seji64 / snidust Goto Github PK

View Code? Open in Web Editor NEW

97.0 8.0 28.0 130 KB

SmartDNS Proxy to hide your GeoLocation. Based on DnsDist and nginx

License: GNU General Public License v3.0

Dockerfile 21.61% Shell 78.39%

docker sniproxy dnsdist netflix zattoo hulu proxy dns-proxy smartdns yallo

snidust's People

Contributors

Stargazers

Watchers

snidust's Issues

New port change introduces invalid CIDR address error

Sorry if this is not well explained, I'm not an expert in this area.

Since the new update for changing the ports, it continued to work to some extent without making changes. However, if I change the ports in the yaml (using docker compose) file as recommended in the docs I end up with an error code and it no longer works, won't respond to DNS queries. New ports below:

ports:
            - 443:8443
            - 80:8080

I get the following error code:

2024-04-08T17:22:25Z ERR invalid CIDR address: /32 acl=cidr

Additionally, this may be related to using the old port method - but I have always had an issue with the below errors, and random crashes which I feel may be related but could never get to the bottom of:

Error while retrieving the security update for version dnsdist-1.8.2: Unable to get a valid Security Status update
Failed to retrieve security status update for '1.8.2' on dnsdist-1.8.2.security-status.secpoll.powerdns.com.

SniDust becomes unresponsive with lots of these types of errors in the logs:

2024-04-08T17:08:30Z ERR dial tcp: lookup diplomys-goznak.ru on 127.0.0.11:53: no such host service=http
2024-04-08T17:08:41Z ERR dial tcp: lookup www.askmarugujarat.in on 127.0.0.11:53: no such host service=http
2024-04-08T17:08:45Z ERR dial tcp: lookup www.kindergruppeklitzeklein.de on 127.0.0.11:53: no such host service=http
2024-04-08T17:08:48Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:08:57Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:06Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:25Z ERR dial tcp: lookup www.robinneefs.be on 127.0.0.11:53: no such host service=http
2024-04-08T17:09:27Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:28Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:34Z ERR dial tcp: lookup reyesestetica.webgarden.es on 127.0.0.11:53: no such host service=http
2024-04-08T17:09:34Z ERR dial tcp 103.205.254.243:80: connect: connection timed out service=http
2024-04-08T17:09:34Z ERR dial tcp 103.205.254.243:80: connect: connection timed out service=http
2024-04-08T17:09:34Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http
2024-04-08T17:09:35Z ERR dial tcp 103.205.254.243:80: connect: network is unreachable service=http

Any recommendations on how to fix these issues. Appreciate work on SniDust

Works on iPad but get caught on Samsung TV

Both are in same WIFI and connect to same server, watching the same movie.
Works on iPad but get caught on Samsung TV

Question

Hi.

I'm looking for an alternative to https://github.com/ab77/netflix-proxy/ because it's outdated and didn't work anymore.
I think your SniDust could replace it.
But before i want to try it, i have a question.
In your setup guide you write that it's possible to use custom domains. That's good, i need that feature. But is it also possible to deactivate the pre-installed provider-domains?

Best regards, Publish3r.

high bandwidth

Snidust using all of the max bandwidth the server got. over 100gb an hour!

Error while generating self-signed cert when starting SniDust

This is a very interesting project. I started this up on a vanilla Ubuntu on Hetzner with a quite vanilla config, but am getting this error which I fail to unterstand.

version: '3.3'
services:
    snidust:
        container_name: snidust
        environment:
            - 'ALLOWED_CLIENTS=0.0.0.0/0'
            - EXTERNAL_IP=49.13.5.52
            - SPOOF_ALL_DOMAINS=false # Set to true (case sensetive!) if you want spoof ALL domains.
        ports:
            - '443:443'
            - '80:80'
            - '53:5300/udp'
        image: 'ghcr.io/seji64/snidust:main'

Any Ideas why I see this issue?

snidust    | Dnsdist webserver password not set - generating one
snidust    | Generated WebServer Password: i_rP56tacZhh
snidust    | Dnsdist webserver api key not set - generating one
snidust    | Generated WebServer API Key: U5M-LyN7zOTXW1Xyqe7Qu-hdR9q5rPZt
snidust    | Generating DNSDist Configs...
snidust    | Starting DNSDist...
snidust    | Starting sniproxy
snidust    | [INFO] Using 49.13.5.52 - Point your DNS settings to this address
snidust    | 2023-06-22T19:28:50Z INF starting sniproxy. version v2.0.3, commit bb94fc501f875a260d402c4a9d887d6b6c77b177
snidust    | dnsdist 1.8.0 comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2
snidust    | [SniDust] *** Loading Domain Lists... ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/00-debug.lst***
snidust    | [SniDust] Adding domain myip.is to list
snidust    | [SniDust] Adding domain ifconfig.co to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/01-cdn_akamai.lst***
snidust    | [SniDust] Adding domain akadns.net to list
snidust    | [SniDust] Adding domain akam.net to list
snidust    | [SniDust] Adding domain akamai.com to list
snidust    | [SniDust] Adding domain akamai.net to list
snidust    | [SniDust] Adding domain akamaiedge.net to list
snidust    | [SniDust] Adding domain akamaihd.net to list
snidust    | [SniDust] Adding domain akamaistream.net to list
snidust    | [SniDust] Adding domain akamaitech.net to list
snidust    | [SniDust] Adding domain akamaitechnologies.com to list
snidust    | [SniDust] Adding domain akamaitechnologies.fr to list
snidust    | [SniDust] Adding domain akamaized.net to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/02-amazon.lst***
snidust    | [SniDust] Adding domain amazon.com to list
snidust    | [SniDust] Adding domain amazon.co.uk to list
snidust    | [SniDust] Adding domain amazonvideo.com to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/03-hbo.lst***
snidust    | [SniDust] Adding domain hbonow.com to list
snidust    | [SniDust] Adding domain hbogo.com to list
snidust    | [SniDust] Adding domain hbo.com to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/04-hulu.lst***
snidust    | [SniDust] Adding domain hulu.com to list
snidust    | [SniDust] Adding domain huluim.com to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/05-netflix.lst***
snidust    | [SniDust] Adding domain netflix.com to list
snidust    | [SniDust] Adding domain netflix.de to list
snidust    | [SniDust] Adding domain nflximg.net to list
snidust    | [SniDust] Adding domain nflximg.com to list
snidust    | [SniDust] Adding domain nflxvideo.net to list
snidust    | [SniDust] Adding domain netflix.net to list
snidust    | [SniDust] Adding domain nflximg.net to list
snidust    | [SniDust] Adding domain nflxvideo.net to list
snidust    | [SniDust] Adding domain nflxso.net to list
snidust    | [SniDust] Adding domain nflxext.com to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/06-molotov_tv.lst***
snidust    | [SniDust] Adding domain molotov.tv to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/07-srf_ch.lst***
snidust    | [SniDust] Adding domain srgssr.ch to list
snidust    | [SniDust] Adding domain cdn.rts.ch to list
snidust    | [SniDust] Adding domain srgsnitch.herokuapp.com to list
snidust    | [SniDust] Adding domain srg.live.ott.irdeto.com to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/08-wilmaa.lst***
snidust    | [SniDust] Adding domain wilmaa.com to list
snidust    | [SniDust] Adding domain wilmaa.wemfbox.ch to list
snidust    | [SniDust] Adding domain wilm-ssl.wemfbox.ch to list
snidust    | [SniDust] Adding domain user.wilmaa.tvbackbone.com to list
snidust    | [SniDust] Adding domain multiscreencache.tvbackbone.com to list
snidust    | [SniDust] Adding domain teleboy.ch to list
snidust    | [SniDust] Adding domain wilmaa.customers.cdn.iptv.ch to list
snidust    | [SniDust] Adding domain teleboy.customers.cdn.iptv.ch to list
snidust    | [SniDust] Adding domain cdn.iptv.ch to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/09-zattoo.lst***
snidust    | [SniDust] Adding domain zattoohds-a.akamaihd.net to list
snidust    | [SniDust] Adding domain zathdslive-a.akamaihd.net to list
snidust    | [SniDust] Adding domain zahs.tv to list
snidust    | [SniDust] Adding domain zatsslive-a.akamaihd.net to list
snidust    | [SniDust] Adding domain chromecast-receiver.zattoo.com to list
snidust    | [SniDust] Adding domain box30030.wemfbox.ch to list
snidust    | [SniDust] Adding domain zattoo.wemfbox.ch to list
snidust    | [SniDust] Adding domain zatsslive-a.akamaihd.net to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Domain List: /etc/snidust/domains.d/10-yallo.lst***
snidust    | [SniDust] Adding domain y3o.tv to list
snidust    | [SniDust] *** End of Domain List ***
snidust    | [SniDust] *** Complete! ***
snidust    | Added downstream server 8.8.8.8:853
snidust    | Added downstream server 8.8.4.4:853
snidust    | Added downstream server 1.1.1.1:443
snidust    | Added downstream server 1.0.0.1:443
snidust    | Listening on 0.0.0.0:5300
snidust    | ACL allowing queries from: 0.0.0.0/0
snidust    | Console ACL allowing connections from: 127.0.0.0/8, ::1/128
snidust    | 2023-06-22T19:28:50Z ERR Could not automatically determine public IPv6. you should provide it manually using --publicIPv6
snidust    | Marking downstream cloudflare-dns (1.1.1.1:443) as 'up'
snidust    | Marking downstream cloudflare-dns (1.0.0.1:443) as 'up'
snidust    | Marking downstream dns.google (8.8.8.8:853) as 'up'
snidust    | Marking downstream dns.google (8.8.4.4:853) as 'up'
snidust    | Polled security status of version 1.8.0 at startup, no known issues reported: OK
snidust    | 2023-06-22T19:28:51Z ERR error while generating self-signed cert: failed to write cert fixture to /tmp/
snidust    | <html><head>
snidust    | <meta http-equiv="content-type" content="text/html;charset=utf-8">
snidust    | <title>403 Forbidden</title>
snidust    | </head>
snidust    | <body text=#000000 bgcolor=#ffffff>
snidust    | <h1>Error: Forbidden</h1>
snidust    | <h2>Your client does not have permission to get URL <code>/raw</code> from this server.</h2>
snidust    | <h2></h2>
snidust    | </body></html>
snidust    | .crt: open /tmp/
snidust    | <html><head>
snidust    | <meta http-equiv="content-type" content="text/html;charset=utf-8">
snidust    | <title>403 Forbidden</title>
snidust    | </head>
snidust    | <body text=#000000 bgcolor=#ffffff>
snidust    | <h1>Error: Forbidden</h1>
snidust    | <h2>Your client does not have permission to get URL <code>/raw</code> from this server.</h2>
snidust    | <h2></h2>
snidust    | </body></html>
snidust    | .crt: no such file or directory

ARM64 Build has old/wrong dnsdist version

I run into an error, any ideas?

root@dns:~# docker run --platform=arm64 -d -e ALLOWED_CLIENTS="127.0.0.1, PUBLIC_ISP_IP" -e EXTERNAL_IP=PUBLIC_VPS_IP -p 443:443 -p 80:80 -p 53:5300/udp ghcr.io/seji64/snidust:main
Unable to find image 'ghcr.io/seji64/snidust:main' locally
main: Pulling from seji64/snidust
3b157c852f27: Pull complete
cfb57595ff3b: Pull complete
804328de888a: Pull complete
26291428536d: Pull complete
8c02c47c5ae0: Pull complete
7935da287b0b: Pull complete
4a0a6df502de: Pull complete
31557fadf023: Pull complete
8dcb500e3abb: Pull complete
7b7f2a869ba3: Pull complete
a738dc13db02: Pull complete
Digest: sha256:2eaad84c3e70b354626e2c993ddd03b791ce965c846a2e4d226d3b8ede0e100b
Status: Downloaded newer image for ghcr.io/seji64/snidust:main
1e8c4006536e600698bd69f71ffb77b2808b5f0cc3129abfcb5e5e730b5ebc4c

root@dns:~# docker ps -a
CONTAINER ID   IMAGE                                   COMMAND                  CREATED          STATUS                      PORTS     NAMES
1e8c4006536e   ghcr.io/seji64/snidust:main             "/usr/bin/tini -- /e…"   32 seconds ago   Exited (1) 10 seconds ago             musing_sutherland

