DNS warnings in logs when using corporate DNS

Hi Michael,

we're using a couple of GL-MT300N-V2's running CloudHub and a number of times we get DNS warnings in logs, such as:

daemon.warn dnsmasq[803]: possible DNS-rebind attack detected: app-measurement.com

There are entries for domains, such as:

  • app-measurement.com
  • clients4.google.com
  • www.googleadservices.com
  • googleads.g.doubleclick.net
  • e.crashlytics.com
  • settings.crashlytics.com

Our corporate DNS server blacklists some advertising domains (returns 0.0.0.0 instead of the actual IP). Is the firmware trying to connect to these services? Is any functionality affected by denying access to them?

Thanks and regards,

Marko

#2

No cloudhub does not reach outside for anything and only has the bare essential software like busybox and wireless drivers . There is a dns server for when the hub is configured standalone but that doesnt reach out to any external service.

Are you sure its originating from cloudhub? If so that is a quite a concern and i will investigate asap.

Edit: I took a quick google and found this https://forum.openwrt.org/t/possible-dns-rebind-attack/21740/7 seems its incoming and it just discarded as expected which is good

#3

I've looked at the DNS logs and all the requests originated from a PC on the same LAN. What I don't understand is why did the CloudHub's OpenWrt firmware react to DNS replies designated to another endpoint? Anyway, sorry for the confusion!

#4

dnsmasq shouldnt be running if the cloudhub is part of an existing network. Are you using it on its own network or an existing network?

#5

The device is configured to be a part of an existing (wired) network, IP set address via DHCP:

https://imgur.com/q1N1hoF

It seems that dnsmasq is running, here's the complete startup log:

Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.000000] Linux version 4.14.161 (root@ubuntu) (gcc version 8.3.0 (OpenWrt GCC 8.3.0 r11589-3f5cf3872d)) #0 Fri Jan 3 23:45:58 2020
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Board has DDR2
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Analog PMU set to hw control
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Digital PMU set to hw control
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] bootconsole [early0] enabled
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] MIPS: machine is GL-MT300N-V2
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Determined physical RAM map:
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] memory: 08000000 @ 00000000 (usable)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Initrd not found or empty - disabling initrd
Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Zone ranges:
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff]
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Movable zone start for each node
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Early memory node ranges
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff]
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] On node 0 totalpages: 32768
Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] free_area_init_node: node 0, pgdat 8047b0d0, node_mem_map 81000040
Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] Normal zone: 256 pages used for memmap
Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] Normal zone: 0 pages reserved
Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] Normal zone: 32768 pages, LIFO batch:7
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.000000] random: get_random_bytes called from start_kernel+0x90/0x478 with crng_init=0
Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] pcpu-alloc: [0] 0
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32512
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Writing ErrCtl register=0004a3d4
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Readback ErrCtl register=0004a3d4
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Memory: 123800K/131072K available (3671K kernel code, 168K rwdata, 752K rodata, 1224K init, 199K bss, 7272K reserved, 0K cma-reserved)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] NR_IRQS: 256
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] intc: using register map from devicetree
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] CPU Clock: 575MHz
Thu Jan 16 22:07:11 2020 kern.crit kernel: [ 0.000000] timer_probe: no matching timers found
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6647862422 ns
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000011] sched_clock: 32 bits at 287MHz, resolution 3ns, wraps every 7469508094ns
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.007544] Calibrating delay loop... 380.92 BogoMIPS (lpj=1904640)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.073476] pid_max: default: 32768 minimum: 301
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.078161] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.084513] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.097239] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.106738] futex hash table entries: 256 (order: -1, 3072 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.112686] pinctrl core: initialized pinctrl subsystem
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.118794] NET: Registered protocol family 16
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.149763] mt7621_gpio 10000600.gpio: registering 32 gpios
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.155375] mt7621_gpio 10000600.gpio: registering 32 gpios
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.160994] mt7621_gpio 10000600.gpio: registering 32 gpios
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.171124] clocksource: Switched to clocksource MIPS
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.177170] NET: Registered protocol family 2
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.182268] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.188962] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.195153] TCP: Hash tables configured (established 1024 bind 1024)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.201430] UDP hash table entries: 256 (order: 0, 4096 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.207031] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.213389] NET: Registered protocol family 1
Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.217565] PCI: CLS 0 bytes, default 32
Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 0.221013] Crashlog allocated RAM at address 0x3f00000
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.227728] workingset: timestamp_bits=30 max_order=15 bucket_order=0
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.239791] squashfs: version 4.0 (2009/01/31) Phillip Lougher
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.245428] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.264822] io scheduler noop registered
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.268555] io scheduler deadline registered (default)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.274446] gpio-export gpio_export: 1 gpio(s) exported
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.279665] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.287013] console [ttyS0] disabled
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.290457] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.299244] console [ttyS0] enabled
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.306255] bootconsole [early0] disabled
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.314986] 10000d00.uart1: ttyS1 at MMIO 0x10000d00 (irq = 29, base_baud = 2500000) is a 16550A
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.325308] spi-mt7621 10000b00.spi: sys_freq: 191666666
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.345410] m25p80 spi0.0: w25q128 (16384 Kbytes)
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.350235] 4 fixed-partitions partitions found on MTD device spi0.0
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.356707] Creating 4 MTD partitions on "spi0.0":
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.361602] 0x000000000000-0x000000030000 : "u-boot"
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.367584] 0x000000030000-0x000000040000 : "u-boot-env"
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.373912] 0x000000040000-0x000000050000 : "factory"
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.379871] 0x000000050000-0x000001000000 : "firmware"
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.388837] 2 uimage-fw partitions found on MTD device firmware
