Hi everyone, so I'm struggling with the simple task of letting the hosts in my lan get their dns.
I have set up a dns server in my lan (192.168.XXX.100), a spare macbook hosting docker.
That docker, in turn, is hosting pihole and unbound.
Things aren't working, so I set up wireshark at both host (the mac) and some other host in the lan, a dns client. Wireshark captures nothing.
So I figured it might be the iptables dropping dns packets.
To my surprise, I found a ton of seemingly repetitive chains and rules I did not recognize.
Some even seem dangerous because they allow anything from anywhere to go anywhere else.
Does anyone know what these are all about?
CODE
root@DD-WRT:~# iptables --list Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc DROP udp -- anywhere anywhere udp dpt:route DROP udp -- anywhere anywhere udp dpt:route ACCEPT udp -- anywhere anywhere udp dpt:route ACCEPT tcp -- anywhere DD-WRT tcp dpt:ssh DROP icmp -- anywhere anywhere DROP igmp -- anywhere anywhere ACCEPT all -- anywhere anywhere state NEW ACCEPT all -- anywhere anywhere state NEW DROP all -- anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED upnp all -- anywhere anywhere lan2wan all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT tcp -- 192.168.108.0/24 anywhere tcp dpt:1723 ACCEPT gre -- 192.168.108.0/24 anywhere ACCEPT tcp -- anywhere 192.168.XXX.100 tcp dpt:dns ACCEPT udp -- anywhere 192.168.XXX.100 udp dpt:dns TRIGGER all -- anywhere anywhere TRIGGER type:in match:0 relate:0 trigger_out all -- anywhere anywhere TRIGGER all -- anywhere anywhere TRIGGER type:in match:0 relate:0 trigger_out all -- anywhere anywhere ACCEPT all -- anywhere anywhere state NEW TRIGGER all -- anywhere anywhere TRIGGER type:in match:0 relate:0 trigger_out all -- anywhere anywhere ACCEPT all -- anywhere anywhere state NEW TRIGGER all -- anywhere anywhere TRIGGER type:in match:0 relate:0 trigger_out all -- anywhere anywhere ACCEPT all -- anywhere anywhere state NEW TRIGGER all -- anywhere anywhere TRIGGER type:in match:0 relate:0 trigger_out all -- anywhere anywhere ACCEPT all -- anywhere anywhere state NEW ACCEPT all -- anywhere anywhere state NEW DROP all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain advgrp_1 (0 references) target prot opt source destination Chain advgrp_10 (0 references) target prot opt source destination Chain advgrp_11 (0 references) target prot opt source destination Chain advgrp_12 (0 references) target prot opt source destination Chain advgrp_13 (0 references) target prot opt source destination Chain advgrp_14 (0 references) target prot opt source destination Chain advgrp_15 (0 references) target prot opt source destination Chain advgrp_16 (0 references) target prot opt source destination Chain advgrp_17 (0 references) target prot opt source destination Chain advgrp_18 (0 references) target prot opt source destination Chain advgrp_19 (0 references) target prot opt source destination Chain advgrp_2 (0 references) target prot opt source destination Chain advgrp_20 (0 references) target prot opt source destination Chain advgrp_3 (0 references) target prot opt source destination Chain advgrp_4 (0 references) target prot opt source destination Chain advgrp_5 (0 references) target prot opt source destination Chain advgrp_6 (0 references) target prot opt source destination Chain advgrp_7 (0 references) target prot opt source destination Chain advgrp_8 (0 references) target prot opt source destination Chain advgrp_9 (0 references) target prot opt source destination Chain grp_1 (0 references) target prot opt source destination Chain grp_10 (0 references) target prot opt source destination Chain grp_11 (0 references) target prot opt source destination Chain grp_12 (0 references) target prot opt source destination Chain grp_13 (0 references) target prot opt source destination Chain grp_14 (0 references) target prot opt source destination Chain grp_15 (0 references) target prot opt source destination Chain grp_16 (0 references) target prot opt source destination Chain grp_17 (0 references) target prot opt source destination Chain grp_18 (0 references) target prot opt source destination Chain grp_19 (0 references) target prot opt source destination Chain grp_2 (0 references) target prot opt source destination Chain grp_20 (0 references) target prot opt source destination Chain grp_3 (0 references) target prot opt source destination Chain grp_4 (0 references) target prot opt source destination Chain grp_5 (0 references) target prot opt source destination Chain grp_6 (0 references) target prot opt source destination Chain grp_7 (0 references) target prot opt source destination Chain grp_8 (0 references) target prot opt source destination Chain grp_9 (0 references) target prot opt source destination Chain lan2wan (1 references) target prot opt source destination Chain logaccept (0 references) target prot opt source destination ACCEPT all -- anywhere anywhere Chain logdrop (0 references) target prot opt source destination DROP all -- anywhere anywhere Chain logreject (0 references) target prot opt source destination REJECT tcp -- anywhere anywhere reject-with tcp-reset Chain trigger_out (5 references) target prot opt source destination Chain upnp (1 references) target prot opt source destination root@DD-WRT:~# Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf reddit.com.
SOCIAL SHARE CARD GENERATOR