root@dns:~# docker logs 1e8c4006536e
Dnsdist webserver password not set - generating one
Generated WebServer Password: Xqcvau6bgscg
Dnsdist webserver api key not set - generating one
Generated WebServer API Key: StFaJtnlaM09WrfrrC1OWfgV0FuFHO9y
Starting DNSDist...
Starting sniproxy
[INFO] Using PUBLIC_VPS_IP - Point your DNS settings to this address
[SniDust] Loading Blocklist...
[SniDust] Adding domain myip.is to list
[SniDust] Adding domain ifconfig.co to list
[SniDust] Adding domain akadns.net to list
[SniDust] Adding domain akam.net to list
[SniDust] Adding domain akamai.com to list
[SniDust] Adding domain akamai.net to list
[SniDust] Adding domain akamaiedge.net to list
[SniDust] Adding domain akamaihd.net to list
[SniDust] Adding domain akamaistream.net to list
[SniDust] Adding domain akamaitech.net to list
[SniDust] Adding domain akamaitechnologies.com to list
[SniDust] Adding domain akamaitechnologies.fr to list
[SniDust] Adding domain akamaized.net to list
[SniDust] Adding domain edgekey.net to list
[SniDust] Adding domain edgesuite.net to list
[SniDust] Adding domain srip.net to list
[SniDust] Adding domain footprint.net to list
[SniDust] Adding domain level3.net to list
[SniDust] Adding domain llnwd.net to list
[SniDust] Adding domain edgecastcdn.net to list
[SniDust] Adding domain cloudfront.net to list
[SniDust] Adding domain zattoohds-a.akamaihd.net to list
[SniDust] Adding domain zathdslive-a.akamaihd.net to list
[SniDust] Adding domain zahs.tv to list
[SniDust] Adding domain zatsslive-a.akamaihd.net to list
[SniDust] Adding domain chromecast-receiver.zattoo.com to list
[SniDust] Adding domain box30030.wemfbox.ch to list
[SniDust] Adding domain zattoo.wemfbox.ch to list
[SniDust] Adding domain zatsslive-a.akamaihd.net to list
[SniDust] Adding domain netflix.com to list
[SniDust] Adding domain netflix.de to list
[SniDust] Adding domain nflximg.net to list
[SniDust] Adding domain nflximg.com to list
[SniDust] Adding domain nflxvideo.net to list
[SniDust] Adding domain netflix.net to list
[SniDust] Adding domain nflximg.net to list
[SniDust] Adding domain nflxvideo.net to list
[SniDust] Adding domain nflxso.net to list
[SniDust] Adding domain nflxext.com to list
[SniDust] Adding domain hulu.com to list
[SniDust] Adding domain huluim.com to list
[SniDust] Adding domain hbonow.com to list
[SniDust] Adding domain hbogo.com to list
[SniDust] Adding domain hbo.com to list
[SniDust] Adding domain amazon.com to list
[SniDust] Adding domain amazon.co.uk to list
[SniDust] Adding domain amazonvideo.com to list
[SniDust] Adding domain crackle.com to list
[SniDust] Adding domain pandora.com to list
[SniDust] Adding domain vudu.com to list
[SniDust] Adding domain blinkbox.com to list
[SniDust] Adding domain abc.com to list
[SniDust] Adding domain fox.com to list
[SniDust] Adding domain theplatform.com to list
[SniDust] Adding domain nbc.com to list
[SniDust] Adding domain nbcuni.com to list
[SniDust] Adding domain ip2location.com to list
[SniDust] Adding domain pbs.org to list
[SniDust] Adding domain warnerbros.com to list
[SniDust] Adding domain southpark.cc.com to list
[SniDust] Adding domain cbs.com to list
[SniDust] Adding domain brightcove.com to list
[SniDust] Adding domain cwtv.com to list
[SniDust] Adding domain spike.com to list
[SniDust] Adding domain go.com to list
[SniDust] Adding domain mtv.com to list
[SniDust] Adding domain mtvnservices.com to list
[SniDust] Adding domain playstation.net to list
[SniDust] Adding domain uplynk.com to list
[SniDust] Adding domain maxmind.com to list
[SniDust] Adding domain disney.com to list
[SniDust] Adding domain disneyjunior.com to list
[SniDust] Adding domain xboxlive.com to list
[SniDust] Adding domain lovefilm.com to list
[SniDust] Adding domain turner.com to list
[SniDust] Adding domain amctv.com to list
[SniDust] Adding domain sho.com to list
[SniDust] Adding domain mog.com to list
[SniDust] Adding domain wdtvlive.com to list
[SniDust] Adding domain beinsportsconnect.tv to list
[SniDust] Adding domain beinsportsconnect.net to list
[SniDust] Adding domain fig.bbc.co.uk to list
[SniDust] Adding domain open.live.bbc.co.uk to list
[SniDust] Adding domain bbc.co.uk to list
[SniDust] Adding domain crunchyroll.com to list
[SniDust] Adding domain omtrdc.net to list
[SniDust] Adding domain sling.com to list
[SniDust] Adding domain movetv.com to list
[SniDust] Adding domain optus.com.au to list
[SniDust] Adding domain optusnet.com.au to list
[SniDust] Adding domain wilmaa.com to list
[SniDust] Adding domain wilmaa.wemfbox.ch to list
[SniDust] Adding domain wilm-ssl.wemfbox.ch to list
[SniDust] Adding domain user.wilmaa.tvbackbone.com to list
[SniDust] Adding domain multiscreencache.tvbackbone.com to list
[SniDust] Adding domain teleboy.ch to list
[SniDust] Adding domain wilmaa.customers.cdn.iptv.ch to list
[SniDust] Adding domain teleboy.customers.cdn.iptv.ch to list
[SniDust] Adding domain cdn.iptv.ch to list
[SniDust] Adding domain srgssr.ch to list
[SniDust] Adding domain cdn.rts.ch to list
[SniDust] Adding domain srgsnitch.herokuapp.com to list
[SniDust] Adding domain srg.live.ott.irdeto.com to list
[SniDust] Adding domain molotov.tv to list
[SniDust] Complete!
Fatal Lua error: [string "chunk"]:9: attempt to call global 'setACLFromFile' (a nil value)

Spoof all domains

Hi
I am trying to configure Snidust
Want to watch streams from India
I am not very comfortable with Docker, I tried to work with docker compose but kept getting error, is there a way to edit a file and spoof all domains ?
Also can we use dynamic IP address ?
Thanks for your help

SniDust + Adguard Home

I use Adguard Home on my VPS because I need DOH on the client. Can I use SniDust + Adguard Home on one VPS?
For example:

create a client in Adguard Home with the name "redirect" (then the iphone client will have doh configured https://myvps/dns-query/redirect ) and specify the dns server 127.0.0.1:5300 for it
SniDust listens on port 5300 and accepts a dns request from Adguard Home
the upstream DNS server for SniDust is specified on 127.0.0.1:53
Adguard Home accepts these requests from SniDust and sends them to its upstream DNS servers specified in Adguard Home by default.

bypass Great Firewall

How can I circumvent the Great Firewall set up by my government to access restricted websites such as YouTube or Netflix? With the current settings, I'm unable to do so. However, I can access sites that are prohibited by entities other than my government. is it the solution dns over tls or something like that? how can i enable this?

Odd domains in lookup in docker log - Large bandwidth useage

I think my VPS is using an immense amount of bandwidth. I used 125GB yesterday according to VPS dashboard.

I see a lot of unique queries in the log that make no sense, so I am leaning toward the ACL control not being setup correctly/working correctly/etc.

> 2024-04-01T16:58:09Z ERR dial tcp: lookup apololonios.pblogs.gr on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:58:10Z ERR dial tcp 52.185.229.130:80: connect: connection refused service=http
> 2024-04-01T16:58:11Z ERR dial tcp 91.232.156.222:8181: connect: connection refused service=http
> 2024-04-01T16:58:15Z ERR EOF service=http
> 2024-04-01T16:58:34Z ERR dial tcp: lookup sharf-prestij.ru on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:58:45Z ERR EOF service=http
> 2024-04-01T16:58:51Z ERR dial tcp: lookup sunarchives.com on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:58:52Z ERR dial tcp: lookup sunarchives.com on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:58:53Z ERR dial tcp: lookup sunarchives.com on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:58:53Z ERR dial tcp: lookup sunarchives.com on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:58:54Z ??? http: URL query contains semicolon, which is no longer a supported separator; parts of the query may be stripped when parsed; see golang.org/issue/25192
> 2024-04-01T16:58:58Z ERR dial tcp: lookup photobank.unescobkk.org on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:59:08Z ERR dial tcp: lookup letpocumi.tk on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:59:11Z ERR read tcp 172.17.0.2:33394->47.110.12.150:80: read: connection reset by peer service=http
> 2024-04-01T16:59:11Z ERR dial tcp: lookup www.sportspictorial.com on 8.8.8.8:53: server misbehaving service=http
> 2024-04-01T16:59:12Z ERR dial tcp: lookup www.sportspictorial.com on 8.8.8.8:53: server misbehaving service=http
> 2024-04-01T16:59:13Z ERR dial tcp: lookup www.sportspictorial.com on 8.8.8.8:53: server misbehaving service=http
> 2024-04-01T16:59:13Z ERR dial tcp: lookup www.sportspictorial.com on 8.8.8.8:53: server misbehaving service=http
> 2024-04-01T16:59:17Z ERR dial tcp 200.58.110.231:80: connect: connection timed out service=http
> 2024-04-01T16:59:25Z ERR dial tcp: lookup new.fips.ruhttps on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:59:27Z ERR dial tcp: lookup 17.ivisathanasiadou.gr on 1.1.1.1:53: no such host service=http
> 2024-04-01T16:59:30Z ERR EOF service=http
> 2024-04-01T16:59:35Z ERR dial tcp 95.131.136.68:80: connect: connection timed out service=http
> 2024-04-01T16:59:36Z ERR dial tcp: lookup www.extendyourfashion.com on 8.8.8.8:53: server misbehaving service=http
> 2024-04-01T16:59:39Z ERR dial tcp 195.225.104.228:80: connect: connection timed out service=http
> 2024-04-01T16:59:55Z ERR EOF service=http
> 2024-04-01T16:59:58Z ERR dial tcp: lookup lighburgbelt.ga on 1.1.1.1:53: no such host service=http
> 2024-04-01T17:00:00Z ERR dial tcp: lookup bardinfamily.com on 1.1.1.1:53: no such host service=http
> 2024-04-01T17:00:00Z ERR dial tcp 66.232.147.249:80: connect: connection timed out service=http
>

relevant acl part of the docker log

[INFO] [SniDust] Adding domain y3o.tv to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Complete! ***
Added downstream server 8.8.8.8:853
Added downstream server 8.8.4.4:853
Added downstream server 1.1.1.1:443
Added downstream server 1.0.0.1:443
Listening on 0.0.0.0:5300
ACL allowing queries from: HOME-IP-REMOVED/32, 127.0.0.1/32
Console ACL allowing connections from: 127.0.0.0/8, ::1/128
Marking downstream cloudflare-dns (1.1.1.1:443) as 'up'
Marking downstream cloudflare-dns (1.0.0.1:443) as 'up'
Marking downstream dns.google (8.8.8.8:853) as 'up'
Marking downstream dns.google (8.8.4.4:853) as 'up'

I had setup to spoof all domains, since the intent on my end is to only send a handful of domains (MLB related) to this VPS in the first place (being forwarded from a local running pi-hole instance). Please let me know if you would like any additional information for this.

Rate limit DNS request

What settings do I have to set to prevent the DNS server from being abused for DDOS attacks?

Random crashes

What other logs should I provide?

cat docker-compose.yml
version: '3.3'
services:
    snidust:
        container_name: snidust
        image: 'ghcr.io/seji64/snidust:main'
        environment:
            - ALLOWED_CLIENTS=0.0.0.0/0
            - EXTERNAL_IP=SERVER IP
            - SPOOF_ALL_DOMAINS=false
        ports:
            - 443:443
            - 80:80
            - 53:5300/udp
        volumes:
            - '~/SniDust/99-custom.lst:/etc/snidust/domains.d/99-custom.lst:ro'

