Community discussions

MikroTik App
 
User avatar
infabo
Forum Guru
Forum Guru
Topic Author
Posts: 1478
Joined: Thu Nov 12, 2020 12:07 pm

DNS FWD entry not working as expected

Thu Apr 20, 2023 10:41 am

When I set a static DNS entry:
name="example.com" type=A address=10.10.10.10 ttl=1d match-subdomain=yes
Then I verify:
:put [:resolve domain-name=test.example.com]`
10.10.10.10
All good.

But when I use a FWD-entry, because I want some other nameserver to handle a specific domain, it does not work:
name="example.com" type=FWD forward-to=10.23.45.10 ttl=1d match-subdomain=yes
It returns:
:put [:resolve domain-name=foo.example.com]
failure: dns name does not exist
But to verify, when I use resolve with explicit server param it resolves perfectly.
 :put [:resolve domain-name=foo.example.com server=10.23.45.10]
10.23.45.16
Is this a ROS bug or does FWD just not work how I would assume it works?
ROS: 7.8
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12597
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: DNS FWD entry not working as expected  [SOLVED]

Thu Apr 20, 2023 12:04 pm

Did you just forget to mention that you use DoH?
 
User avatar
infabo
Forum Guru
Forum Guru
Topic Author
Posts: 1478
Joined: Thu Nov 12, 2020 12:07 pm

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 12:13 pm

Yes, I did not mention that. I have configured a DoH server.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12597
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 12:30 pm

Didn't you wonder how I knew that without a doubt?
I also assume you have NOT read the online help.
If you read the help, you'd instantly understand how I knew you were using DoH...

On synthesis, your FWD point to one DNS without certificate issued by one global CA, and, if you use the DoH, the FWD field make no sense.
 
User avatar
infabo
Forum Guru
Forum Guru
Topic Author
Posts: 1478
Joined: Thu Nov 12, 2020 12:07 pm

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 1:05 pm

If you read the help, you'd instantly understand how I knew you were using DoH...
Sry, just found that. https://help.mikrotik.com/docs/display/ROS/DNS
DoH is not compatible with FWD-type static entries, in order to utilize FWD entries, DoH must not be configured.
---
I also assume you have NOT read the online help.
I do read the online help. But sometimes important infos are "hidden" in long sentences and I oversee that. I somehow struggle with the Confluence style too...
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12597
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 2:25 pm

But there is someone who has read it and gives you a hand ;)
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 22132
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 7:23 pm

And he only has one eye!!
 
User avatar
infabo
Forum Guru
Forum Guru
Topic Author
Posts: 1478
Joined: Thu Nov 12, 2020 12:07 pm

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 10:20 pm

all the more amazing!
 
User avatar
own3r1138
Forum Veteran
Forum Veteran
Posts: 728
Joined: Sun Feb 14, 2021 12:33 am
Location: Pleiades
Contact:

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 10:52 pm

And he only has one eye!!
The Eye of Barad-dûr
hqdefault.jpg
You do not have the required permissions to view the files attached to this post.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12597
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 11:37 pm

Just some history ;)


Avatar 2014-2020
68609_old.png

Avatar 2021
68609_oggi.png

Avatar from 2022-02-24
68609_UA.png

Avatar for 2023-02-24
anniversario_ua.png

Avatar for 1st April 2023
1apr.png

Actual Avatar
xp_cat_UA.png

Is there a similarity to the second? :lol:
You do not have the required permissions to view the files attached to this post.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 13060
Joined: Thu Mar 03, 2016 10:23 pm

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 11:50 pm

Is there a similarity to the second? :lol:

So ... in the last two years you made a transition from right to left? :shock:

And only that ... your hair became grey? Is that how old you are? :lol:
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12597
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: DNS FWD entry not working as expected

Thu Apr 20, 2023 11:53 pm

The last is the old Windows XP user login picture icon, with a surprise if is zoomed ;) (like the original...)
 
CosmosNetwork
just joined
Posts: 4
Joined: Fri Mar 27, 2020 1:22 pm

Re: DNS FWD entry not working as expected

Fri Apr 21, 2023 11:27 am

Yes, I did not mention that. I have configured a DoH server.
You can use dns over wireguard instead of doh. For example cloudflare warp with their dns servers.