Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Weaver]

[Chrysalis]

depends on software.

windows allows it (but you dont use windows)
pfsense/opnsense allow it as they use unbound which allows it.  But you use a firebrick and I have no idea on firebrick's.

Also do you use your router as a dns resolver or just forwarder?

[ejs]

From the dnsmasq man page:

--neg-ttl=<time>
              Negative replies from upstream servers normally contain time-to-live information in SOA records which dnsmasq uses for caching. If the replies from
              upstream servers omit this information, dnsmasq does not cache the reply. This option gives a default value for time-to-live (in seconds) which
              dnsmasq uses to cache negative replies even in the absence of an SOA record.

[Weaver]

The Firebrick is used as a resolver, caching. So it is perhaps negative responses cached by the firebrick ? Or could it be negative cached by iOS first, as with ms windows?

[Chrysalis]

Could be either or even both, depends on your configuration.

[Weaver]

Indeed, thanks for reminding me - I had forgotten about the effect of the behaviour of o/s itself and caching relay / proxy dns servers in routers.

[Chrysalis]

Browsers even can mess with it as well, they can cache dns themselves, so you have many redundant systems caching dns data in some situations.