docker-compose logs snidust
Attaching to snidust
snidust    | [INFO] Dnsdist webserver password not set - generating one
snidust    | [INFO] Generated WebServer Password: Dm55GGhTGs0c
snidust    | [INFO] Dnsdist webserver api key not set - generating one
snidust    | [INFO] Generated WebServer API Key: EKBzYs_9rUv6ZE93EIRB9bokUJNVaF_Y
snidust    | [INFO] Generating ACL...
snidust    | [INFO] Generating DNSDist Configs...
snidust    | [INFO] Starting DNSDist...
snidust    | [INFO] Starting sniproxy
snidust    | [INFO] Using SERVER IP - Point your DNS settings to this address
snidust    | 2024-02-16T23:37:11Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | dnsdist 1.8.2 comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2
snidust    | [INFO] [SniDust] *** Loading Domain Lists... ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/00-debug.lst***
snidust    | [INFO] [SniDust] Adding domain myip.is to list
snidust    | [INFO] [SniDust] Adding domain ifconfig.co to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/01-cdn_akamai.lst***
snidust    | [INFO] [SniDust] Adding domain akadns.net to list
snidust    | [INFO] [SniDust] Adding domain akam.net to list
snidust    | [INFO] [SniDust] Adding domain akamai.com to list
snidust    | [INFO] [SniDust] Adding domain akamai.net to list
snidust    | [INFO] [SniDust] Adding domain akamaiedge.net to list
snidust    | [INFO] [SniDust] Adding domain akamaihd.net to list
snidust    | [INFO] [SniDust] Adding domain akamaistream.net to list
snidust    | [INFO] [SniDust] Adding domain akamaitech.net to list
snidust    | [INFO] [SniDust] Adding domain akamaitechnologies.com to list
snidust    | [INFO] [SniDust] Adding domain akamaitechnologies.fr to list
snidust    | [INFO] [SniDust] Adding domain akamaized.net to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/02-amazon.lst***
snidust    | [INFO] [SniDust] Adding domain amazon.com to list
snidust    | [INFO] [SniDust] Adding domain amazon.co.uk to list
snidust    | [INFO] [SniDust] Adding domain amazonvideo.com to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/03-hbo.lst***
snidust    | [INFO] [SniDust] Adding domain hbonow.com to list
snidust    | [INFO] [SniDust] Adding domain hbogo.com to list
snidust    | [INFO] [SniDust] Adding domain hbo.com to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/04-hulu.lst***
snidust    | [INFO] [SniDust] Adding domain hulu.com to list
snidust    | [INFO] [SniDust] Adding domain huluim.com to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/05-netflix.lst***
snidust    | [INFO] [SniDust] Adding domain netflix.com to list
snidust    | [INFO] [SniDust] Adding domain netflix.de to list
snidust    | [INFO] [SniDust] Adding domain nflximg.net to list
snidust    | [INFO] [SniDust] Adding domain nflximg.com to list
snidust    | [INFO] [SniDust] Adding domain nflxvideo.net to list
snidust    | [INFO] [SniDust] Adding domain netflix.net to list
snidust    | [INFO] [SniDust] Adding domain nflximg.net to list
snidust    | [INFO] [SniDust] Adding domain nflxvideo.net to list
snidust    | [INFO] [SniDust] Adding domain nflxso.net to list
snidust    | [INFO] [SniDust] Adding domain nflxext.com to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/06-molotov_tv.lst***
snidust    | [INFO] [SniDust] Adding domain molotov.tv to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/07-srf_ch.lst***
snidust    | [INFO] [SniDust] Adding domain srgssr.ch to list
snidust    | [INFO] [SniDust] Adding domain cdn.rts.ch to list
snidust    | [INFO] [SniDust] Adding domain srgsnitch.herokuapp.com to list
snidust    | [INFO] [SniDust] Adding domain srg.live.ott.irdeto.com to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/08-wilmaa.lst***
snidust    | [INFO] [SniDust] Adding domain wilmaa.com to list
snidust    | [INFO] [SniDust] Adding domain wilmaa.wemfbox.ch to list
snidust    | [INFO] [SniDust] Adding domain wilm-ssl.wemfbox.ch to list
snidust    | [INFO] [SniDust] Adding domain user.wilmaa.tvbackbone.com to list
snidust    | [INFO] [SniDust] Adding domain multiscreencache.tvbackbone.com to list
snidust    | [INFO] [SniDust] Adding domain teleboy.ch to list
snidust    | [INFO] [SniDust] Adding domain wilmaa.customers.cdn.iptv.ch to list
snidust    | [INFO] [SniDust] Adding domain teleboy.customers.cdn.iptv.ch to list
snidust    | [INFO] [SniDust] Adding domain cdn.iptv.ch to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/09-zattoo.lst***
snidust    | [INFO] [SniDust] Adding domain zattoohds-a.akamaihd.net to list
snidust    | [INFO] [SniDust] Adding domain zathdslive-a.akamaihd.net to list
snidust    | [INFO] [SniDust] Adding domain zahs.tv to list
snidust    | [INFO] [SniDust] Adding domain zatsslive-a.akamaihd.net to list
snidust    | [INFO] [SniDust] Adding domain chromecast-receiver.zattoo.com to list
snidust    | [INFO] [SniDust] Adding domain box30030.wemfbox.ch to list
snidust    | [INFO] [SniDust] Adding domain zattoo.wemfbox.ch to list
snidust    | [INFO] [SniDust] Adding domain zatsslive-a.akamaihd.net to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/10-yallo.lst***
snidust    | [INFO] [SniDust] Adding domain y3o.tv to list
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/99-custom.lst***
snidust    | [INFO] [SniDust] Adding domain msn.com
snidust    | [INFO] [SniDust] Adding domain microsoft.com
snidust    | [INFO] [SniDust] *** End of Domain List ***
snidust    | [INFO] [SniDust] *** Complete! ***
snidust    | Added downstream server 8.8.8.8:853
snidust    | Added downstream server 8.8.4.4:853
snidust    | Added downstream server 1.1.1.1:443
snidust    | Added downstream server 1.0.0.1:443
snidust    | Listening on 0.0.0.0:5300
snidust    | ACL allowing queries from: 0.0.0.0/0
snidust    | Console ACL allowing connections from: 127.0.0.0/8, ::1/128
snidust    | Marking downstream cloudflare-dns (1.1.1.1:443) as 'up'
snidust    | Marking downstream cloudflare-dns (1.0.0.1:443) as 'up'
snidust    | Marking downstream dns.google (8.8.4.4:853) as 'up'
snidust    | Marking downstream dns.google (8.8.8.8:853) as 'up'
snidust    | Polled security status of version 1.8.2 at startup, no known issues reported: OK
snidust    | /entrypoint.sh: line 55:    19 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-16T23:55:06Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:   308 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T00:05:42Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:   478 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T00:18:36Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:   669 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T00:59:43Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  1323 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T01:34:49Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  1871 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T01:54:59Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  2187 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T02:18:03Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  2539 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T02:44:20Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  2941 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T03:30:11Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  3661 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T03:55:26Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  4049 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T04:16:11Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  4352 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T04:23:06Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  4460 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T05:05:16Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  5110 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T05:56:37Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  5903 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T06:00:29Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  5962 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T06:11:09Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  6128 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T06:27:04Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  6382 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T06:35:18Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  6509 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T06:42:10Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  6624 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T06:46:40Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  6689 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T06:58:54Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  6881 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T07:33:03Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  7417 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T08:02:04Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdsnidust    | /entrypoint.sh: line 55:  7867 Killed                  /usr/local/bin/sniproxy --config "/etc/sniproxy/config.yaml"
snidust    | [WARN] sniproxy crashed with exit code 1. Restarting...
snidust    | 2024-02-17T09:30:36Z INF starting sniproxy. version v2.0.4, commit eecf94a0e8df7eaaaa9946fd21f80e392c9642cdroot@v2343182:~/SniDust#

Streaming service not working even with SPOOF_ALL_DOMAINS

I have a VPS setup in the country I would like to use the service in and SniDust running with SPOOF_ALL_DOMAINS set to true. I'm using the VPS address as my DNS server both on my device and at my router level (just in case) and have confirmed with dig that my VPS is in the answer section. Unfortunately, my home location is still being detected. When I use a paid smart dns service I can access the content without any issues.

Any idea how to start debugging this? Thanks.

not working without any error in logs

Hi i've used snidust before and had been fine with it, now im trying to set it up again but its not working for some reason. heres what i've done:

i've made my docker compose file like so

version: '3.3'
services:
    snidust:
        container_name: snidust
        environment:
            - TZ=Europe/Bayren
            - 'ALLOWED_CLIENTS=127.0.0.1, 0.0.0.0'
            - 'EXTERNAL_IP=server_ip'
            - SPOOF_ALL_DOMAINS=true
        ports:
            - 443:8443
            - 80:8080
            - 53:5300/udp
        image: 'ghcr.io/seji64/snidust:main'

and have fixed port 53 being used following the referenced tutorial
heres my resolv.conf

[Resolve]
# Some examples of DNS servers which may be used for DNS= and FallbackDNS=:
# Cloudflare: 1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com
# Google:     8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google
# Quad9:      9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
DNS=1.1.1.1
#FallbackDNS=
#Domains=
#DNSSEC=no
#DNSOverTLS=no
#MulticastDNS=no
#LLMNR=no
#Cache=no-negative
#CacheFromLocalhost=no
DNSStubListener=no
#DNSStubListenerExtra=
#ReadEtcHosts=yes
#ResolveUnicastSingleLabel=no

i'm not getting any startup errors heres the output of docker logs snidust:

[INFO] [SniDust] Adding domain chromecast-receiver.zattoo.com to list
[INFO] [SniDust] Adding domain box30030.wemfbox.ch to list
[INFO] [SniDust] Adding domain zattoo.wemfbox.ch to list
[INFO] [SniDust] Adding domain zatsslive-a.akamaihd.net to list
[INFO] [SniDust] Adding domain zattoo.com to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/10-yallo.lst***
[INFO] [SniDust] Adding domain y3o.tv to list
[INFO] [SniDust] Adding domain yallo.tv to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Complete! ***
Added downstream server 8.8.8.8:853
Added downstream server 8.8.4.4:853
Added downstream server 1.1.1.1:443
Added downstream server 1.0.0.1:443
Listening on 0.0.0.0:5300
ACL allowing queries from: 0.0.0.0/32, home_ip/32, 127.0.0.1/32
Console ACL allowing connections from: 127.0.0.0/8, ::1/128
Marking downstream cloudflare-dns (1.1.1.1:443) as 'up'
Marking downstream cloudflare-dns (1.0.0.1:443) as 'up'
Marking downstream dns.google (8.8.8.8:853) as 'up'
Marking downstream dns.google (8.8.4.4:853) as 'up'
===================================================================
[INFO] SniDust started => Using server_ip - Point your DNS settings to this address
===================================================================

i've changed my server's ip to server_ip

i've also tried with DNS=127.0.0.1 and yes im trying to make the dns available to the public so im fine with ALLOWED_CLIENTS=127.0.0.1, 0.0.0.0

i've tried on two different servers, and my firewall is off

For allowed clients can I do a subnet?

ALLOWED_CLIENTS: '127.0.0.1, 10.111.123.7'

Can I do ALLOWED_CLIENTS: '158.0.0.0/8' for example?

Thanks!

Needed ports

Are ports 80 and 443 needed for SniDust? I see in the log that there is a webserver running and a password provided, but not sure what that gives you. I'd like to run SWAG on the same server so I can serve up other containers through post 80 and 443.

The only port that needs to be exposed is 53 correct?

Not unblocking

I did configure it on a VPS in India, but all the streaming websites I visited give error ' you seem to be using a unblocker or proxy'
Any solution to this ?
When I use paid Smart DNS proxy, all websites are working.
Please fix it
Regards

Issue with upstream resolver and Custom upstream DNS resolver

Hi @Seji64,

Thanks for sharing this useful project.

I have an issue with the upstream resolvers. I am using your default docker-compose.yml sample code and I am getting:

Marking downstream dns.google (8.8.8.8:853) as 'down'
Marking downstream dns.google (8.8.4.4:853) as 'down'
Marking downstream 1.0.0.1:443 as 'down'
Marking downstream 1.1.1.1:443 as 'down'

and yes, I have checked inside the docker environment to see if it has the Internet connectivity (#17) and everything looks fine but still receiving marking 'down'.

1- What should I do next to solve the problem?
2- Is it possible to use my own custom upstream DNS resolvers instead of default google and cloudflare resolvers? If yes, how?

Thanks a lot in advance

No internet when the VPS server as DNS

Hello,

I think I did right but I don't have internet when I use the server as DNS Server :

[INFO] Dnsdist webserver password not set - generating one
[INFO] Generated WebServer Password:  XXXXXXXXX
[INFO] Dnsdist webserver api key not set - generating one
[INFO] Generated WebServer API Key:  XXXXXXXXX
[INFO] Generating ACL...
[INFO] Generating DNSDist Config...
[INFO] Starting DNSDist...
[INFO] Starting nginx..
[INFO] Using VPS IP SERVER - Point your DNS settings to this address
dnsdist 1.8.2 comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2
[INFO] [SniDust] *** Loading Domain Lists... ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/00-debug.lst***
[INFO] [SniDust] Adding domain ifconfig.co to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/01-cdn_akamai.lst***
[INFO] [SniDust] Adding domain akadns.net to list
[INFO] [SniDust] Adding domain akam.net to list
[INFO] [SniDust] Adding domain akamai.com to list
[INFO] [SniDust] Adding domain akamai.net to list
[INFO] [SniDust] Adding domain akamaiedge.net to list
[INFO] [SniDust] Adding domain akamaihd.net to list
[INFO] [SniDust] Adding domain akamaistream.net to list
[INFO] [SniDust] Adding domain akamaitech.net to list
[INFO] [SniDust] Adding domain akamaitechnologies.com to list
[INFO] [SniDust] Adding domain akamaitechnologies.fr to list
[INFO] [SniDust] Adding domain akamaized.net to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/02-amazon.lst***
[INFO] [SniDust] Adding domain amazon.com to list
[INFO] [SniDust] Adding domain amazon.co.uk to list
[INFO] [SniDust] Adding domain amazonvideo.com to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/03-hbo.lst***
[INFO] [SniDust] Adding domain hbonow.com to list
[INFO] [SniDust] Adding domain hbogo.com to list
[INFO] [SniDust] Adding domain hbo.com to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/04-hulu.lst***
[INFO] [SniDust] Adding domain hulu.com to list
[INFO] [SniDust] Adding domain huluim.com to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/05-netflix.lst***
[INFO] [SniDust] Adding domain netflix.com to list
[INFO] [SniDust] Adding domain netflix.de to list
[INFO] [SniDust] Adding domain nflximg.net to list
[INFO] [SniDust] Adding domain nflximg.com to list
[INFO] [SniDust] Adding domain nflxvideo.net to list
[INFO] [SniDust] Adding domain netflix.net to list
[INFO] [SniDust] Adding domain nflximg.net to list
[INFO] [SniDust] Adding domain nflxvideo.net to list
[INFO] [SniDust] Adding domain nflxso.net to list
[INFO] [SniDust] Adding domain nflxext.com to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/06-molotov_tv.lst***
[INFO] [SniDust] Adding domain molotov.tv to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/07-srf_ch.lst***
[INFO] [SniDust] Adding domain srgssr.ch to list
[INFO] [SniDust] Adding domain cdn.rts.ch to list
[INFO] [SniDust] Adding domain srgsnitch.herokuapp.com to list
[INFO] [SniDust] Adding domain srg.live.ott.irdeto.com to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/09-zattoo.lst***
[INFO] [SniDust] Adding domain zattoohds-a.akamaihd.net to list
[INFO] [SniDust] Adding domain zathdslive-a.akamaihd.net to list
[INFO] [SniDust] Adding domain zahs.tv to list
[INFO] [SniDust] Adding domain zatsslive-a.akamaihd.net to list
[INFO] [SniDust] Adding domain chromecast-receiver.zattoo.com to list
[INFO] [SniDust] Adding domain box30030.wemfbox.ch to list
[INFO] [SniDust] Adding domain zattoo.wemfbox.ch to list
[INFO] [SniDust] Adding domain zatsslive-a.akamaihd.net to list
[INFO] [SniDust] Adding domain zattoo.com to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/10-yallo.lst***
[INFO] [SniDust] Adding domain y3o.tv to list
[INFO] [SniDust] Adding domain yallo.tv to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/99-custom.lst***
[INFO] [SniDust] Adding domain tf1.fr to list
[INFO] [SniDust] Adding domain 6play.fr to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Complete! ***
Added downstream server 8.8.8.8:853
Added downstream server 8.8.4.4:853
Added downstream server 1.1.1.1:443
Added downstream server 1.0.0.1:443
Listening on 0.0.0.0:5300
ACL allowing queries from: 0.0.0.0/0
Console ACL allowing connections from: 127.0.0.0/8, ::1/128
Marking downstream cloudflare-dns (1.1.1.1:443) as 'up'
Marking downstream cloudflare-dns (1.0.0.1:443) as 'up'
Marking downstream dns.google (8.8.8.8:853) as 'up'
Marking downstream dns.google (8.8.4.4:853) as 'up'
Polled security status of version 1.8.2 at startup, no known issues reported: OK```

In my container I have internet. Do I have to open ports or something?

