Hi I have a small desktop/home network that local applications aren’t able to resolve dns on.
For example:
dig reddit.com
;; communications error to ::1#53: connection refused
;; communications error to ::1#53: connection refused
;; communications error to ::1#53: connection refused
;; communications error to 127.0.0.1#53: connection refused
; <<>> DiG 9.20.7 <<>> reddit.com
;; global options: +cmd
;; no servers could be reached
Golang also fails to install:
go install -v golang.org/x/tools/gopls@latest
go: golang.org/x/tools/gopls@latest: module golang.org/x/tools/gopls: Get "https://proxy.golang.org/golang.org/x/tools/gopls/@v/list": dial tcp: lookup proxy.golang.org on [::1]:53: read udp [::1]:51901->[::1]:53: read: connection refused
ping works
ping reddit.com
PING reddit.com (2a04:4e42::396) 56 data bytes
64 bytes from 2a04:4e42::396: icmp_seq=1 ttl=54 time=25.9 ms
64 bytes from 2a04:4e42::396: icmp_seq=2 ttl=54 time=23.3 ms
I suspect that systemd-resolve or systemd-network is not setup or working properly.
This is my current configuration:
cat /etc/systemd/network/25-wireless.network
[Match]
Name=wlp1s0f0u10
[Link]
RequiredForOnline=routable
[Network]
DHCP=yes
IgnoreCarrierLoss=3s
#DNS=127.0.0.1
cat /etc/systemd/network/20-wired.network
[Match]
Name=enp8s0
[Link]
RequiredForOnline=no
[Network]
Address=20.21.22.1/24
DHCPServer=true
IPMasquerade=ipv4
[DHCPServer]
PoolOffset=100
PoolSize=20
EmitDNS=yes
#DNS=8.8.8.8
cat /etc/systemd/resolved.conf
# This file is part of systemd.
#
# systemd is free software; you can redistribute it and/or modify it under the
# terms of the GNU Lesser General Public License as published by the Free
# Software Foundation; either version 2.1 of the License, or (at your option)
# any later version.
#
# Entries in this file show the compile time defaults. Local configuration
# should be created by either modifying this file (or a copy of it placed in
# /etc/ if the original file is shipped in /usr/), or by creating "drop-ins" in
# the /etc/systemd/resolved.conf.d/ directory. The latter is generally
# recommended. Defaults can be restored by simply deleting the main
# configuration file and all drop-ins located in /etc/.
#
# Use 'systemd-analyze cat-config systemd/resolved.conf' to display the full config.
#
# See resolved.conf(5) for details.
[Resolve]
# Some examples of DNS servers which may be used for DNS= and FallbackDNS=:
# Cloudflare: 1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com
# Google: 8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google
# Quad9: 9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
DNS=8.8.8.8
FallbackDNS=8.8.4.4
#FallbackDNS=1.1.1.1#cloudflare-dns.com 9.9.9.9#dns.quad9.net 8.8.8.8#dns.google 2606:4700:4700::1111#cloudflare-dns.com 2620:fe::9#dns.quad9.net 2001:4860:4860::8888#dns.google
#Domains=
#DNSSEC=no
#DNSOverTLS=no
#MulticastDNS=yes
#LLMNR=yes
#Cache=yes
#CacheFromLocalhost=no
#DNSStubListener=yes
#DNSStubListenerExtra=
ReadEtcHosts=no
#ResolveUnicastSingleLabel=no
#StaleRetentionSec=0
(I think this was generated automatically, I think it works)
sudo nft list ruleset
table ip io.systemd.nat {
set masq_saddr {
type ipv4_addr
flags interval
elements = { 20.21.22.0/24 }
}
map map_port_ipport {
type inet_proto . inet_service : ipv4_addr . inet_service
}
chain prerouting {