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.394922] Creating 2 MTD partitions on "firmware":
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.399983] 0x000000000000-0x00000017ba83 : "kernel"
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.406009] 0x00000017ba83-0x000000fb0000 : "rootfs"
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.411916] mtd: device 5 (rootfs) set to be root filesystem
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.419180] 1 squashfs-split partitions found on MTD device rootfs
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.425540] 0x0000003d0000-0x000000fb0000 : "rootfs_data"
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.432711] libphy: Fixed MDIO Bus: probed
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.446266] rt3050-esw 10110000.esw: link changed 0x00
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.454771] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.465020] NET: Registered protocol family 10
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.473602] Segment Routing with IPv6
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.477440] NET: Registered protocol family 17
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.482081] 8021q: 802.1Q VLAN Support v1.8
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.495803] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.509867] Freeing unused kernel memory: 1224K
Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 0.514507] This architecture does not have kernel memory protection.
Thu Jan 16 22:07:11 2020 user.info kernel: [ 1.431859] init: Console is alive
Thu Jan 16 22:07:11 2020 user.info kernel: [ 1.435558] init: - watchdog -
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 2.141141] random: fast init done
Thu Jan 16 22:07:11 2020 user.info kernel: [ 2.634899] kmodloader: loading kernel modules from /etc/modules-boot.d/*
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.817227] usbcore: registered new interface driver usbfs
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.822965] usbcore: registered new interface driver hub
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.828471] usbcore: registered new device driver usb
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.840326] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.848718] ehci-platform: EHCI generic platform driver
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.864396] phy phy-10120000.usbphy.0: remote usb device wakeup disabled
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.871223] phy phy-10120000.usbphy.0: UTMI 16bit 30MHz
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.876537] ehci-platform 101c0000.ehci: EHCI Host Controller
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.882423] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.890568] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.921150] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.928557] hub 1-0:1.0: USB hub found
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.932850] hub 1-0:1.0: 1 port detected
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.940214] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.948217] ohci-platform: OHCI generic platform driver
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.953870] ohci-platform 101c1000.ohci: Generic Platform OHCI controller
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.960789] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.968958] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 3.046285] hub 2-0:1.0: USB hub found
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 3.050501] hub 2-0:1.0: 1 port detected
Thu Jan 16 22:07:11 2020 user.info kernel: [ 3.058983] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
Thu Jan 16 22:07:11 2020 user.info kernel: [ 3.076891] init: - preinit -
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 4.200698] usb 2-1: new full-speed USB device number 2 using ohci-platform
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 4.668894] rt3050-esw 10110000.esw: link changed 0x00
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 4.853307] random: procd: uninitialized urandom read (4 bytes read)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 8.455907] rt3050-esw 10110000.esw: link changed 0x02
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 9.090302] jffs2: notice: (384) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 2 orphan) and 10 of xref (2 dead, 0 orphan) found.
Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.108065] mount_root: switching to jffs2 overlay
Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 9.134570] overlayfs: upper fs does not support tmpfile.
Thu Jan 16 22:07:11 2020 user.warn kernel: [ 9.148695] urandom-seed: Seeding with /etc/urandom.seed
Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.288369] procd: - early -
Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.292253] procd: - watchdog -
Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.903555] procd: - watchdog -
Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.907109] procd: - ubus -
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 9.977057] random: ubusd: uninitialized urandom read (4 bytes read)
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 9.985107] random: ubusd: uninitialized urandom read (4 bytes read)
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 9.992215] random: ubusd: uninitialized urandom read (4 bytes read)
Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.999727] procd: - init -
Thu Jan 16 22:07:11 2020 user.info kernel: [ 10.938347] kmodloader: loading kernel modules from /etc/modules.d/*
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 10.969118] ip6_tables: (C) 2000-2006 Netfilter Core Team
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 10.990326] Loading modules backported from Linux version v5.4-rc8-0-gaf42d3466bdc
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 10.998084] Backport generated by backports.git v5.4-rc8-1-0-g368e8c51
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 11.032735] ip_tables: (C) 2000-2006 Netfilter Core Team
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 11.057210] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 11.108257] xt_time: kernel timezone is -0000
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 11.330616] mt76_wmac 10300000.wmac: ASIC revision: 76280001
Thu Jan 16 22:07:11 2020 user.info kernel: [ 11.463341] urngd: v1.0.1 started.
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 11.655462] random: crng init done
Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 11.658918] random: 6 urandom warning(s) missed due to ratelimiting
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 12.373204] mt76_wmac 10300000.wmac: Firmware Version: 20151201
