DNS warnings in logs when using corporate DNS

Hi Michael,

we're using a couple of GL-MT300N-V2's running CloudHub and a number of times we get DNS warnings in logs, such as:

daemon.warn dnsmasq[803]: possible DNS-rebind attack detected: app-measurement.com

There are entries for domains, such as:

app-measurement.com
clients4.google.com
www.googleadservices.com
googleads.g.doubleclick.net
e.crashlytics.com
settings.crashlytics.com

Our corporate DNS server blacklists some advertising domains (returns 0.0.0.0 instead of the actual IP). Is the firmware trying to connect to these services? Is any functionality affected by denying access to them?

Thanks and regards,

Marko

.

No cloudhub does not reach outside for anything and only has the bare essential software like busybox and wireless drivers . There is a dns server for when the hub is configured standalone but that doesnt reach out to any external service.

Are you sure its originating from cloudhub? If so that is a quite a concern and i will investigate asap.

Edit: I took a quick google and found this https://forum.openwrt.org/t/possible-dns-rebind-attack/21740/7 seems its incoming and it just discarded as expected which is good

I've looked at the DNS logs

I've looked at the DNS logs and all the requests originated from a PC on the same LAN. What I don't understand is why did the CloudHub's OpenWrt firmware react to DNS replies designated to another endpoint? Anyway, sorry for the confusion!

.

dnsmasq shouldnt be running if the cloudhub is part of an existing network. Are you using it on its own network or an existing network?

The device is configured to

The device is configured to be a part of an existing (wired) network, IP set address via DHCP:

https://imgur.com/q1N1hoF

It seems that dnsmasq is running, here's the complete startup log:

Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.000000] Linux version 4.14.161 (root@ubuntu) (gcc version 8.3.0 (OpenWrt GCC 8.3.0 r11589-3f5cf3872d)) #0 Fri Jan 3 23:45:58 2020 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Board has DDR2 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Analog PMU set to hw control Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Digital PMU set to hw control Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] bootconsole [early0] enabled Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] MIPS: machine is GL-MT300N-V2 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Determined physical RAM map: Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] memory: 08000000 @ 00000000 (usable) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Initrd not found or empty - disabling initrd Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Zone ranges: Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff] Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Movable zone start for each node Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Early memory node ranges Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff] Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff] Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] On node 0 totalpages: 32768 Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] free_area_init_node: node 0, pgdat 8047b0d0, node_mem_map 81000040 Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] Normal zone: 256 pages used for memmap Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] Normal zone: 0 pages reserved Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] Normal zone: 32768 pages, LIFO batch:7 Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.000000] random: get_random_bytes called from start_kernel+0x90/0x478 with crng_init=0 Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.000000] pcpu-alloc: [0] 0 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32512 Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Writing ErrCtl register=0004a3d4 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Readback ErrCtl register=0004a3d4 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] Memory: 123800K/131072K available (3671K kernel code, 168K rwdata, 752K rodata, 1224K init, 199K bss, 7272K reserved, 0K cma-reserved) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] NR_IRQS: 256 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] intc: using register map from devicetree Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] CPU Clock: 575MHz Thu Jan 16 22:07:11 2020 kern.crit kernel: [ 0.000000] timer_probe: no matching timers found Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6647862422 ns Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.000011] sched_clock: 32 bits at 287MHz, resolution 3ns, wraps every 7469508094ns Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.007544] Calibrating delay loop... 380.92 BogoMIPS (lpj=1904640) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.073476] pid_max: default: 32768 minimum: 301 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.078161] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.084513] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.097239] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.106738] futex hash table entries: 256 (order: -1, 3072 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.112686] pinctrl core: initialized pinctrl subsystem Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.118794] NET: Registered protocol family 16 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.149763] mt7621_gpio 10000600.gpio: registering 32 gpios Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.155375] mt7621_gpio 10000600.gpio: registering 32 gpios Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.160994] mt7621_gpio 10000600.gpio: registering 32 gpios Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.171124] clocksource: Switched to clocksource MIPS Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.177170] NET: Registered protocol family 2 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.182268] TCP established hash table entries: 1024 (order: 0, 4096 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.188962] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.195153] TCP: Hash tables configured (established 1024 bind 1024) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.201430] UDP hash table entries: 256 (order: 0, 4096 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.207031] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.213389] NET: Registered protocol family 1 Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 0.217565] PCI: CLS 0 bytes, default 32 Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 0.221013] Crashlog allocated RAM at address 0x3f00000 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.227728] workingset: timestamp_bits=30 max_order=15 bucket_order=0 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.239791] squashfs: version 4.0 (2009/01/31) Phillip Lougher Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.245428] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.264822] io scheduler noop registered Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.268555] io scheduler deadline registered (default) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.274446] gpio-export gpio_export: 1 gpio(s) exported Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.279665] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.287013] console [ttyS0] disabled Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.290457] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.299244] console [ttyS0] enabled Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.306255] bootconsole [early0] disabled Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.314986] 10000d00.uart1: ttyS1 at MMIO 0x10000d00 (irq = 29, base_baud = 2500000) is a 16550A Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.325308] spi-mt7621 10000b00.spi: sys_freq: 191666666 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.345410] m25p80 spi0.0: w25q128 (16384 Kbytes) Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.350235] 4 fixed-partitions partitions found on MTD device spi0.0 Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.356707] Creating 4 MTD partitions on "spi0.0": Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.361602] 0x000000000000-0x000000030000 : "u-boot" Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.367584] 0x000000030000-0x000000040000 : "u-boot-env" Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.373912] 0x000000040000-0x000000050000 : "factory" Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.379871] 0x000000050000-0x000001000000 : "firmware" Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.388837] 