type nat hook prerouting priority dstnat + 1; policy accept;
fib daddr type local dnat ip to meta l4proto . th dport map @map_port_ipport
}
chain output {
type nat hook output priority dstnat + 1; policy accept;
ip daddr != 127.0.0.0/8 oif "lo" dnat ip to meta l4proto . th dport map @map_port_ipport
}
chain postrouting {
type nat hook postrouting priority srcnat + 1; policy accept;
ip saddr @masq_saddr masquerade
}
}
table ip6 io.systemd.nat {
set masq_saddr {
type ipv6_addr
flags interval
}
map map_port_ipport {
type inet_proto . inet_service : ipv6_addr . inet_service
}
chain prerouting {
type nat hook prerouting priority dstnat + 1; policy accept;
fib daddr type local dnat ip6 to meta l4proto . th dport map @map_port_ipport
}
chain output {
type nat hook output priority dstnat + 1; policy accept;
ip6 daddr != ::1 oif "lo" dnat ip6 to meta l4proto . th dport map @map_port_ipport
}
chain postrouting {
type nat hook postrouting priority srcnat + 1; policy accept;
ip6 saddr @masq_saddr masquerade
}
}
resolvectl status
Global
Protocols: +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
resolv.conf mode: foreign
Current DNS Server: 8.8.8.8
DNS Servers: 8.8.8.8
Fallback DNS Servers: 8.8.4.4
Link 2 (enp8s0)
Current Scopes: LLMNR/IPv4 LLMNR/IPv6
Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Default Route: no
Link 3 (wlp1s0f0u10)
Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6
Protocols: +DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: 206.248.154.170
DNS Servers: 206.248.154.22 206.248.154.170 2607:f2c0::1 2607:f2c0::2
Default Route: yes
sudo ss -tlnup
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
udp UNCONN 0 0 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=432,fd=22))
udp UNCONN 0 0 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=432,fd=20))
udp UNCONN 0 0 0.0.0.0%enp8s0:67 0.0.0.0:* users:(("systemd-network",pid=452,fd=33))
udp UNCONN 0 0 192.168.0.51%wlp1s0f0u10:68 0.0.0.0:* users:(("systemd-network",pid=452,fd=38))
udp UNCONN 0 0 224.0.0.251:5353 0.0.0.0:* users:(("chrome",pid=1088,fd=188))
udp UNCONN 0 0 224.0.0.251:5353 0.0.0.0:* users:(("chrome",pid=1088,fd=183))
udp UNCONN 0 0 0.0.0.0:5353 0.0.0.0:* users:(("systemd-resolve",pid=432,fd=15))
udp UNCONN 0 0 0.0.0.0:5355 0.0.0.0:* users:(("systemd-resolve",pid=432,fd=11))
udp UNCONN 0 0 [fe80::4a8f:4cff:fef6:d2db]%wlp1s0f0u10:546 [::]:* users:(("systemd-network",pid=452,fd=39))
udp UNCONN 0 0 [::]:5353 [::]:* users:(("systemd-resolve",pid=432,fd=16))
udp UNCONN 0 0 [::]:5355 [::]:* users:(("systemd-resolve",pid=432,fd=13))
tcp LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=432,fd=21))
tcp LISTEN 0 4096 0.0.0.0:5355 0.0.0.0:* users:(("systemd-resolve",pid=432,fd=12))
tcp LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=432,fd=23))
tcp LISTEN 0 4096 [::]:5355 [::]:* users:(("systemd-resolve",pid=432,fd=14))
resolvectl query reddit.com
reddit.com: 2a04:4e42:400::396 -- link: wlp1s0f0u10
2a04:4e42:600::396 -- link: wlp1s0f0u10
2a04:4e42::396 -- link: wlp1s0f0u10
2a04:4e42:200::396 -- link: wlp1s0f0u10
151.101.65.140 -- link: wlp1s0f0u10
151.101.1.140 -- link: wlp1s0f0u10
151.101.193.140 -- link: wlp1s0f0u10
151.101.129.140 -- link: wlp1s0f0u10
-- Information acquired via protocol DNS in 31.6ms.
-- Data is authenticated: no; Data was acquired via local or encrypted transport: no
-- Data from: network