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 12.379224] mt76_wmac 10300000.wmac: Build Time: 20151201183641
Thu Jan 16 22:07:11 2020 kern.info kernel: [ 12.401136] mt76_wmac 10300000.wmac: firmware init done
Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 12.574220] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
Thu Jan 16 22:07:11 2020 user.info kernel: [ 12.613519] kmodloader: done loading kernel modules from /etc/modules.d/*
Thu Jan 16 22:07:12 2020 user.notice dnsmasq: DNS rebinding protection is active, will discard upstream RFC1918 responses!
Thu Jan 16 22:07:12 2020 user.notice dnsmasq: Allowing 127.0.0.0/8 responses
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: started, version 2.80 cachesize 150
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: DNS service limited to local subnets
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-DNSSEC no-ID loop-detect inotify dumpfile
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain test
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain onion
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain localhost
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain local
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain invalid
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain bind
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain lan
Thu Jan 16 22:07:12 2020 daemon.warn dnsmasq[726]: no servers found in /tmp/resolv.conf.auto, will retry
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: read /etc/hosts - 4 addresses
Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: read /tmp/hosts/dhcp.cfg01411c - 0 addresses
Thu Jan 16 22:07:13 2020 authpriv.info dropbear[766]: Not backgrounding
Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: 8021ad
Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: 8021q
Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: macvlan
Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: veth
Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: bridge
Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: Network device
Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: tunnel
Thu Jan 16 22:07:15 2020 daemon.notice procd: /etc/rc.d/S96led: setting up led wifi
Thu Jan 16 22:07:15 2020 daemon.notice procd: /etc/rc.d/S96led: setting up led wan
Thu Jan 16 22:07:17 2020 daemon.warn netifd: You have delegated IPv6-prefixes but haven't assigned them to any interface. Did you forget to set option ip6assign on your lan-interfaces?
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'lan' is enabled
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'loopback' is enabled
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'loopback' is setting up now
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'loopback' is now up
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan' is enabled
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan6' is enabled
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Network device 'eth0' link is up
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'lan' has link connectivity
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'lan' is setting up now
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Network device 'lo' link is up
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'loopback' has link connectivity
Thu Jan 16 22:07:17 2020 daemon.notice netifd: VLAN 'eth0.2' link is up
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan' has link connectivity
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan' is setting up now
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan6' has link connectivity
Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan6' is setting up now
Thu Jan 16 22:07:17 2020 daemon.notice netifd: lan (999): udhcpc: started, v1.31.1
Thu Jan 16 22:07:17 2020 daemon.notice netifd: wan (1001): udhcpc: started, v1.31.1
Thu Jan 16 22:07:18 2020 daemon.err odhcp6c[1004]: Failed to send RS (Address not available)
Thu Jan 16 22:07:18 2020 daemon.notice netifd: lan (999): udhcpc: sending discover
Thu Jan 16 22:07:18 2020 daemon.notice netifd: wan (1001): udhcpc: sending discover
Thu Jan 16 22:07:18 2020 daemon.err odhcp6c[1004]: Failed to send DHCPV6 message to ff02::1:2 (Address not available)
Thu Jan 16 22:07:18 2020 daemon.notice netifd: lan (999): udhcpc: sending select for 10.0.0.34
Thu Jan 16 22:07:18 2020 daemon.notice netifd: lan (999): udhcpc: lease of 10.0.0.34 obtained, lease time 86400
Thu Jan 16 22:07:19 2020 daemon.notice netifd: Interface 'lan' is now up
Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: reading /tmp/resolv.conf.auto
Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain test
Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain onion
Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain localhost
Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain local
Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain invalid
Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain bind
Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain lan
Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using nameserver 10.0.0.253#53
Thu Jan 16 22:07:19 2020 daemon.info procd: - init complete -
Thu Jan 16 22:07:20 2020 user.info vhusbdchglmt300nv2[1112]: >>> Starting VirtualHere USB Server v4.0.9 (Built: Jan 4 2020, 20:50:46)<<<
Thu Jan 16 22:07:20 2020 user.info vhusbdchglmt300nv2[1112]: Using configuration /root/config.ini
Thu Jan 16 22:07:21 2020 daemon.notice netifd: wan (1001): udhcpc: sending discover
Thu Jan 16 22:07:21 2020 user.info vhusbdchglmt300nv2[1112]: Server licensed to=unlicensed max_devices=1
Thu Jan 16 22:07:21 2020 user.info vhusbdchglmt300nv2[1112]: Using large URB's
Thu Jan 16 22:07:21 2020 user.info vhusbdchglmt300nv2[1112]: Listening on all network interfaces at TCP port 7575
Thu Jan 16 22:07:21 2020 user.info vhusbdchglmt300nv2[1112]: Found Full speed device [10c4:ea60] "Silicon Labs, CP2102N USB to UART Bridge Controller" at address 21
Thu Jan 16 22:49:33 2020 daemon.info dnsmasq[726]: read /etc/hosts - 4 addresses
Thu Jan 16 22:49:33 2020 daemon.info dnsmasq[726]: read /tmp/hosts/dhcp.cfg01411c - 0 addresses
Thu Jan 16 22:49:35 2020 daemon.notice netifd: wan (1001): udhcpc: sending discover
Thu Jan 16 22:49:42 2020 user.info vhusbdchglmt300nv2[1112]: 10.0.0.16 connected as connection 1
Thu Jan 16 23:54:58 2020 daemon.warn dnsmasq[726]: possible DNS-rebind attack detected: www.googleadservices.com
Thu Jan 16 23:54:58 2020 daemon.warn dnsmasq[726]: possible DNS-rebind attack detected: www.googleadservices.com

#6

OK actually dnsmasq should be running as it caches dns requests. The virtualhere server would need to request dns facilities for example when using "Reverse Clients" etc.