I use a free tier VPS Oracle cloud.

Thank you!

Unfortunately this service is unavailable if you are using a vpn

Hi
I'm trying to reach Setanta sports Moldova with Snidust. Snidust works well and IP reported back is my VPS in Moldova. The DNS server is also in Moldova.
So I went on and added all the domains called (which gave me a nice long list see attached) but the only reply i get from the site is "Unfortunately this service is unavailable if you are using a vpn"
The things is Setanta works well with a DNS proxy from one these commercial ones (tested with a free trial). I switched VPS to the same hosting company but no luck.

What have i missed or what could tweeked to stay under the radar? Has anyone had any issue like this with another service?

Alex

Modular site lists

Rather than one large list that would nee to be constantly updated. It would be great it if the site lists can be done as separate files for each services (ex. Netflix - all domains used for streaming Netflix, Disney+ - all required domains). It would allow for people to keep everything more organized and remove what they don't need.

A reload option for the list would be great too, something that does not require me to restart the docker container.

Can I use it for all domains queried against it?

I am helping some friends in Cuba to bypass the cuban crappy internet restrictions, can I let it proxy all domains that go against it?

Website sometime not loading

I encounter an issue where certain websites, such as Netflix, fail to load. While I can perform DNS lookups, the actual website or content doesn't load. Currently, my workaround involves restarting the Docker every hour. I suspect this might be related to a proxy problem. How can I troubleshoot this? docker logs don't reveal anything noteworthy.

Some domain cannot be resolved

Dear sir,

When access some websites, even though I added the domain to the list. It just does not work

Request URL: https://sgn-fpt-002-ca204.vieon.vn/307f592e6d9c319ee920edf96f033500/1661467072634/ott-vod-2022/vod/2022/08/08/da66241f-fe1f-4723-8fed-a04c0915af51/media-video-avc1-1.mp4
Request Method: GET
Status Code: 404
Remote Address: 103.82.27.145:443
Referrer Policy: no-referrer-when-downgrade

Can you tell me how can I debug to find out what happened?

[SniDust] Adding domain sgn-fpt-002-ca204.vieon.vn to list
[SniDust] Adding domain sgn-fpt-002.vieon.vn to list
[SniDust] Adding domain hni-fpt-002.vieon.vn to list
[SniDust] Adding domain sentry.vieon.vn to list
[SniDust] Adding domain vieon-tracking.vieon.vn to list
[SniDust] Complete!
Added downstream server 1.1.1.1:53
Added downstream server 1.0.0.1:53
Added downstream server 8.8.8.8:53
Added downstream server 8.8.4.4:53
Listening on 0.0.0.0:5300
dnsdist 1.7.1 comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2
ACL allowing queries from: 127.0.0.1/32, 173.17.67.109/32
Console ACL allowing connections from: 127.0.0.0/8, ::1/128
Webserver launched on 127.0.0.1:8083
Marking downstream 8.8.4.4:53 as 'up'
Marking downstream 1.0.0.1:53 as 'up'
Marking downstream 8.8.8.8:53 as 'up'
Marking downstream 1.1.1.1:53 as 'up'
Polled security status of version 1.7.1 at startup, no known issues reported: OK
Marking downstream 1.1.1.1:53 as 'down'
Marking downstream 1.0.0.1:53 as 'down'
Marking downstream 8.8.8.8:53 as 'down'
Marking downstream 8.8.4.4:53 as 'down'
Marking downstream 1.1.1.1:53 as 'up'
Marking downstream 1.0.0.1:53 as 'up'
Marking downstream 8.8.4.4:53 as 'up'
Marking downstream 8.8.8.8:53 as 'up'
Marking downstream 1.1.1.1:53 as 'down'
Marking downstream 1.0.0.1:53 as 'down'
Marking downstream 8.8.8.8:53 as 'down'
Marking downstream 8.8.4.4:53 as 'down'
Marking downstream 1.0.0.1:53 as 'up'
Marking downstream 1.1.1.1:53 as 'up'
Marking downstream 8.8.8.8:53 as 'up'
Marking downstream 8.8.4.4:53 as 'up'

huge disk usage by nginx logs

Since successfully moving to the new image, I am having rapid and huge data use by the docker container. the below can be seen just a few minutes apart. This expands until the server itself crashes. Is there a setting I should be using to stop this occuring, is this something others are seeing?

presentprolondon@instance:~$ sudo du -h /var/lib | sort -rh | head -n 20
9.6G    /var/lib
9.5G    /var/lib/docker/overlay2
9.5G    /var/lib/docker
9.2G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7
4.7G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged
4.6G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/var/log/nginx
4.6G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/var/log
4.6G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/var
4.6G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff/var/log/nginx
4.6G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff/var/log
4.6G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff/var
4.6G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff
140M    /var/lib/apt/lists
140M    /var/lib/apt
100M    /var/lib/docker/overlay2/d930f8a82147e55e017b5db9a353d295100028915dc9675079a7b9c8ce13e38d/diff
100M    /var/lib/docker/overlay2/d930f8a82147e55e017b5db9a353d295100028915dc9675079a7b9c8ce13e38d
100M    /var/lib/docker/overlay2/097f32cada0b2d40fa66a9b98f0dc09e0e9f1184968a63773ba3e0ffa5bcfccb/diff
100M    /var/lib/docker/overlay2/097f32cada0b2d40fa66a9b98f0dc09e0e9f1184968a63773ba3e0ffa5bcfccb
98M     /var/lib/docker/overlay2/d930f8a82147e55e017b5db9a353d295100028915dc9675079a7b9c8ce13e38d/diff/usr
98M     /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/usr

presentprolondon@instance:~$ sudo du -h /var/lib | sort -rh | head -n 20
11G     /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7
11G     /var/lib/docker/overlay2
11G     /var/lib/docker
11G     /var/lib
5.1G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged
5.0G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/var/log/nginx
5.0G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/var/log
5.0G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/var
5.0G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff/var/log/nginx
5.0G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff/var/log
5.0G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff/var
5.0G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff
140M    /var/lib/apt/lists
140M    /var/lib/apt
100M    /var/lib/docker/overlay2/d930f8a82147e55e017b5db9a353d295100028915dc9675079a7b9c8ce13e38d/diff
100M    /var/lib/docker/overlay2/d930f8a82147e55e017b5db9a353d295100028915dc9675079a7b9c8ce13e38d
100M    /var/lib/docker/overlay2/097f32cada0b2d40fa66a9b98f0dc09e0e9f1184968a63773ba3e0ffa5bcfccb/diff
100M    /var/lib/docker/overlay2/097f32cada0b2d40fa66a9b98f0dc09e0e9f1184968a63773ba3e0ffa5bcfccb
98M     /var/lib/docker/overlay2/d930f8a82147e55e017b5db9a353d295100028915dc9675079a7b9c8ce13e38d/diff/usr
98M     /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/usr

presentprolondon@instance:~$ sudo du -h /var/lib | sort -rh | head -n 20
17G     /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7
17G     /var/lib/docker/overlay2
17G     /var/lib/docker
17G     /var/lib
8.2G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged
8.1G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/var/log/nginx
8.1G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/var/log
8.1G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/var
8.1G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff/var/log/nginx
8.1G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff/var/log
8.1G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff/var
8.1G    /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/diff
140M    /var/lib/apt/lists
140M    /var/lib/apt
100M    /var/lib/docker/overlay2/d930f8a82147e55e017b5db9a353d295100028915dc9675079a7b9c8ce13e38d/diff
100M    /var/lib/docker/overlay2/d930f8a82147e55e017b5db9a353d295100028915dc9675079a7b9c8ce13e38d
100M    /var/lib/docker/overlay2/097f32cada0b2d40fa66a9b98f0dc09e0e9f1184968a63773ba3e0ffa5bcfccb/diff
100M    /var/lib/docker/overlay2/097f32cada0b2d40fa66a9b98f0dc09e0e9f1184968a63773ba3e0ffa5bcfccb
98M     /var/lib/docker/overlay2/d930f8a82147e55e017b5db9a353d295100028915dc9675079a7b9c8ce13e38d/diff/usr
98M     /var/lib/docker/overlay2/8ec469dd85adf61d46d177a3fb57dd6ece1cc3517936ceb2c3c56cbb846522e7/merged/usr

Allow all clients

Hey,
how to allow all clients?
I tried 0.0.0.0 but doesn't work.
Also there is a small typo in the Readme:
docke logs snidust

Localhost socks5

hi~

how do i make sniproxy use localhost socks5 proxy for http/s upstream? it seems like docker cant access local proxy.

is there any workaround to get sniproxy use socks5?

PiHole + SniDust

I have an OCI server and would love to have SniDust and PiHole on the same server. is there any way this can be done?

Container is killed automatically.

I start docker container with snidust like it was adviced

docker run -d --name snidust -e ALLOWED_CLIENTS="127.0.0.1, ****" -e EXTERNAL_IP=**** -p 443:443 -p 80:80 -p 53:5300/udp ghcr.io/seji64/snidust:main

After some time container is automatically killed

Logs show something like this:

...
[SniDust] *** End of Domain List ***
[SniDust] *** Complete! ***
Added downstream server 8.8.8.8:853
Added downstream server 8.8.4.4:853
Added downstream server 1.1.1.1:443
Added downstream server 1.0.0.1:443
time=2023-03-26T18:01:25.751Z level=WARN msg="Domain list (--domainListPath) is not specified, routing ALL domains through the SNI proxy"
time=2023-03-26T18:01:25.753Z level=INFO msg="server info" public_ip=****
Listening on 0.0.0.0:5300
dnsdist 1.7.1 comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2
ACL allowing queries from: ****/32, 127.0.0.1/32
Console ACL allowing connections from: 127.0.0.0/8, ::1/128
Webserver launched on 127.0.0.1:8083
Marking downstream dns.google (8.8.4.4:853) as 'up'
Marking downstream dns.google (8.8.8.8:853) as 'up'
Marking downstream 1.1.1.1:443 as 'up'
Marking downstream 1.0.0.1:443 as 'up'
Polled security status of version 1.7.1 at startup, no known issues reported: OK
time=2023-03-26T18:01:27.398Z level=INFO msg="Certificate was not provided, using a self signed cert"
time=2023-03-26T18:01:27.401Z level=INFO msg="Started UDP DNS" service=dns host=0.0.0.0 port=5353
time=2023-03-26T18:04:43.430Z level=INFO msg="rejected request" service=http ip=185.225.74.42:60284
time=2023-03-26T18:04:43.432Z level=WARN msg="someone is requesting HTTP to sniproxy itself, ignoring..." service=http
time=2023-03-26T18:06:00.715Z level=INFO msg="rejected request" service=http ip=77.247.108.121:37254
time=2023-03-26T18:06:00.716Z level=INFO msg=REQ service=http method=GET host=query.cleaning url=http://query.cleaning/v4/checker.php
time=2023-03-26T18:06:00.749Z level=INFO msg="http response" service=http status_code="200 OK"
time=2023-03-26T18:08:02.329Z level=INFO msg="rejected request" service=http ip=54.38.193.111:54199
time=2023-03-26T18:08:02.331Z level=INFO msg=REQ service=http method=GET host=www.yandex.com url="https://www.yandex.com/search/?text=111.224.212.57%3A8089"
time=2023-03-26T18:08:02.478Z level=INFO msg="http response" service=http status_code="302 Moved temporarily"
time=2023-03-26T18:08:02.550Z level=INFO msg="rejected request" service=http ip=54.38.193.111:54254
time=2023-03-26T18:08:02.551Z level=INFO msg=REQ service=http method=GET host=www.yandex.com url="https://www.yandex.com/search/?text=111.224.212.57%3A8089&lr=144942&redircnt=1679854082.1"

...

