SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0003487: anti-spyware dns redirects to a wrong ip - MantisBT

Endian Issue Tracker

Please see now our new Bugtracker system: JIRA

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0003487

Endian Firewall

Proxy - DNS

public

2011-02-17 13:31

2011-05-04 12:17

Reporter

luca-endian

Assigned To

Priority

normal

Severity

minor

Reproducibility

always

Status

feedback

Resolution

open

Platform

OS Version

Product Version

2.4.1

Target Version

Fixed in Version

Summary

0003487: anti-spyware dns redirects to a wrong ip

Description

root@kenny:/var/efw/dnsmasq/default # cat settings
DNSMASQ_BLACKHOLE_REDIRECT=75.125.225.163

Port 80 on this ip returns a time out error..

Then you get crazy to understand why a domain doesn't work
(like what happened with alice.it)

the new ip is: 139.146.167.25

*** Possible solution ***

Instead of a fixed ip

root@kenny:/etc/dnsmasq # cat blackholedns.conf.tmpl
#for $domain in $spywaredomains
  #if $DNSMASQ_BLACKHOLE=='redirect':
address=/$domain/$DNSMASQ_BLACKHOLE_REDIRECT
  #else
address=/$domain/127.0.0.1
  #end if
#end for

I would resolve the www.malwaredomains.com each time
host www.malwaredomains.com
www.malwaredomains.com is an alias for malwaredomains.com.
malwaredomains.com has address 139.146.167.25

And returns 127.0.0.1 in case of failure.

Tags

purple

Attached Files

Relationships

duplicate of	0003483	feedback	lorenzo-endian	Http proxy error 110 connection timed out
related to	0003478	confirmed	peter-endian	Error in logs when restarting DNSmasq

Notes
(0005756) luca-endian (developer) 2011-02-24 14:04	maybe related to http://bugs.endian.com/view.php?id=3478 [^]

Issue History
Date Modified	Username	Field	Change
2011-02-17 13:31	luca-endian	New Issue
2011-02-17 13:31	luca-endian	Customer Occurencies	=> 10+
2011-02-17 13:31	luca-endian	Tag Attached: purple
2011-02-17 14:24	lorenzo-endian	Relationship added	duplicate of 0003483
2011-02-17 14:24	lorenzo-endian	Status	new => confirmed
2011-02-24 14:03	luca-endian	Relationship added	related to 0003478
2011-02-24 14:04	luca-endian	Note Added: 0005756
2011-03-04 19:21	simon-endian	Status	confirmed => feedback