1

Stubby & dnsmasq

I have configured Stubby on OpenWRT 15.05.1 but any queries made aren't showing up in the logs via the NextDNS control panel.

However if I configure the dnsmasq.conf file to include the settings listed on the Setup page then I can see the queries on the log page.

Should I have both Stubby and Dnsmasq.conf configured?

10replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
  • No you don’t need both.

    Like 1
      • Hamish
      • Hamish
      • 2 mths ago
      • Reported - view

      Olivier Poitrey when I use a Stubby config nothing is getting filtered but when I use dnsmasq it is filtered and I can see DoT is working

      Like
  • Follow this step by step: https://github.com/openwrt/packages/blob/master/net/stubby/files/README.md

     

    Do not proceed any further once you get to "Enabling DNSSEC", it seems NextDNS does not support DNS between you and it. However, NextDNS itself uses DNSSEC for upstream.

    Like
    • Hans Geiblinger it’s not that NextDNS do not support DNSSEC, but by design, it breaks DNSSEC when altering the responses to perform blocking or rewriting. We validate DNSSEC server side, so it is not necessary to do it on the client.

      Like 1
      • Hamish
      • Hamish
      • 1 mth ago
      • Reported - view

      Olivier Poitrey so if I remove DNSSEC, remove the dnsmasq conf settings and only have stubby running then I should start seeing the DNS queries on the logs page and have filtered internet?

      Like
    • Hamish yes, if it doesn’t, your version of Stubby is probably linked to an old version of openssl that does not support SNI, so you will have to keep the dnsmasq config.

      Like 1
      • Hamish
      • Hamish
      • 1 mth ago
      • Reported - view

      Olivier Poitrey thanks for that information, I'll see if I can update OpenSSL.

      Like
      • Hamish
      • Hamish
      • 1 mth ago
      • Reported - view

      Olivier Poitrey I did an upgrade and can only get up to version 1.0.2t-1

      Like
    • Hamish you are out of luck with stubby then.

      Like
  • I'm sure there is a reason, but why are you still on an ancient build of Owrt?

    Like
Like1 Follow
  • 1 Likes
  • 1 mth agoLast active
  • 10Replies
  • 94Views
  • 4 Following