Início / unix / Perguntas / 793003
Accepted
PersianGulf
Asked: 2025-03-27 03:18:39 +0800 CST

Rotear consulta DNS para meu túnel

  • 772

Tenho o seguinte sistema:

root@debian:~# dpkg -l systemd-resolved
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name             Version      Architecture Description
+++-================-============-============-=================================
ii  systemd-resolved 257.4-3      amd64        systemd DNS resolver
root@debian:~# cat /etc/issue
Debian GNU/Linux trixie/sid \n \l

root@debian:~# ls -l /etc/resolv.conf
lrwxrwxrwx 1 root root 39 Mar 26 20:21 /etc/resolv.conf -> ../run/systemd/resolve/stub-resolv.conf

root@debian:~# cat /run/systemd/resolve/stub-resolv.conf 
# This is /run/systemd/resolve/stub-resolv.conf managed by man:systemd-resolved(8).
# Do not edit.
#
# This file might be symlinked as /etc/resolv.conf. If you're looking at
# /etc/resolv.conf and seeing this text, you have followed the symlink.
#
# This is a dynamic resolv.conf file for connecting local clients to the
# internal DNS stub resolver of systemd-resolved. This file lists all
# configured search domains.
#
# Run "resolvectl status" to see details about the uplink DNS servers
# currently in use.
#
# Third party programs should typically not access this file directly, but only
# through the symlink at /etc/resolv.conf. To manage man:resolv.conf(5) in a
# different way, replace this symlink by a static file or a different symlink.
#
# See man:systemd-resolved.service(8) for details about the supported modes of
# operation for /etc/resolv.conf.

nameserver 127.0.0.53
options edns0 trust-ad
search .

Então eu instalei Zebedeeo tunneling e funcionou bem.
E quando eu configurei meu firefoxon localhost:81, o acesso aos sites foi filtrado.

root@debian:~# telnet localhost 81
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

Agora, eu quero usar DNS sobre localhost:81.
Como posso fazer isso?

ATUALIZAÇÃO: O meu resolvectlé:

root@debian:~# resolvectl status
Global
         Protocols: +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
  resolv.conf mode: stub
       DNS Servers: 8.8.8.8

Link 2 (enp0s31f6)
    Current Scopes: LLMNR/IPv4 mDNS/IPv4
         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

Link 3 (wlp58s0)
    Current Scopes: none
         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

Link 5 (docker0)
    Current Scopes: none
         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no
systemd

1 respostas

  1. Best Answer

    /etc/resolv.confsó permitirá que você faça consultas a servidores DNS em execução na porta 53 do respectivo host, mas você tem o Zebedee em execução na porta 81. Você tem três opções:

    1. Desabilite o serviço DNS existente systemctl disable systemd-resolved && systemctl stop systemd-resolvede mova o Zebedee para a porta 53.
    2. Use iptablespara redirecionar solicitações conforme descrito nesta resposta: https://serverfault.com/a/1047602
    3. Execute o Zebedee em um dispositivo diferente (na porta 53 de acesso público) e configure o seu resolv.confpara usá-lo.
    • 1

relate perguntas