2 uimage-fw partitions found on MTD device firmware Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.394922] Creating 2 MTD partitions on "firmware": Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.399983] 0x000000000000-0x00000017ba83 : "kernel" Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.406009] 0x00000017ba83-0x000000fb0000 : "rootfs" Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.411916] mtd: device 5 (rootfs) set to be root filesystem Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.419180] 1 squashfs-split partitions found on MTD device rootfs Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 0.425540] 0x0000003d0000-0x000000fb0000 : "rootfs_data" Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.432711] libphy: Fixed MDIO Bus: probed Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.446266] rt3050-esw 10110000.esw: link changed 0x00 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.454771] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.465020] NET: Registered protocol family 10 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.473602] Segment Routing with IPv6 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.477440] NET: Registered protocol family 17 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.482081] 8021q: 802.1Q VLAN Support v1.8 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.495803] VFS: Mounted root (squashfs filesystem) readonly on device 31:5. Thu Jan 16 22:07:11 2020 kern.info kernel: [ 0.509867] Freeing unused kernel memory: 1224K Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 0.514507] This architecture does not have kernel memory protection. Thu Jan 16 22:07:11 2020 user.info kernel: [ 1.431859] init: Console is alive Thu Jan 16 22:07:11 2020 user.info kernel: [ 1.435558] init: - watchdog - Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 2.141141] random: fast init done Thu Jan 16 22:07:11 2020 user.info kernel: [ 2.634899] kmodloader: loading kernel modules from /etc/modules-boot.d/* Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.817227] usbcore: registered new interface driver usbfs Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.822965] usbcore: registered new interface driver hub Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.828471] usbcore: registered new device driver usb Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.840326] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.848718] ehci-platform: EHCI generic platform driver Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.864396] phy phy-10120000.usbphy.0: remote usb device wakeup disabled Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.871223] phy phy-10120000.usbphy.0: UTMI 16bit 30MHz Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.876537] ehci-platform 101c0000.ehci: EHCI Host Controller Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.882423] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.890568] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.921150] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.928557] hub 1-0:1.0: USB hub found Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.932850] hub 1-0:1.0: 1 port detected Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.940214] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.948217] ohci-platform: OHCI generic platform driver Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.953870] ohci-platform 101c1000.ohci: Generic Platform OHCI controller Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.960789] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 2.968958] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 3.046285] hub 2-0:1.0: USB hub found Thu Jan 16 22:07:11 2020 kern.info kernel: [ 3.050501] hub 2-0:1.0: 1 port detected Thu Jan 16 22:07:11 2020 user.info kernel: [ 3.058983] kmodloader: done loading kernel modules from /etc/modules-boot.d/* Thu Jan 16 22:07:11 2020 user.info kernel: [ 3.076891] init: - preinit - Thu Jan 16 22:07:11 2020 kern.info kernel: [ 4.200698] usb 2-1: new full-speed USB device number 2 using ohci-platform Thu Jan 16 22:07:11 2020 kern.info kernel: [ 4.668894] rt3050-esw 10110000.esw: link changed 0x00 Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 4.853307] random: procd: uninitialized urandom read (4 bytes read) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 8.455907] rt3050-esw 10110000.esw: link changed 0x02 Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 9.090302] jffs2: notice: (384) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 2 orphan) and 10 of xref (2 dead, 0 orphan) found. Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.108065] mount_root: switching to jffs2 overlay Thu Jan 16 22:07:11 2020 kern.warn kernel: [ 9.134570] overlayfs: upper fs does not support tmpfile. Thu Jan 16 22:07:11 2020 user.warn kernel: [ 9.148695] urandom-seed: Seeding with /etc/urandom.seed Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.288369] procd: - early - Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.292253] procd: - watchdog - Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.903555] procd: - watchdog - Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.907109] procd: - ubus - Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 9.977057] random: ubusd: uninitialized urandom read (4 bytes read) Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 9.985107] random: ubusd: uninitialized urandom read (4 bytes read) Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 9.992215] random: ubusd: uninitialized urandom read (4 bytes read) Thu Jan 16 22:07:11 2020 user.info kernel: [ 9.999727] procd: - init - Thu Jan 16 22:07:11 2020 user.info kernel: [ 10.938347] kmodloader: loading kernel modules from /etc/modules.d/* Thu Jan 16 22:07:11 2020 kern.info kernel: [ 10.969118] ip6_tables: (C) 2000-2006 Netfilter Core Team Thu Jan 16 22:07:11 2020 kern.info kernel: [ 10.990326] Loading modules backported from Linux version v5.4-rc8-0-gaf42d3466bdc Thu Jan 16 22:07:11 2020 kern.info kernel: [ 10.998084] Backport generated by backports.git v5.4-rc8-1-0-g368e8c51 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 11.032735] ip_tables: (C) 2000-2006 Netfilter Core Team Thu Jan 16 22:07:11 2020 kern.info kernel: [ 11.057210] nf_conntrack version 0.5.0 (2048 buckets, 8192 max) Thu Jan 16 22:07:11 2020 kern.info kernel: [ 11.108257] xt_time: kernel timezone is -0000 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 11.330616] mt76_wmac 10300000.wmac: ASIC revision: 76280001 Thu Jan 16 22:07:11 2020 user.info kernel: [ 11.463341] urngd: v1.0.1 started. Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 11.655462] random: crng init done Thu Jan 16 22:07:11 2020 kern.notice kernel: [ 11.658918] random: 6 urandom warning(s) missed due to ratelimiting Thu Jan 16 22:07:11 2020 kern.info kernel: [ 12.373204] mt76_wmac 10300000.wmac: Firmware Version: 20151201 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 12.379224] mt76_wmac 10300000.wmac: Build Time: 20151201183641 Thu Jan 16 22:07:11 2020 kern.info kernel: [ 12.401136] mt76_wmac 10300000.wmac: firmware init done Thu Jan 16 22:07:11 2020 kern.debug kernel: [ 12.574220] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' Thu Jan 16 22:07:11 2020 user.info kernel: [ 12.613519] kmodloader: done loading kernel modules from /etc/modules.d/* Thu Jan 16 22:07:12 2020 user.notice dnsmasq: DNS rebinding protection is active, will discard upstream RFC1918 responses! Thu Jan 16 22:07:12 2020 user.notice dnsmasq: Allowing 127.0.0.0/8 responses Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: started, version 2.80 cachesize 150 Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: DNS service limited to local subnets Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-DNSSEC no-ID loop-detect inotify dumpfile Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain test Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain onion Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain localhost Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain local Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain invalid Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain bind Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: using local addresses only for domain lan Thu Jan 16 22:07:12 2020 daemon.warn dnsmasq[726]: no servers found in /tmp/resolv.conf.auto, will retry Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: read /etc/hosts - 4 addresses Thu Jan 16 22:07:12 2020 daemon.info dnsmasq[726]: read /tmp/hosts/dhcp.cfg01411c - 0 addresses Thu Jan 16 22:07:13 2020 authpriv.info dropbear[766]: Not backgrounding Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: 8021ad Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: 8021q Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: macvlan Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: veth Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: bridge Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: Network device Thu Jan 16 22:07:14 2020 user.notice : Added device handler type: tunnel Thu Jan 16 22:07:15 2020 daemon.notice procd: /etc/rc.d/S96led: setting up led wifi Thu Jan 16 22:07:15 2020 daemon.notice procd: /etc/rc.d/S96led: setting up led wan Thu Jan 16 22:07:17 2020 daemon.warn netifd: You have delegated IPv6-prefixes but haven't assigned them to any interface. Did you forget to set option ip6assign on your lan-interfaces? Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'lan' is enabled Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'loopback' is enabled Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'loopback' is setting up now Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'loopback' is now up Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan' is enabled Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan6' is enabled Thu Jan 16 22:07:17 2020 daemon.notice netifd: Network device 'eth0' link is up Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'lan' has link connectivity Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'lan' is setting up now Thu Jan 16 22:07:17 2020 daemon.notice netifd: Network device 'lo' link is up Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'loopback' has link connectivity Thu Jan 16 22:07:17 2020 daemon.notice netifd: VLAN 'eth0.2' link is up Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan' has link connectivity Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan' is setting up now Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan6' has link connectivity Thu Jan 16 22:07:17 2020 daemon.notice netifd: Interface 'wan6' is setting up now Thu Jan 16 22:07:17 2020 daemon.notice netifd: lan (999): udhcpc: started, v1.31.1 Thu Jan 16 22:07:17 2020 daemon.notice netifd: wan (1001): udhcpc: started, v1.31.1 Thu Jan 16 22:07:18 2020 daemon.err odhcp6c[1004]: Failed to send RS (Address not available) Thu Jan 16 22:07:18 2020 daemon.notice netifd: lan (999): udhcpc: sending discover Thu Jan 16 22:07:18 2020 daemon.notice netifd: wan (1001): udhcpc: sending discover Thu Jan 16 22:07:18 2020 daemon.err odhcp6c[1004]: Failed to send DHCPV6 message to ff02::1:2 (Address not available) Thu Jan 16 22:07:18 2020 daemon.notice netifd: lan (999): udhcpc: sending select for 10.0.0.34 Thu Jan 16 22:07:18 2020 daemon.notice netifd: lan (999): udhcpc: lease of 10.0.0.34 obtained, lease time 86400 Thu Jan 16 22:07:19 2020 daemon.notice netifd: Interface 'lan' is now up Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: reading /tmp/resolv.conf.auto Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain test Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain onion Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain localhost Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain local Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain invalid Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain bind Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using local addresses only for domain lan Thu Jan 16 22:07:19 2020 daemon.info dnsmasq[726]: using nameserver 10.0.0.253#53 Thu Jan 16 22:07:19 2020 daemon.info procd: - init complete - Thu Jan 16 22:07:20 2020 user.info vhusbdchglmt300nv2[1112]: >>> Starting VirtualHere USB Server v4.0.9 (Built: Jan 4 2020, 20:50:46)<<< Thu Jan 16 22:07:20 2020 user.info vhusbdchglmt300nv2[1112]: Using configuration /root/config.ini Thu Jan 16 22:07:21 2020 daemon.notice netifd: wan (1001): udhcpc: sending discover Thu Jan 16 22:07:21 2020 user.info vhusbdchglmt300nv2[1112]: Server licensed to=unlicensed max_devices=1 Thu Jan 16 22:07:21 2020 user.info vhusbdchglmt300nv2[1112]: Using large URB's Thu Jan 16 22:07:21 2020 user.info vhusbdchglmt300nv2[1112]: Listening on all network interfaces at TCP port 7575 Thu Jan 16 22:07:21 2020 user.info vhusbdchglmt300nv2[1112]: Found Full speed device [10c4:ea60] "Silicon Labs, CP2102N USB to UART Bridge Controller" at address 21 Thu Jan 16 22:49:33 2020 daemon.info dnsmasq[726]: read /etc/hosts - 4 addresses Thu Jan 16 22:49:33 2020 daemon.info dnsmasq[726]: read /tmp/hosts/dhcp.cfg01411c - 0 addresses Thu Jan 16 22:49:35 2020 daemon.notice netifd: wan (1001): udhcpc: sending discover Thu Jan 16 22:49:42 2020 user.info vhusbdchglmt300nv2[1112]: 10.0.0.16 connected as connection 1 Thu Jan 16 23:54:58 2020 daemon.warn dnsmasq[726]: possible DNS-rebind attack detected: www.googleadservices.com Thu Jan 16 23:54:58 2020 daemon.warn dnsmasq[726]: possible DNS-rebind attack detected: www.googleadservices.com

.

OK actually dnsmasq should be running as it caches dns requests. The virtualhere server would need to request dns facilities for example when using "Reverse Clients" etc.