 12 12:55:21 dnsmasq[8130]: cached caldav-g.fe.apple-dns.net is 17.248.136.22
Jun 12 12:55:21 dnsmasq[8130]: cached caldav-g.fe.apple-dns.net is 17.248.186.68
Jun 12 12:55:21 dnsmasq[8130]: cached caldav-g.fe.apple-dns.net is 17.248.136.9
Jun 12 12:55:21 dnsmasq[8130]: cached caldav-g.fe.apple-dns.net is 17.248.136.79
Jun 12 12:55:21 dnsmasq[8130]: cached caldav-g.fe.apple-dns.net is 17.248.136.114
Jun 12 12:55:21 dnsmasq[8130]: cached caldav-g.fe.apple-dns.net is 17.248.186.73
Jun 12 12:55:21 dnsmasq[8130]: cached caldav-g.fe.apple-dns.net is 17.248.186.71
Jun 12 12:55:21 dnsmasq[8130]: cached caldav-g.fe.apple-dns.net is 17.248.136.14
Jun 12 12:55:21 dnsmasq[8130]: query[A] zpns.zoom.us from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: cached zpns.zoom.us is <CNAME>
Jun 12 12:55:21 dnsmasq[8130]: cached zpns-va.zoom.us is 3.235.72.199
Jun 12 12:55:21 dnsmasq[8130]: query[A] p09-calendars.icloud.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: cached p09-calendars.icloud.com is <CNAME>
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.186.4
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.19
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.107
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.43
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.21
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.72
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.23
Jun 12 12:55:21 dnsmasq[8130]: cached calendars.fe.apple-dns.net is 17.248.136.50
Jun 12 12:55:21 dnsmasq[8130]: query[A] gspe1-ssl.ls.apple.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: forwarded gspe1-ssl.ls.apple.com to 8.8.8.8
Jun 12 12:55:21 dnsmasq[8130]: query[A] oauthaccountmanager.googleapis.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: cached oauthaccountmanager.googleapis.com is 173.194.219.95
Jun 12 12:55:21 dnsmasq[8130]: query[A] lp-push-server-54.lastpass.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: forwarded lp-push-server-54.lastpass.com to 8.8.8.8
Jun 12 12:55:21 dnsmasq[8130]: query[A] oauthaccountmanager.googleapis.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: cached oauthaccountmanager.googleapis.com is 173.194.219.95
Jun 12 12:55:21 dnsmasq[8130]: query[A] lp-push-server-54.lastpass.com from 192.168.0.49
Jun 12 12:55:21 dnsmasq[8130]: forwarded lp-push-server-54.lastpass.com to 8.8.8.8
Jun 12 12:55:21 dnsmasq[8130]: reply gspe1-ssl.ls.apple.com is <CNAME>
Jun 12 12:55:21 dnsmasq[8130]: reply gspe1-ssl.ls.apple.com.edgekey.net is <CNAME>
Jun 12 12:55:21 dnsmasq[8130]: reply e6987.a.akamaiedge.net is 23.55.125.81
Jun 12 12:55:21 dnsmasq[8130]: reply lp-push-server-54.lastpass.com is <CNAME>
Jun 12 12:55:21 dnsmasq[8130]: reply do-84.lastpass.com is 167.172.137.151
Jun 12 12:55:22 dnsmasq[8130]: query[A] fw-snaps.ring.com from 192.168.0.78
Jun 12 12:55:22 dnsmasq[8130]: forwarded fw-snaps.ring.com to 8.8.8.8
Jun 12 12:55:22 dnsmasq[8130]: reply fw-snaps.ring.com is 54.210.223.191
Jun 12 12:55:22 dnsmasq[8130]: reply fw-snaps.ring.com is 52.7.244.57
Jun 12 12:55:22 dnsmasq[8130]: reply fw-snaps.ring.com is 52.5.62.3
Jun 12 12:55:22 dnsmasq[8130]: reply fw-snaps.ring.com is 34.199.89.254
Jun 12 12:55:22 dnsmasq[8130]: reply fw-snaps.ring.com is 23.22.67.1
Jun 12 12:55:22 dnsmasq[8130]: reply fw-snaps.ring.com is 107.23.2.152
Jun 12 12:55:22 dnsmasq[8130]: reply fw-snaps.ring.com is 54.210.95.190
Jun 12 12:55:26 dnsmasq[8130]: query[A] ps.ring.com from 192.168.0.60
Jun 12 12:55:26 dnsmasq[8130]: forwarded ps.ring.com to 8.8.8.8
Jun 12 12:55:26 dnsmasq[8130]: reply ps.ring.com is 35.173.68.29
Jun 12 12:55:26 dnsmasq[8130]: reply ps.ring.com is 34.232.8.240
Jun 12 12:55:26 dnsmasq[8130]: reply ps.ring.com is 34.235.252.73
Jun 12 12:55:26 dnsmasq[8130]: reply ps.ring.com is 34.235.59.167
Jun 12 12:55:26 dnsmasq[8130]: reply ps.ring.com is 35.153.62.29
Jun 12 12:55:26 dnsmasq[8130]: reply ps.ring.com is 35.173.38.60
Jun 12 12:55:26 dnsmasq[8130]: reply ps.ring.com is 35.170.142.156
Jun 12 12:55:26 dnsmasq[8130]: reply ps.ring.com is 35.173.89.196
Jun 12 12:55:27 dnsmasq[8130]: query[A] cat.com from 192.168.0.49
Jun 12 12:55:27 dnsmasq[8130]: cached cat.com is 165.26.233.80
Jun 12 12:55:27 dnsmasq[8130]: cached cat.com is 165.26.232.78
Jun 12 12:55:30 dnsmasq[8130]: query[A] self.events.data.microsoft.com from 192.168.0.49
Jun 12 12:55:30 dnsmasq[8130]: forwarded self.events.data.microsoft.com to 8.8.8.8
Jun 12 12:55:30 dnsmasq[8130]: reply self.events.data.microsoft.com is <CNAME>
Jun 12 12:55:30 dnsmasq[8130]: reply global.asimov.events.data.trafficmanager.net is <CNAME>
Jun 12 12:55:30 dnsmasq[8130]: reply skypedataprdcolwus00.cloudapp.net is 13.88.28.53

 

[dave14305]

Can you get dnsmasq.log going back just before 12:54:35 to 12:55:27? Upload to pastebin.com if too large.

 

[kobejo34]

Can you get dnsmasq.log going back just before 12:54:35 to 12:55:27? Upload to pastebin.com if too large.

Ok I'll try to figure out how to get the file off. I assume rsync so I'll google that as I tried cyberduck scp but failed.

 

[kobejo34]

may be easier to reproduce it as that happens quite often

 

[kobejo34]

Just uninstalled diversion and turned off the dns portion of dnsmasq with the unbound script and used add blocker and dns has been solid since. When I was younger I would have cared to fix it now I just move on. Running the same block list so I guess that wasn’t it either. Thanks for all the replies.