[Dnsmasq-discuss] URIBL_BLOCKED with dnsmasq and server options

Buck Horn buckhorn at weibsvolk.org
Tue Aug 30 15:41:15 UTC 2022


On 18.08.22 11:08, Jelle de Jong wrote:
 >
 > I understand dnsmasq is an forwarding dns server and I was wondering
 > if there is a way to configure it to do dns lookups using it own IP
 > external address instead of the server forwarders, maybe just for 
URIBL lookups ...


It isn't entirely clear to me what you are trying to achieve.

Your suggestion sounds as if you'd want your dnsmasq to use its own 
external IP address instead of a public DNS resolver as an upstream 
forward target. I wouldn't recommend that, as that would close a DNS 
loop.

But since you mention URIBL:
Maybe you are just looking for a way to avoid being rate-limited or 
outright blocked when doing URIBL lookups via a public resolver?

If that's the case, and if your network's URIBL.COM DNS query volume is 
low, it should be easy enough to configure dnsmasq to send specifically 
those DNS requests to one of their public DNS mirrors, as mentioned in: 
https://uribl.com/about.shtml

dnsmasq's *server* option is likely what you need, and it's well 
explained at
https://thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

You could start by giving the following line a try:
server=/uribl.com/<URIBL DNS mirror here>

Substitute <URIBL DNS mirror here> with a respective IP address of one 
of URIBL's DNS mirrors.
Note that URIBL qualifies those mirrors for usage by 'low volume end 
users'.

If that isn't what you are aiming for, please elaborate your original 
problem.

Regards,
     Buck




More information about the Dnsmasq-discuss mailing list