time=2023-03-26T22:26:13.493Z level=INFO msg=REQ service=http method=GET host=www.xxskszx.com:80 url=http://www.xxskszx.com:80/
time=2023-03-26T22:26:13.495Z level=INFO msg="rejected request" service=http ip=135.181.112.132:57308
time=2023-03-26T22:26:13.495Z level=INFO msg=REQ service=http method=GET host=www.xxskszx.com:80 url=http://www.xxskszx.com:80/
time=2023-03-26T22:26:13.497Z level=INFO msg="rejected request" service=http ip=135.181.112.132:39810
time=2023-03-26T22:26:13.498Z level=INFO msg=REQ service=http method=GET host=www.xxskszx.com:80 url=http://www.xxskszx.com:80/
time=2023-03-26T22:26:13.499Z level=INFO msg="rejected request" service=http ip=135.181.112.132:57966
time=2023-03-26T22:26:13.499Z level=INFO msg=REQ service=http method=GET host=www.xxskszx.com:80 url=http://www.xxskszx.com:80/
time=2023-03-26T22:26:13.502Z level=INFO msg="rejected request" service=http ip=135.181.112.132:36876
time=2023-03-26T22:26:13.503Z level=INFO msg=REQ service=http method=GET host=www.xxskszx.com:80 url=http://www.xxskszx.com:80/
time=2023-03-26T22:26:13.507Z level=INFO msg="rejected request" service=http ip=135.181.112.132:52746
time=2023-03-26T22:26:13.507Z level=INFO msg=REQ service=http method=GET host=www.xxskszx.com:80 url=http://www.xxskszx.com:80/
time=2023-03-26T22:26:13.511Z level=INFO msg="rejected request" service=http ip=135.181.112.132:54280
time=2023-03-26T22:26:13.511Z level=INFO msg=REQ service=http method=GET host=www.xxskszx.com:80 url=http://www.xxskszx.com:80/
time=2023-03-26T22:25:54.427Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:26:13.515Z level=ERROR msg= service=http err="read tcp 172.17.0.3:41244->94.154.114.238:80: read: connection reset by peer"
time=2023-03-26T22:26:13.518Z level=ERROR msg= service=http err="read tcp 172.17.0.3:40516->94.154.114.238:80: read: connection reset by peer"
time=2023-03-26T22:26:13.523Z level=ERROR msg= service=http err="read tcp 172.17.0.3:40518->94.154.114.238:80: read: connection reset by peer"
time=2023-03-26T22:26:13.550Z level=ERROR msg= service=http err="read tcp 172.17.0.3:41248->94.154.114.238:80: read: connection reset by peer"
time=2023-03-26T22:25:54.428Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.428Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.438Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.443Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.443Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.444Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.444Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.445Z level=ERROR msg= service=http err="read tcp 172.17.0.3:52790->94.154.114.238:80: read: connection reset by peer"
time=2023-03-26T22:25:54.578Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:58.536Z level=INFO msg="rejected request" service=http ip=135.181.112.132:58732
time=2023-03-26T22:26:13.575Z level=INFO msg=REQ service=http method=GET host=www.xxskszx.com:80 url=http://www.xxskszx.com:80/
time=2023-03-26T22:25:58.536Z level=INFO msg="rejected request" service=http ip=135.181.112.132:47078
time=2023-03-26T22:26:13.582Z level=INFO msg=REQ service=http method=GET host=www.xxskszx.com:80 url=http://www.xxskszx.com:80/
time=2023-03-26T22:25:58.539Z level=INFO msg="rejected request" service=http ip=135.181.112.132:54416
time=2023-03-26T22:25:58.541Z level=INFO msg="rejected request" service=http ip=135.181.112.132:35532
time=2023-03-26T22:25:58.541Z level=INFO msg="rejected request" service=http ip=135.181.112.132:60708
time=2023-03-26T22:25:58.543Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:58.581Z level=INFO msg="rejected request" service=http ip=135.181.112.132:54798
time=2023-03-26T22:25:58.584Z level=INFO msg="rejected request" service=http ip=135.181.112.132:53496
time=2023-03-26T22:25:54.400Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.403Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.422Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:54.543Z level=ERROR msg= service=http err="read tcp 172.17.0.3:51816->94.154.114.238:80: read: connection reset by peer"
time=2023-03-26T22:25:54.547Z level=ERROR msg= service=http err="read tcp 172.17.0.3:51814->94.154.114.238:80: read: connection reset by peer"
time=2023-03-26T22:25:58.605Z level=INFO msg="rejected request" service=http ip=135.181.112.132:43550
time=2023-03-26T22:25:58.607Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:58.608Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:58.612Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:58.613Z level=ERROR msg= service=http err="dial tcp 94.154.114.238:80: i/o timeout"
time=2023-03-26T22:25:58.613Z level=ERROR msg= service=http err="read tcp 172.17.0.3:42176->94.154.114.238:80: read: connection reset by peer"
/entrypoint.sh: line 64:    28 Killed                  /usr/local/bin/sniproxy --dnsPort 5353 --publicIP $EXTERNAL_IP

What's with these IP addreses (proxy is not in use)? How can I make it more robust?

DNS Server no respond

I deployed SniDust on my Oracle Cloud instance with the following docker compose:

version: '3.3'
services:
    snidust:
        container_name: snidust
        image: 'ghcr.io/seji64/snidust:main'
        environment:
            - ALLOWED_CLIENTS=0.0.0.0/0
            - EXTERNAL_IP=xx.xx.xx.xx
            - SPOOF_ALL_DOMAINS=true
        ports:
            - '443:443'
            - '80:80'
            - '53:5300/udp'
        restart: unless-stopped
        network_mode: host

The Docker start up properly and the logs looks good so far:

Added downstream server 8.8.8.8:853
Added downstream server 8.8.4.4:853
Added downstream server 1.1.1.1:443
Added downstream server 1.0.0.1:443
Listening on 0.0.0.0:5300
dnsdist 1.7.1 comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2
ACL allowing queries from: 0.0.0.0/0
Console ACL allowing connections from: 127.0.0.0/8, ::1/128
Webserver launched on 127.0.0.1:8083
Marking downstream 1.1.1.1:443 as 'up'
Marking downstream 1.0.0.1:443 as 'up'
Marking downstream dns.google (8.8.4.4:853) as 'up'
Marking downstream dns.google (8.8.8.8:853) as 'up'
time=2023-04-03T13:13:06.010Z level=WARN msg="Domain list (--domainListPath) is not specified, routing ALL domains through the SNI proxy"
time=2023-04-03T13:13:06.010Z level=INFO msg="server info" public_ip=xx.xx.xx.xx
time=2023-04-03T13:13:06.010Z level=INFO msg="Certificate was not provided, using a self signed cert"
time=2023-04-03T13:13:06.010Z level=INFO msg="Started UDP DNS" service=dns host=0.0.0.0 port=5353
Polled security status of version 1.7.1 at startup, no known issues reported: OK

But there is no repond from the SniDust DNS Server. What I'm doing wrong?

Cant Pull docker image / Access Denied

Hello,
i had your wonderful docker running and working like a charm.

But i had to reinstall vps and now i cant pull snidust docker

Error response from daemon: pull access denied for snidust, repository does not exist or may require 'docker login': denied: requested access to the resource is denied

Whats going wrong?

Thanks Christoph

Could not automatically determine public IPv4

Hi there, I try to install the SniDust on an arm64 Ubuntu.

I get following errors when running the container:
Error while retrieving the security update for version dnsdist-1.8.0: Unable to get a valid Security Status update
Failed to retrieve security status update for '1.8.0' on dnsdist-1.8.0.security-status.secpoll.powerdns.com.
2023-06-29T11:07:26Z ERR Could not automatically determine public IPv4. you should provide it manually using --publicIPv4
2023-06-29T11:07:26Z ERR Could not automatically determine public IPv6. you should provide it manually using --publicIPv6

Config:
docker run --name snidust -e ALLOWED_CLIENTS="127.0.0.1, PUBIP" -e EXTERNAL_IP=VPSIP -p 443:443 -p 80:80 -p 53:5300/udp -v ~/99-custom.lst:/etc/snidust/domains.d/99-custom.lst:ro ghcr.io/seji64/snidust:main

The VPSIP is specified but why does it not get passed through?

Downstream marked as down

Hi!

First of all, thank you for your work! I think it's a very smart solution.

I'm having a problem. I'm running SniDust in my Raspberry Pi and I start it with this command:

docker run -d --name snidust -e ALLOWED_CLIENTS="127.0.0.1, 192.168.0.0/16" -e EXTERNAL_IP=79.109.127.99 -p 443:443 -p 80:80 -p 53:5300/udp ghcr.io/seji64/snidust:main

But I have these messages in logs:

Added downstream server 8.8.8.8:853
Added downstream server 8.8.4.4:853
Added downstream server 1.1.1.1:443
Added downstream server 1.0.0.1:443
Listening on 0.0.0.0:5300
dnsdist 1.7.1 comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2
ACL allowing queries from: 127.0.0.1/32, 192.168.0.0/16
Console ACL allowing connections from: 127.0.0.0/8, ::1/128
Webserver launched on 127.0.0.1:8083
Marking downstream dns.google (8.8.8.8:853) as 'down'
Marking downstream dns.google (8.8.4.4:853) as 'down'
Marking downstream 1.1.1.1:443 as 'down'
Marking downstream 1.0.0.1:443 as 'down'
Error while retrieving the security update for version dnsdist-1.7.1: Unable to get a valid Security Status update
Failed to retrieve security status update for '1.7.1' on dnsdist-1.7.1.security-status.secpoll.powerdns.com.
time=2023-03-06T12:07:10.103Z level=WARN msg="Domain list (--domainListPath) is not specified, routing ALL domains through the SNI proxy"
time=2023-03-06T12:07:10.104Z level=INFO msg="server info" public_ip=79.109.127.99
time=2023-03-06T12:07:17.665Z level=INFO msg="Certificate was not provided, using a self signed cert"
time=2023-03-06T12:07:17.666Z level=INFO msg="Started UDP DNS" service=dns host=0.0.0.0 port=5353

My Raspberry Pi is running behind a router with the ports 443, 80 and 53 opened (Internet <--> Router <--> Raspberry Pi)

I don't know what to check. Could you help me?

Thank you in advance.

iussue with changing upstream DNS

Hello

below is my docker compose

version: '3.3'
services:
    snidust:
        container_name: snidust
        environment:
            - 'ALLOWED_CLIENTS=127.0.0.1'
            - 'EXTERNAL_IP=132.147.107.128'
            - SPOOF_ALL_DOMAINS=true # Set to true (case sensitive!) if you want to spoof ALL domains.
            - DNSDIST_UPSTREAM_POOL_NAME='customUpstream'
        ports:
            - 2443:8443
            - 380:8080
            - 653:5300/udp
        image: 'ghcr.io/publish3r/snidust-telerising:main'
        volumes:
          - /share/Container/SNIDUST/99-customUpstream.conf:/etc/dnsdist/conf.d/99-customUpstream.conf:ro
        restart: always

When i mount 99-customUpstream.conf from my host, i get the follow error

[INFO] [SniDust] Adding domain zatsslive-a.akamaihd.net to list
[INFO] [SniDust] Adding domain chromecast-receiver.zattoo.com to list
[INFO] [SniDust] Adding domain box30030.wemfbox.ch to list
[INFO] [SniDust] Adding domain zattoo.wemfbox.ch to list
[INFO] [SniDust] Adding domain zatsslive-a.akamaihd.net to list
[INFO] [SniDust] Adding domain zattoo.com to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Domain List: /etc/snidust/domains.d/10-yallo.lst***
[INFO] [SniDust] Adding domain y3o.tv to list
[INFO] [SniDust] Adding domain yallo.tv to list
[INFO] [SniDust] *** End of Domain List ***
[INFO] [SniDust] *** Complete! ***
Fatal Lua error: [string "chunk"]:17: Caught exception: [string "chunk"]:1: ')' expected near '='
stack traceback:
[C]: in function 'includeDirectory'
[string "chunk"]:17: in main chunk

Noob question

Hi,
I have a local proxmox server in Canada. But I need Smart DNS from France. So I can't use your service right without a VPS in France right?
I should have a VPS for the Public IP server and the proxmox server as client right?
Thanks!

Cron permission error

Hi there,

Unfortunately, I get this error

[INFO] DynDNS Address in ALLOWED_CLIENTS detected => Enable cron job /entrypoint.sh: line 37: /etc/crontabs/snidust: Permission denied

and the container is unable to start

How to solve this?
Many thanks in advance!

Adding SRF

HI there

I love the project.
Is there any chance to add srf.ch to the domain list?
Unfortunately,y they have implemented geo-blocking on their lifestream and it would be great when it could be unblocked.

Thank you for your help!

MTH

Failed to start dnsdist(pdns) Unable to convert presentation address

Hi
i had to update docker image and then an image has been happend ! even if i build image manually with Dockerfile . i think problem is with pdns package inside the image .
When we start the container after loading domain list , this error happen :

Fatal pdns error: Unable to convert presentation address 'EXTERNAL_IP'

docker becames unresponsive after some time

Hi - the container is working great and functional so far. it does a great job when can keep online, the problem I'm facing is that after a few minutes without processing queries or being idle like no one is using it the logs start showing entries like this:

2023-10-13T01:37:49Z ERR EOF service=http

and then, became totally unresponsive and need to restart the container to start working again. any idea why this may happen or do you know any workaround to keep it from losing the connection like this?

GeoLocation still exposed

Hi there

I tried to hide my GeoLocation with it, however, it seems my GeoLocation is still exposed.
When accessing Netflix, Netflix still detects my current country (Thailand), and not the country where my DNS proxy is hosted (Switzerland).

