Ip linking, log is not working
I have manually linking the ip of router but somehow, it's log is not showing. Linking is working I think. Pl. Fix
Thanks in advance
-
If your IP is linked then you should see a green checkmark next to your IP address, if you don't see the checkmark then its not linked. Also do you have logs enabled under your "Settings" ?
-
Ruby Balloon
Here is my jio software version, Recently software has changed.
Admin, pl. Change the way of iplink log works as I think they got it block, pl. Any help would be great.
Thank u
-
-
Yes, it's showing green tick mark, log is enabled but logs are not showing.
I think, "Is My isp(jio) can block the way iplink works?" If this is case pl. Do something.
This problem starts 3 days back. And started to notice no log was showing on ip link is done but no log.
Any way to pull it back logs (nextdns) in iplinking from my jio router.
-
Yeah! Many ISP's in India including Jio or other smaller players are forcing their dns settings.
This is called DNS Hijacking. It's sad to see what is happening....
I got to know about this from a previous post I had made and Oliver using dig+trace and traceroute analysis informed of the possible DNS Hijacking happening by my ISP.
Now, the way forward is either to get a new router and configure using that and not using the ISP provided one. Or use encrypted DNS like the CLI or the DoT or DoH apps. That is the only way forward.
Since, this is something the ISP is doing, as long as it is unencrypted, nextdns cant do a thing.
Do correct me if you think there are alternatives.
-
Gaurav
Ok, thank u
"Oliver" if u read this, this idea can work on blocking dns hijacking,
Yes, if it can be blocked by the link, as some logs got captured by linked-ip, it can be resolved by blocking the isp server talking and using isp log can be captured by nextdns.
Do u know any router that supports cli, dot or doh.
I acknowledge that openwrt have support of cli, but don't know which router supports it.
And Cisco router have it but it's expensive, do u know any router which supports it, it will be very helpful.
-
The subset of ASUS routers that support the custom Asuswrt-Merlin firmware can run the CLI (and support DOH in the GUI with that custom firmware):
-
Hi
As Rob mentioned buy the asus router. They would support openvpn as well and you can do a lot of other things with them as well. Plus they are available in India on Amazon. They are not too costly and consider it a one time investment into your privacy.
-
Gaurav
Okay I will buy it. I have also searched according to my budget
One more thing " TCP dns request - blocked: server= 2a07:a8c0::myserver. TCP dns request- blocked: server=45.90.28.myserver:53
Before that above was not comming lately, but in yoga dns I have seen a log which come up.
This is showing it, what does it mean. And every thing is okay going through nextdns, but in my log section, there is no log.
Is there any other way to bypass the block.
-
Hi if on the Nextdns website the log is not there then the Nextdns is not being used . But if you mean in the Yoga dns app there is no log then you would have probably set up logs to errors only (visible at the top of the yoga dns app)
As for TCP dns request block that essentially implies that the query is getting blocked and dns resolution to the Nextdns servers is failing.
Do try out traceroute or dig analysis for the IP range of yours (45.90.28.0) and 45.90.30.0 as well as the ipv6 addresses.
-
Gaurav
Yes, it's ipv4 &6 not accessible from tracert, is blocking in router itself.
I have asked my isp to unblock it. But my old router i was having ddns setup but they are blocking it now also. As they are able to see logs and blocking them.
I am a bit sad, now I think If I buy new router, with cli there is a chance they also block it.
Let's see if my isp think to do unblock it (ipv4 and ipv6), then I will think to use any router.( I can change that decision too, if required).
But I am curious to know one more thing, what type of log come in using router with cli support. Anyone knows.
It's very nice talking to u guys, I thank u for helping me to sort out this problem. :)
-
-
Can I know, range of ipv6 of nextdns, I am giving a detailed report to unblock it.
It is /64 or /128. Pl. Let me know
-
2a07:a8c0::/29 PI
-
Olivier Poitrey
Hi Olivier
Thank u for providing me details.
My isp has unblocked all ip4&ipv6 but there is no log in nextdns.
I have tracert ipv4 and ipv6 its connecting to nextdns.
I have also configured the dns in ipv4 and ipv6, and done a firewall( isp router), to go dns through ipv4&6 dns only, but then no log was coming in nextdns log.