I performed the following steps

ubuntu@myproxy-2:~$ git clone https://github.com/Seji64/SniDust
Cloning into 'SniDust'...
remote: Enumerating objects: 58, done.
remote: Counting objects: 100% (58/58), done.
remote: Compressing objects: 100% (44/44), done.
remote: Total 58 (delta 20), reused 17 (delta 3), pack-reused 0
Unpacking objects: 100% (58/58), 24.53 KiB | 2.73 MiB/s, done.

ubuntu@myproxy-2:~$ cd SniDust/
sudo docker build . -t seji64/snidust
Sending build context to Docker daemon  218.6kB
Step 1/20 : FROM debian:11-slim
11-slim: Pulling from library/debian
214ca5fb9032: Pull complete 
Digest: sha256:fbaacd55d14bd0ae0c0441c2347217da77ad83c517054623357d1f9d07f79f5e
Status: Downloaded newer image for debian:11-slim
 ---> ed595c52174a
Step 2/20 : LABEl org.opencontainers.image.authors="[email protected]"
 ---> Running in c4e2c0b11486
Removing intermediate container c4e2c0b11486
 ---> 6b240f02d7be
Step 3/20 : ENV DEBIAN_FRONTEND="noninteractive"
 ---> Running in bc28b00877e1
Removing intermediate container bc28b00877e1
 ---> 51abaf893e48
Step 4/20 : ENV DNSDIST_BIND_IP=0.0.0.0
 ---> Running in 187af9291b46
Removing intermediate container 187af9291b46
 ---> 024088bfdc3d
Step 5/20 : ENV ALLOWED_CLIENTS=127.0.0.1
 ---> Running in f3af5c363b92
Removing intermediate container f3af5c363b92
 ---> 53b40102394b
Step 6/20 : ENV EXTERNAL_IP=
 ---> Running in e1659abe3293
Removing intermediate container e1659abe3293
 ---> 225443617f2b
Step 7/20 : EXPOSE 5300/udp
 ---> Running in 82d6dc5276de
Removing intermediate container 82d6dc5276de
 ---> 98905ab2f578
Step 8/20 : EXPOSE 80/tcp
 ---> Running in 7a1999d64e59
Removing intermediate container 7a1999d64e59
 ---> acde3dafcdd8
Step 9/20 : EXPOSE 443/tcp
 ---> Running in 075636474bb6
Removing intermediate container 075636474bb6
 ---> 1d9a91277389
Step 10/20 : RUN apt-get update && apt-get -y install sniproxy sed curl gnupg tini
 ---> Running in f687790812dd
Get:1 http://deb.debian.org/debian bullseye InRelease [116 kB]
Get:2 http://security.debian.org/debian-security bullseye-security InRelease [44.1 kB]
Get:3 http://deb.debian.org/debian bullseye-updates InRelease [39.4 kB]
Get:4 http://deb.debian.org/debian bullseye/main amd64 Packages [8182 kB]
Get:5 http://security.debian.org/debian-security bullseye-security/main amd64 Packages [148 kB]
Get:6 http://deb.debian.org/debian bullseye-updates/main amd64 Packages [2596 B]
Fetched 8533 kB in 1s (7379 kB/s)
Reading package lists...
Reading package lists...
Building dependency tree...
Reading state information...
sed is already the newest version (4.7-1).
sed set to manually installed.
The following additional packages will be installed:
  ca-certificates cron dirmngr exim4-base exim4-config exim4-daemon-light
  gnupg-l10n gnupg-utils gpg gpg-agent gpg-wks-client gpg-wks-server gpgconf
  gpgsm gsasl-common guile-2.2-libs libassuan0 libbrotli1 libcurl4 libev4
  libevent-2.1-7 libexpat1 libfribidi0 libgc1 libgnutls-dane0 libgpm2
  libgsasl7 libidn11 libksba8 libldap-2.4-2 libldap-common libltdl7
  libmailutils7 libmariadb3 libmpdec3 libncurses6 libncursesw6 libnghttp2-14
  libnpth0 libntlm0 libpopt0 libpsl5 libpython3.9 libpython3.9-minimal
  libpython3.9-stdlib libreadline8 librtmp1 libsasl2-2 libsasl2-modules
  libsasl2-modules-db libsqlite3-0 libssh2-1 libudns0 libunbound8 logrotate
  mailutils mailutils-common mariadb-common media-types mysql-common netbase
  openssl pinentry-curses psmisc publicsuffix readline-common sensible-utils
Suggested packages:
  anacron checksecurity dbus-user-session libpam-systemd pinentry-gnome3 tor
  exim4-doc-html | exim4-doc-info eximon4 file spf-tools-perl swaks parcimonie
  xloadimage scdaemon dns-root-data gpm libsasl2-modules-gssapi-mit
  | libsasl2-modules-gssapi-heimdal libsasl2-modules-ldap libsasl2-modules-otp
  libsasl2-modules-sql mailutils-mh mailutils-doc pinentry-doc readline-doc
The following NEW packages will be installed:
  ca-certificates cron curl dirmngr exim4-base exim4-config exim4-daemon-light
  gnupg gnupg-l10n gnupg-utils gpg gpg-agent gpg-wks-client gpg-wks-server
  gpgconf gpgsm gsasl-common guile-2.2-libs libassuan0 libbrotli1 libcurl4
  libev4 libevent-2.1-7 libexpat1 libfribidi0 libgc1 libgnutls-dane0 libgpm2
  libgsasl7 libidn11 libksba8 libldap-2.4-2 libldap-common libltdl7
  libmailutils7 libmariadb3 libmpdec3 libncurses6 libncursesw6 libnghttp2-14
  libnpth0 libntlm0 libpopt0 libpsl5 libpython3.9 libpython3.9-minimal
  libpython3.9-stdlib libreadline8 librtmp1 libsasl2-2 libsasl2-modules
  libsasl2-modules-db libsqlite3-0 libssh2-1 libudns0 libunbound8 logrotate
  mailutils mailutils-common mariadb-common media-types mysql-common netbase
  openssl pinentry-curses psmisc publicsuffix readline-common sensible-utils
  sniproxy tini
0 upgraded, 71 newly installed, 0 to remove and 1 not upgraded.
Need to get 29.1 MB of archives.
After this operation, 107 MB of additional disk space will be used.
Get:1 http://deb.debian.org/debian bullseye/main amd64 sensible-utils all 0.0.14 [14.8 kB]
Get:2 http://deb.debian.org/debian bullseye/main amd64 cron amd64 3.0pl1-137 [99.6 kB]
Get:3 http://security.debian.org/debian-security bullseye-security/main amd64 openssl amd64 1.1.1n-0+deb11u2 [852 kB]
Get:4 http://deb.debian.org/debian bullseye/main amd64 readline-common all 8.1-1 [73.7 kB]
Get:5 http://deb.debian.org/debian bullseye/main amd64 libreadline8 amd64 8.1-1 [169 kB]
Get:6 http://deb.debian.org/debian bullseye/main amd64 libpopt0 amd64 1.18-2 [49.6 kB]
Get:7 http://deb.debian.org/debian bullseye/main amd64 logrotate amd64 3.18.0-2 [72.0 kB]
Get:8 http://deb.debian.org/debian bullseye/main amd64 netbase all 6.3 [19.9 kB]
Get:9 http://deb.debian.org/debian bullseye/main amd64 ca-certificates all 20210119 [158 kB]
Get:10 http://deb.debian.org/debian bullseye/main amd64 media-types all 4.0.0 [30.3 kB]
Get:11 http://deb.debian.org/debian bullseye/main amd64 libbrotli1 amd64 1.0.9-2+b2 [279 kB]
Get:12 http://deb.debian.org/debian bullseye/main amd64 libsasl2-modules-db amd64 2.1.27+dfsg-2.1+deb11u1 [69.1 kB]
Get:13 http://deb.debian.org/debian bullseye/main amd64 libsasl2-2 amd64 2.1.27+dfsg-2.1+deb11u1 [106 kB]
Get:14 http://deb.debian.org/debian bullseye/main amd64 libnghttp2-14 amd64 1.43.0-1 [77.1 kB]
Get:15 http://deb.debian.org/debian bullseye/main amd64 libpsl5 amd64 0.21.0-1.2 [57.3 kB]
Get:16 http://deb.debian.org/debian bullseye/main amd64 librtmp1 amd64 2.4+20151223.gitfa8646d.1-2+b2 [60.8 kB]
Get:17 http://deb.debian.org/debian bullseye/main amd64 libssh2-1 amd64 1.9.0-2 [156 kB]
Get:18 http://deb.debian.org/debian bullseye/main amd64 libcurl4 amd64 7.74.0-1.3+deb11u1 [341 kB]
Get:19 http://deb.debian.org/debian bullseye/main amd64 curl amd64 7.74.0-1.3+deb11u1 [267 kB]
Get:20 http://deb.debian.org/debian bullseye/main amd64 libassuan0 amd64 2.5.3-7.1 [50.5 kB]
Get:21 http://deb.debian.org/debian bullseye/main amd64 gpgconf amd64 2.2.27-2+deb11u1 [548 kB]
Get:22 http://deb.debian.org/debian bullseye/main amd64 libksba8 amd64 1.5.0-3 [123 kB]
Get:23 http://security.debian.org/debian-security bullseye-security/main amd64 libldap-2.4-2 amd64 2.4.57+dfsg-3+deb11u1 [232 kB]
Get:24 http://security.debian.org/debian-security bullseye-security/main amd64 libldap-common all 2.4.57+dfsg-3+deb11u1 [95.8 kB]
Get:25 http://deb.debian.org/debian bullseye/main amd64 libnpth0 amd64 1.6-3 [19.0 kB]
Get:26 http://deb.debian.org/debian bullseye/main amd64 dirmngr amd64 2.2.27-2+deb11u1 [763 kB]
Get:27 http://deb.debian.org/debian bullseye/main amd64 exim4-config all 4.94.2-7 [335 kB]
Get:28 http://deb.debian.org/debian bullseye/main amd64 exim4-base amd64 4.94.2-7 [1175 kB]
Get:29 http://deb.debian.org/debian bullseye/main amd64 libevent-2.1-7 amd64 2.1.12-stable-1 [188 kB]
Get:30 http://deb.debian.org/debian bullseye/main amd64 libunbound8 amd64 1.13.1-1 [504 kB]
Get:31 http://deb.debian.org/debian bullseye/main amd64 libgnutls-dane0 amd64 3.7.1-5 [394 kB]
Get:32 http://deb.debian.org/debian bullseye/main amd64 libidn11 amd64 1.33-3 [116 kB]
Get:33 http://deb.debian.org/debian bullseye/main amd64 exim4-daemon-light amd64 4.94.2-7 [658 kB]
Get:34 http://deb.debian.org/debian bullseye/main amd64 gnupg-l10n all 2.2.27-2+deb11u1 [1085 kB]
Get:35 http://deb.debian.org/debian bullseye/main amd64 gnupg-utils amd64 2.2.27-2+deb11u1 [905 kB]
Get:36 http://deb.debian.org/debian bullseye/main amd64 libsqlite3-0 amd64 3.34.1-3 [797 kB]
Get:37 http://deb.debian.org/debian bullseye/main amd64 gpg amd64 2.2.27-2+deb11u1 [928 kB]
Get:38 http://deb.debian.org/debian bullseye/main amd64 libncursesw6 amd64 6.2+20201114-2 [132 kB]
Get:39 http://deb.debian.org/debian bullseye/main amd64 pinentry-curses amd64 1.1.0-4 [64.9 kB]
Get:40 http://deb.debian.org/debian bullseye/main amd64 gpg-agent amd64 2.2.27-2+deb11u1 [669 kB]
Get:41 http://deb.debian.org/debian bullseye/main amd64 gpg-wks-client amd64 2.2.27-2+deb11u1 [524 kB]
Get:42 http://deb.debian.org/debian bullseye/main amd64 gpg-wks-server amd64 2.2.27-2+deb11u1 [516 kB]
Get:43 http://deb.debian.org/debian bullseye/main amd64 gpgsm amd64 2.2.27-2+deb11u1 [645 kB]
Get:44 http://deb.debian.org/debian bullseye/main amd64 gnupg all 2.2.27-2+deb11u1 [825 kB]
Get:45 http://deb.debian.org/debian bullseye/main amd64 gsasl-common all 1.10.0-4 [175 kB]
Get:46 http://deb.debian.org/debian bullseye/main amd64 libgc1 amd64 1:8.0.4-3 [239 kB]
Get:47 http://deb.debian.org/debian bullseye/main amd64 libltdl7 amd64 2.4.6-15 [391 kB]
Get:48 http://deb.debian.org/debian bullseye/main amd64 guile-2.2-libs amd64 2.2.7+1-6 [4980 kB]
Get:49 http://deb.debian.org/debian bullseye/main amd64 libev4 amd64 1:4.33-1 [43.2 kB]
Get:50 http://deb.debian.org/debian bullseye/main amd64 libexpat1 amd64 2.2.10-2+deb11u3 [98.5 kB]
Get:51 http://deb.debian.org/debian bullseye/main amd64 libfribidi0 amd64 1.0.8-2 [64.8 kB]
Get:52 http://deb.debian.org/debian bullseye/main amd64 libgpm2 amd64 1.20.7-8 [35.6 kB]
Get:53 http://deb.debian.org/debian bullseye/main amd64 libntlm0 amd64 1.6-3 [84.7 kB]
Get:54 http://deb.debian.org/debian bullseye/main amd64 libgsasl7 amd64 1.10.0-4 [195 kB]
Get:55 http://deb.debian.org/debian bullseye/main amd64 mailutils-common all 1:3.10-3 [728 kB]
Get:56 http://deb.debian.org/debian bullseye/main amd64 mysql-common all 5.8+1.0.7 [7464 B]
Get:57 http://deb.debian.org/debian bullseye/main amd64 mariadb-common all 1:10.5.15-0+deb11u1 [36.7 kB]
Get:58 http://deb.debian.org/debian bullseye/main amd64 libmariadb3 amd64 1:10.5.15-0+deb11u1 [176 kB]
Get:59 http://deb.debian.org/debian bullseye/main amd64 libpython3.9-minimal amd64 3.9.2-1 [801 kB]
Get:60 http://deb.debian.org/debian bullseye/main amd64 libmpdec3 amd64 2.5.1-1 [87.7 kB]
Get:61 http://deb.debian.org/debian bullseye/main amd64 libpython3.9-stdlib amd64 3.9.2-1 [1684 kB]
Get:62 http://deb.debian.org/debian bullseye/main amd64 libpython3.9 amd64 3.9.2-1 [1691 kB]
Get:63 http://deb.debian.org/debian bullseye/main amd64 libmailutils7 amd64 1:3.10-3+b1 [893 kB]
Get:64 http://deb.debian.org/debian bullseye/main amd64 libncurses6 amd64 6.2+20201114-2 [102 kB]
Get:65 http://deb.debian.org/debian bullseye/main amd64 libsasl2-modules amd64 2.1.27+dfsg-2.1+deb11u1 [104 kB]
Get:66 http://deb.debian.org/debian bullseye/main amd64 libudns0 amd64 0.4-1+b1 [24.9 kB]
Get:67 http://deb.debian.org/debian bullseye/main amd64 mailutils amd64 1:3.10-3+b1 [576 kB]
Get:68 http://deb.debian.org/debian bullseye/main amd64 psmisc amd64 23.4-2 [198 kB]
Get:69 http://deb.debian.org/debian bullseye/main amd64 publicsuffix all 20211207.1025-0+deb11u1 [125 kB]
Get:70 http://deb.debian.org/debian bullseye/main amd64 sniproxy amd64 0.6.0-2 [40.7 kB]
Get:71 http://deb.debian.org/debian bullseye/main amd64 tini amd64 0.19.0-1 [255 kB]
debconf: delaying package configuration, since apt-utils is not installed
Fetched 29.1 MB in 0s (98.2 MB/s)
Selecting previously unselected package sensible-utils.
(Reading database ... 6653 files and directories currently installed.)
Preparing to unpack .../00-sensible-utils_0.0.14_all.deb ...
Unpacking sensible-utils (0.0.14) ...
Selecting previously unselected package cron.
Preparing to unpack .../01-cron_3.0pl1-137_amd64.deb ...
Unpacking cron (3.0pl1-137) ...
Selecting previously unselected package readline-common.
Preparing to unpack .../02-readline-common_8.1-1_all.deb ...
Unpacking readline-common (8.1-1) ...
Selecting previously unselected package libreadline8:amd64.
Preparing to unpack .../03-libreadline8_8.1-1_amd64.deb ...
Unpacking libreadline8:amd64 (8.1-1) ...
Selecting previously unselected package libpopt0:amd64.
Preparing to unpack .../04-libpopt0_1.18-2_amd64.deb ...
Unpacking libpopt0:amd64 (1.18-2) ...
Selecting previously unselected package logrotate.
Preparing to unpack .../05-logrotate_3.18.0-2_amd64.deb ...
Unpacking logrotate (3.18.0-2) ...
Selecting previously unselected package netbase.
Preparing to unpack .../06-netbase_6.3_all.deb ...
Unpacking netbase (6.3) ...
Selecting previously unselected package openssl.
Preparing to unpack .../07-openssl_1.1.1n-0+deb11u2_amd64.deb ...
Unpacking openssl (1.1.1n-0+deb11u2) ...
Selecting previously unselected package ca-certificates.
Preparing to unpack .../08-ca-certificates_20210119_all.deb ...
Unpacking ca-certificates (20210119) ...
Selecting previously unselected package media-types.
Preparing to unpack .../09-media-types_4.0.0_all.deb ...
Unpacking media-types (4.0.0) ...
Selecting previously unselected package libbrotli1:amd64.
Preparing to unpack .../10-libbrotli1_1.0.9-2+b2_amd64.deb ...
Unpacking libbrotli1:amd64 (1.0.9-2+b2) ...
Selecting previously unselected package libsasl2-modules-db:amd64.
Preparing to unpack .../11-libsasl2-modules-db_2.1.27+dfsg-2.1+deb11u1_amd64.deb ...
Unpacking libsasl2-modules-db:amd64 (2.1.27+dfsg-2.1+deb11u1) ...
Selecting previously unselected package libsasl2-2:amd64.
Preparing to unpack .../12-libsasl2-2_2.1.27+dfsg-2.1+deb11u1_amd64.deb ...
Unpacking libsasl2-2:amd64 (2.1.27+dfsg-2.1+deb11u1) ...
Selecting previously unselected package libldap-2.4-2:amd64.
Preparing to unpack .../13-libldap-2.4-2_2.4.57+dfsg-3+deb11u1_amd64.deb ...
Unpacking libldap-2.4-2:amd64 (2.4.57+dfsg-3+deb11u1) ...
Selecting previously unselected package libnghttp2-14:amd64.
Preparing to unpack .../14-libnghttp2-14_1.43.0-1_amd64.deb ...
Unpacking libnghttp2-14:amd64 (1.43.0-1) ...
Selecting previously unselected package libpsl5:amd64.
Preparing to unpack .../15-libpsl5_0.21.0-1.2_amd64.deb ...
Unpacking libpsl5:amd64 (0.21.0-1.2) ...
Selecting previously unselected package librtmp1:amd64.
Preparing to unpack .../16-librtmp1_2.4+20151223.gitfa8646d.1-2+b2_amd64.deb ...
Unpacking librtmp1:amd64 (2.4+20151223.gitfa8646d.1-2+b2) ...
Selecting previously unselected package libssh2-1:amd64.
Preparing to unpack .../17-libssh2-1_1.9.0-2_amd64.deb ...
Unpacking libssh2-1:amd64 (1.9.0-2) ...
Selecting previously unselected package libcurl4:amd64.
Preparing to unpack .../18-libcurl4_7.74.0-1.3+deb11u1_amd64.deb ...
Unpacking libcurl4:amd64 (7.74.0-1.3+deb11u1) ...
Selecting previously unselected package curl.
Preparing to unpack .../19-curl_7.74.0-1.3+deb11u1_amd64.deb ...
Unpacking curl (7.74.0-1.3+deb11u1) ...
Selecting previously unselected package libassuan0:amd64.
Preparing to unpack .../20-libassuan0_2.5.3-7.1_amd64.deb ...
Unpacking libassuan0:amd64 (2.5.3-7.1) ...
Selecting previously unselected package gpgconf.
Preparing to unpack .../21-gpgconf_2.2.27-2+deb11u1_amd64.deb ...
Unpacking gpgconf (2.2.27-2+deb11u1) ...
Selecting previously unselected package libksba8:amd64.
Preparing to unpack .../22-libksba8_1.5.0-3_amd64.deb ...
Unpacking libksba8:amd64 (1.5.0-3) ...
Selecting previously unselected package libnpth0:amd64.
Preparing to unpack .../23-libnpth0_1.6-3_amd64.deb ...
Unpacking libnpth0:amd64 (1.6-3) ...
Selecting previously unselected package dirmngr.
Preparing to unpack .../24-dirmngr_2.2.27-2+deb11u1_amd64.deb ...
Unpacking dirmngr (2.2.27-2+deb11u1) ...
Selecting previously unselected package exim4-config.
Preparing to unpack .../25-exim4-config_4.94.2-7_all.deb ...
Unpacking exim4-config (4.94.2-7) ...
Selecting previously unselected package exim4-base.
Preparing to unpack .../26-exim4-base_4.94.2-7_amd64.deb ...
Unpacking exim4-base (4.94.2-7) ...
Selecting previously unselected package libevent-2.1-7:amd64.
Preparing to unpack .../27-libevent-2.1-7_2.1.12-stable-1_amd64.deb ...
Unpacking libevent-2.1-7:amd64 (2.1.12-stable-1) ...
Selecting previously unselected package libunbound8:amd64.
Preparing to unpack .../28-libunbound8_1.13.1-1_amd64.deb ...
Unpacking libunbound8:amd64 (1.13.1-1) ...
Selecting previously unselected package libgnutls-dane0:amd64.
Preparing to unpack .../29-libgnutls-dane0_3.7.1-5_amd64.deb ...
Unpacking libgnutls-dane0:amd64 (3.7.1-5) ...
Selecting previously unselected package libidn11:amd64.
Preparing to unpack .../30-libidn11_1.33-3_amd64.deb ...
Unpacking libidn11:amd64 (1.33-3) ...
Selecting previously unselected package exim4-daemon-light.
Preparing to unpack .../31-exim4-daemon-light_4.94.2-7_amd64.deb ...
Unpacking exim4-daemon-light (4.94.2-7) ...
Selecting previously unselected package gnupg-l10n.
Preparing to unpack .../32-gnupg-l10n_2.2.27-2+deb11u1_all.deb ...
Unpacking gnupg-l10n (2.2.27-2+deb11u1) ...
Selecting previously unselected package gnupg-utils.
Preparing to unpack .../33-gnupg-utils_2.2.27-2+deb11u1_amd64.deb ...
Unpacking gnupg-utils (2.2.27-2+deb11u1) ...
Selecting previously unselected package libsqlite3-0:amd64.
Preparing to unpack .../34-libsqlite3-0_3.34.1-3_amd64.deb ...
Unpacking libsqlite3-0:amd64 (3.34.1-3) ...
Selecting previously unselected package gpg.
Preparing to unpack .../35-gpg_2.2.27-2+deb11u1_amd64.deb ...
Unpacking gpg (2.2.27-2+deb11u1) ...
Selecting previously unselected package libncursesw6:amd64.
Preparing to unpack .../36-libncursesw6_6.2+20201114-2_amd64.deb ...
Unpacking libncursesw6:amd64 (6.2+20201114-2) ...
Selecting previously unselected package pinentry-curses.
Preparing to unpack .../37-pinentry-curses_1.1.0-4_amd64.deb ...
Unpacking pinentry-curses (1.1.0-4) ...
Selecting previously unselected package gpg-agent.
Preparing to unpack .../38-gpg-agent_2.2.27-2+deb11u1_amd64.deb ...
Unpacking gpg-agent (2.2.27-2+deb11u1) ...
Selecting previously unselected package gpg-wks-client.
Preparing to unpack .../39-gpg-wks-client_2.2.27-2+deb11u1_amd64.deb ...
Unpacking gpg-wks-client (2.2.27-2+deb11u1) ...
Selecting previously unselected package gpg-wks-server.
Preparing to unpack .../40-gpg-wks-server_2.2.27-2+deb11u1_amd64.deb ...
Unpacking gpg-wks-server (2.2.27-2+deb11u1) ...
Selecting previously unselected package gpgsm.
Preparing to unpack .../41-gpgsm_2.2.27-2+deb11u1_amd64.deb ...
Unpacking gpgsm (2.2.27-2+deb11u1) ...
Selecting previously unselected package gnupg.
Preparing to unpack .../42-gnupg_2.2.27-2+deb11u1_all.deb ...
Unpacking gnupg (2.2.27-2+deb11u1) ...
Selecting previously unselected package gsasl-common.
Preparing to unpack .../43-gsasl-common_1.10.0-4_all.deb ...
Unpacking gsasl-common (1.10.0-4) ...
Selecting previously unselected package libgc1:amd64.
Preparing to unpack .../44-libgc1_1%3a8.0.4-3_amd64.deb ...
Unpacking libgc1:amd64 (1:8.0.4-3) ...
Selecting previously unselected package libltdl7:amd64.
Preparing to unpack .../45-libltdl7_2.4.6-15_amd64.deb ...
Unpacking libltdl7:amd64 (2.4.6-15) ...
Selecting previously unselected package guile-2.2-libs:amd64.
Preparing to unpack .../46-guile-2.2-libs_2.2.7+1-6_amd64.deb ...
Unpacking guile-2.2-libs:amd64 (2.2.7+1-6) ...
Selecting previously unselected package libev4:amd64.
Preparing to unpack .../47-libev4_1%3a4.33-1_amd64.deb ...
Unpacking libev4:amd64 (1:4.33-1) ...
Selecting previously unselected package libexpat1:amd64.
Preparing to unpack .../48-libexpat1_2.2.10-2+deb11u3_amd64.deb ...
Unpacking libexpat1:amd64 (2.2.10-2+deb11u3) ...
Selecting previously unselected package libfribidi0:amd64.
Preparing to unpack .../49-libfribidi0_1.0.8-2_amd64.deb ...
Unpacking libfribidi0:amd64 (1.0.8-2) ...
Selecting previously unselected package libgpm2:amd64.
Preparing to unpack .../50-libgpm2_1.20.7-8_amd64.deb ...
Unpacking libgpm2:amd64 (1.20.7-8) ...
Selecting previously unselected package libntlm0:amd64.
Preparing to unpack .../51-libntlm0_1.6-3_amd64.deb ...
Unpacking libntlm0:amd64 (1.6-3) ...
Selecting previously unselected package libgsasl7:amd64.
Preparing to unpack .../52-libgsasl7_1.10.0-4_amd64.deb ...
Unpacking libgsasl7:amd64 (1.10.0-4) ...
Selecting previously unselected package libldap-common.
Preparing to unpack .../53-libldap-common_2.4.57+dfsg-3+deb11u1_all.deb ...
Unpacking libldap-common (2.4.57+dfsg-3+deb11u1) ...
Selecting previously unselected package mailutils-common.
Preparing to unpack .../54-mailutils-common_1%3a3.10-3_all.deb ...
Unpacking mailutils-common (1:3.10-3) ...
Selecting previously unselected package mysql-common.
Preparing to unpack .../55-mysql-common_5.8+1.0.7_all.deb ...
Unpacking mysql-common (5.8+1.0.7) ...
Selecting previously unselected package mariadb-common.
Preparing to unpack .../56-mariadb-common_1%3a10.5.15-0+deb11u1_all.deb ...
Unpacking mariadb-common (1:10.5.15-0+deb11u1) ...
Selecting previously unselected package libmariadb3:amd64.
Preparing to unpack .../57-libmariadb3_1%3a10.5.15-0+deb11u1_amd64.deb ...
Unpacking libmariadb3:amd64 (1:10.5.15-0+deb11u1) ...
Selecting previously unselected package libpython3.9-minimal:amd64.
Preparing to unpack .../58-libpython3.9-minimal_3.9.2-1_amd64.deb ...
Unpacking libpython3.9-minimal:amd64 (3.9.2-1) ...
Selecting previously unselected package libmpdec3:amd64.
Preparing to unpack .../59-libmpdec3_2.5.1-1_amd64.deb ...
Unpacking libmpdec3:amd64 (2.5.1-1) ...