I have linked the ip of router, it's linked(with ipv4). But no log in nextdns. How link ip work in background to capture log of router, actually I will tell the isp to enable that also in router itself.
Thank u again for supporting me. :)
-
Hi linking your ip is only half the process, you have to setup your devices to use your endpoints or your assigned (linked ip) dns servers in order for querying/logging to happen. It sounds like you're trying to set this up at the router level so you'll need to go to your Setup > Setup Guide > Click on the drop-down arrow > Select "Routers" > Follow the "IPv4 (with Linked IP)" Guide or the "IPv6" Guide
Note: Only follow the IPv6 Guide if your router allows you to enter IPv6 dns entries, most consumer routers (with stock firmware) only allow IPv4 dns entries. Also IPv6 doesn't require you to link your ip
-
Ruby Balloon
Actually, yes I followed the step and logs comes before. But now isp is blocking ipv4( with linking ip), I want to know the way it works, so that I will make another detail contact to unblock that perticular software(way of iplink work) to unblock.
As before they have blocked all ipv4,6 and it was unavailable through router, but on mobile network it was available.
So I make a complaint to isp authority, to unblock the ipv4/24 and ipv6/29 of nextdns. And isp unblock them.
As above mentioned need to know about ipv4 linking way to tell isp to unblock them.
-
Hi Are you using a router provided by your ISP? If so, the quickest solutions will be to use one of the NextDNS endpoints/apps or to buy a 3rd party router that's not managed by your ISP as Gaurav mentioned a few days ago as there's no way to know how long the unblocking method will take (assuming on good faith your ISP truly intends to unblock it)
-
Ruby Balloon
Yes, I am using isp router,some months back it was working fine, and recently they blocked all ipv4&6 in router and give complaint about that. And today they came and resolved my some issue and some issues not resolved and I will convince them what I need as a customer of them.
-
Hi What do you get for https://test.nextdns.io
-
Olivier Poitrey
This is for router with ipv4 linking { "status": "ok", "protocol": "UDP", "configuration": "fpc6ddf62f58309df3", "client": "2405:201:a001:3057:9469:32a1:acdb:c66e", "anycast": true, "server": "zepto-sin-1", "clientName": "unknown" } -
Harsh you are using IPv6, IPv6 is only for IPv4. Make sure you use the correct IPv6 DNS IPs for your config. Note that each config you create gets a different set if IPv4/v6.
-
Olivier Poitrey
I have created a new configuration for router, and assigned them as in setup. All each device has different configurations with their own ipv4/v6.
A part from that, my computer uses nextdns windows app and it's configuration is comming in router configuration log as well as computer configuration log. I know it's confusing but router log is not logging in router configuration, and computer log is logs are both in computer log as well as in router log.
And yes computer configuration is different from router configuration.
-
-
In computer, I solve my problem as I save the configuration for router ipv4 and It was creating log on both configuration. Now computer is only in computer configuration itself.
-
In router, it's in router configuration, but no logs are coming
-
On individual devices, why don’t you use DoH, DoT our our apps? It would be much simpler and safer.
-
Olivier Poitrey
Yes, I am using DoH,DoT, and app in all device. For safeguard purpose, i only need. Can DoH, Dot can be hacked by isp or any other. If no then i can leave the router as it is.
-
Hi what do you mean by "hacked by ISP"? DoH and DoT can't be highjacked by your ISP, they can easily block DoT, DoH is a bit harder but still possible. On the other side, IPv4/v6 UDP can be blocked, highjacked or spied very easily.
-
Olivier Poitrey
Okay, then I am not going to use ipv4-link ip then. I am already using DoH,Dot, and app.
Thank u, all of u. :)
-
Olivier Poitrey
I think Dot is having some lag issue, how it can be solved. As before it was not there
-
-
I was also having these symptoms but managed to find a workaround.
In my case, it's because most of the devices on my network (e.g. cell phones, tablets) were using IPv6, and my ISP-provided router unfortunately doesn't support configuring custom DNS servers for IPv6, although it does for IPv4.
There were two workarounds I could think of: either individually configuring DNS settings on each device, or just disabling IPv6 on the router. I opted for the latter option so I don't need to configure each device on the network (these devices come and go).