Selecting previously unselected package libpython3.9-stdlib:amd64.
Preparing to unpack .../60-libpython3.9-stdlib_3.9.2-1_amd64.deb ...
Unpacking libpython3.9-stdlib:amd64 (3.9.2-1) ...
Selecting previously unselected package libpython3.9:amd64.
Preparing to unpack .../61-libpython3.9_3.9.2-1_amd64.deb ...
Unpacking libpython3.9:amd64 (3.9.2-1) ...
Selecting previously unselected package libmailutils7:amd64.
Preparing to unpack .../62-libmailutils7_1%3a3.10-3+b1_amd64.deb ...
Unpacking libmailutils7:amd64 (1:3.10-3+b1) ...
Selecting previously unselected package libncurses6:amd64.
Preparing to unpack .../63-libncurses6_6.2+20201114-2_amd64.deb ...
Unpacking libncurses6:amd64 (6.2+20201114-2) ...
Selecting previously unselected package libsasl2-modules:amd64.
Preparing to unpack .../64-libsasl2-modules_2.1.27+dfsg-2.1+deb11u1_amd64.deb ...
Unpacking libsasl2-modules:amd64 (2.1.27+dfsg-2.1+deb11u1) ...
Selecting previously unselected package libudns0:amd64.
Preparing to unpack .../65-libudns0_0.4-1+b1_amd64.deb ...
Unpacking libudns0:amd64 (0.4-1+b1) ...
Selecting previously unselected package mailutils.
Preparing to unpack .../66-mailutils_1%3a3.10-3+b1_amd64.deb ...
Unpacking mailutils (1:3.10-3+b1) ...
Selecting previously unselected package psmisc.
Preparing to unpack .../67-psmisc_23.4-2_amd64.deb ...
Unpacking psmisc (23.4-2) ...
Selecting previously unselected package publicsuffix.
Preparing to unpack .../68-publicsuffix_20211207.1025-0+deb11u1_all.deb ...
Unpacking publicsuffix (20211207.1025-0+deb11u1) ...
Selecting previously unselected package sniproxy.
Preparing to unpack .../69-sniproxy_0.6.0-2_amd64.deb ...
Unpacking sniproxy (0.6.0-2) ...
Selecting previously unselected package tini.
Preparing to unpack .../70-tini_0.19.0-1_amd64.deb ...
Unpacking tini (0.19.0-1) ...
Setting up libksba8:amd64 (1.5.0-3) ...
Setting up libexpat1:amd64 (2.2.10-2+deb11u3) ...
Setting up media-types (4.0.0) ...
Setting up mysql-common (5.8+1.0.7) ...
update-alternatives: using /etc/mysql/my.cnf.fallback to provide /etc/mysql/my.cnf (my.cnf) in auto mode
Setting up libpsl5:amd64 (0.21.0-1.2) ...
Setting up libgpm2:amd64 (1.20.7-8) ...
Setting up psmisc (23.4-2) ...
Setting up libpython3.9-minimal:amd64 (3.9.2-1) ...
Setting up libev4:amd64 (1:4.33-1) ...
Setting up libbrotli1:amd64 (1.0.9-2+b2) ...
Setting up libsqlite3-0:amd64 (3.34.1-3) ...
Setting up libsasl2-modules:amd64 (2.1.27+dfsg-2.1+deb11u1) ...
Setting up libnghttp2-14:amd64 (1.43.0-1) ...
Setting up libnpth0:amd64 (1.6-3) ...
Setting up libassuan0:amd64 (2.5.3-7.1) ...
Setting up libldap-common (2.4.57+dfsg-3+deb11u1) ...
Setting up libsasl2-modules-db:amd64 (2.1.27+dfsg-2.1+deb11u1) ...
Setting up mariadb-common (1:10.5.15-0+deb11u1) ...
update-alternatives: using /etc/mysql/mariadb.cnf to provide /etc/mysql/my.cnf (my.cnf) in auto mode
Setting up gnupg-l10n (2.2.27-2+deb11u1) ...
Setting up libntlm0:amd64 (1.6-3) ...
Setting up librtmp1:amd64 (2.4+20151223.gitfa8646d.1-2+b2) ...
Setting up libidn11:amd64 (1.33-3) ...
Setting up libncurses6:amd64 (6.2+20201114-2) ...
Setting up libfribidi0:amd64 (1.0.8-2) ...
Setting up tini (0.19.0-1) ...
Setting up libevent-2.1-7:amd64 (2.1.12-stable-1) ...
Setting up mailutils-common (1:3.10-3) ...
Setting up libmariadb3:amd64 (1:10.5.15-0+deb11u1) ...
Setting up libncursesw6:amd64 (6.2+20201114-2) ...
Setting up libgc1:amd64 (1:8.0.4-3) ...
Setting up libltdl7:amd64 (2.4.6-15) ...
Setting up libsasl2-2:amd64 (2.1.27+dfsg-2.1+deb11u1) ...
Setting up sensible-utils (0.0.14) ...
Setting up exim4-config (4.94.2-7) ...
Adding system-user for exim (v4)
Setting up libmpdec3:amd64 (2.5.1-1) ...
Setting up libssh2-1:amd64 (1.9.0-2) ...
Setting up netbase (6.3) ...
Setting up gsasl-common (1.10.0-4) ...
Setting up openssl (1.1.1n-0+deb11u2) ...
Setting up readline-common (8.1-1) ...
Setting up publicsuffix (20211207.1025-0+deb11u1) ...
Setting up libpopt0:amd64 (1.18-2) ...
Setting up libudns0:amd64 (0.4-1+b1) ...
Setting up pinentry-curses (1.1.0-4) ...
Setting up libreadline8:amd64 (8.1-1) ...
Setting up cron (3.0pl1-137) ...
Adding group `crontab' (GID 102) ...
Done.
invoke-rc.d: could not determine current runlevel
invoke-rc.d: policy-rc.d denied execution of start.
Setting up libgsasl7:amd64 (1.10.0-4) ...
Setting up libldap-2.4-2:amd64 (2.4.57+dfsg-3+deb11u1) ...
Setting up ca-certificates (20210119) ...
Updating certificates in /etc/ssl/certs...
129 added, 0 removed; done.
Setting up libunbound8:amd64 (1.13.1-1) ...
Setting up gpgconf (2.2.27-2+deb11u1) ...
Setting up libcurl4:amd64 (7.74.0-1.3+deb11u1) ...
Setting up curl (7.74.0-1.3+deb11u1) ...
Setting up sniproxy (0.6.0-2) ...
invoke-rc.d: could not determine current runlevel
invoke-rc.d: policy-rc.d denied execution of start.
Setting up gpg (2.2.27-2+deb11u1) ...
Setting up guile-2.2-libs:amd64 (2.2.7+1-6) ...
Setting up libpython3.9-stdlib:amd64 (3.9.2-1) ...
Setting up gnupg-utils (2.2.27-2+deb11u1) ...
Setting up logrotate (3.18.0-2) ...
Setting up libgnutls-dane0:amd64 (3.7.1-5) ...
Setting up exim4-base (4.94.2-7) ...
exim: DB upgrade, deleting hints-db
Setting up gpg-agent (2.2.27-2+deb11u1) ...
Setting up gpgsm (2.2.27-2+deb11u1) ...
Setting up dirmngr (2.2.27-2+deb11u1) ...
Setting up libpython3.9:amd64 (3.9.2-1) ...
Setting up gpg-wks-server (2.2.27-2+deb11u1) ...
Setting up exim4-daemon-light (4.94.2-7) ...
invoke-rc.d: could not determine current runlevel
invoke-rc.d: policy-rc.d denied execution of start.
Setting up libmailutils7:amd64 (1:3.10-3+b1) ...
Setting up gpg-wks-client (2.2.27-2+deb11u1) ...
Setting up gnupg (2.2.27-2+deb11u1) ...
Setting up mailutils (1:3.10-3+b1) ...
update-alternatives: using /usr/bin/frm.mailutils to provide /usr/bin/frm (frm) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/frm.1.gz because associated file /usr/share/man/man1/frm.mailutils.1.gz (of link group frm) doesn't exist
update-alternatives: using /usr/bin/from.mailutils to provide /usr/bin/from (from) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/from.1.gz because associated file /usr/share/man/man1/from.mailutils.1.gz (of link group from) doesn't exist
update-alternatives: using /usr/bin/messages.mailutils to provide /usr/bin/messages (messages) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/messages.1.gz because associated file /usr/share/man/man1/messages.mailutils.1.gz (of link group messages) doesn't exist
update-alternatives: using /usr/bin/movemail.mailutils to provide /usr/bin/movemail (movemail) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/movemail.1.gz because associated file /usr/share/man/man1/movemail.mailutils.1.gz (of link group movemail) doesn't exist
update-alternatives: using /usr/bin/readmsg.mailutils to provide /usr/bin/readmsg (readmsg) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/readmsg.1.gz because associated file /usr/share/man/man1/readmsg.mailutils.1.gz (of link group readmsg) doesn't exist
update-alternatives: using /usr/bin/dotlock.mailutils to provide /usr/bin/dotlock (dotlock) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/dotlock.1.gz because associated file /usr/share/man/man1/dotlock.mailutils.1.gz (of link group dotlock) doesn't exist
update-alternatives: using /usr/bin/mail.mailutils to provide /usr/bin/mailx (mailx) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/mailx.1.gz because associated file /usr/share/man/man1/mail.mailutils.1.gz (of link group mailx) doesn't exist
update-alternatives: warning: skip creation of /usr/share/man/man1/mail.1.gz because associated file /usr/share/man/man1/mail.mailutils.1.gz (of link group mailx) doesn't exist
Processing triggers for libc-bin (2.31-13+deb11u3) ...
Processing triggers for ca-certificates (20210119) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Removing intermediate container f687790812dd
 ---> ddde0ea6034c
Step 11/20 : COPY pdns.list /etc/apt/sources.list.d/pdns.list
 ---> 50809914fb14
Step 12/20 : COPY dnsdist_preference /etc/apt/preferences.d/dnsdist
 ---> b96332c6b1e2
Step 13/20 : RUN curl -sL https://repo.powerdns.com/FD380FBB-pub.asc | apt-key add - && apt-get update && apt-get -y install dnsdist && apt-get dist-upgrade -y && apt-get clean -y && rm -rf /tmp/* /var/lib/apt/lists/* /var/tmp/*
 ---> Running in bd1d7565210c
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
OK
Hit:1 http://security.debian.org/debian-security bullseye-security InRelease
Hit:2 http://deb.debian.org/debian bullseye InRelease
Hit:3 http://deb.debian.org/debian bullseye-updates InRelease
Get:4 http://repo.powerdns.com/debian bullseye-dnsdist-17 InRelease [1792 B]
Get:5 http://repo.powerdns.com/debian bullseye-dnsdist-17/main amd64 Packages [894 B]
Fetched 2686 B in 0s (8462 B/s)
Reading package lists...
Reading package lists...
Building dependency tree...
Reading state information...
The following additional packages will be installed:
  libbsd0 libcap2 libcdb1 libedit2 libfstrm0 libgdbm-compat4 libgdbm6
  libh2o-evloop0.13 liblmdb0 libluajit-5.1-2 libluajit-5.1-common libmd0
  libpci3 libperl5.32 libre2-9 libsensors-config libsensors5 libsnmp-base
  libsnmp40 libsodium23 libwrap0 libwslay1 pci.ids perl perl-modules-5.32
Suggested packages:
  gdbm-l10n lm-sensors snmp-mibs-downloader perl-doc libterm-readline-gnu-perl
  | libterm-readline-perl-perl make libtap-harness-archive-perl
The following NEW packages will be installed:
  dnsdist libbsd0 libcap2 libcdb1 libedit2 libfstrm0 libgdbm-compat4 libgdbm6
  libh2o-evloop0.13 liblmdb0 libluajit-5.1-2 libluajit-5.1-common libmd0
  libpci3 libperl5.32 libre2-9 libsensors-config libsensors5 libsnmp-base
  libsnmp40 libsodium23 libwrap0 libwslay1 pci.ids perl perl-modules-5.32
0 upgraded, 26 newly installed, 0 to remove and 1 not upgraded.
Need to get 15.2 MB of archives.
After this operation, 68.0 MB of additional disk space will be used.
Get:1 http://deb.debian.org/debian bullseye/main amd64 perl-modules-5.32 all 5.32.1-4+deb11u2 [2823 kB]
Get:2 http://repo.powerdns.com/debian bullseye-dnsdist-17/main amd64 dnsdist amd64 1.7.1-1pdns.bullseye [2031 kB]
Get:3 http://deb.debian.org/debian bullseye/main amd64 libgdbm6 amd64 1.19-2 [64.9 kB]
Get:4 http://deb.debian.org/debian bullseye/main amd64 libgdbm-compat4 amd64 1.19-2 [44.7 kB]
Get:5 http://deb.debian.org/debian bullseye/main amd64 libperl5.32 amd64 5.32.1-4+deb11u2 [4106 kB]
Get:6 http://deb.debian.org/debian bullseye/main amd64 perl amd64 5.32.1-4+deb11u2 [293 kB]
Get:7 http://deb.debian.org/debian bullseye/main amd64 libcap2 amd64 1:2.44-1 [23.6 kB]
Get:8 http://deb.debian.org/debian bullseye/main amd64 libcdb1 amd64 0.78+b1 [13.2 kB]
Get:9 http://deb.debian.org/debian bullseye/main amd64 libmd0 amd64 1.0.3-3 [28.0 kB]
Get:10 http://deb.debian.org/debian bullseye/main amd64 libbsd0 amd64 0.11.3-1 [108 kB]
Get:11 http://deb.debian.org/debian bullseye/main amd64 libedit2 amd64 3.1-20191231-2+b1 [96.7 kB]
Get:12 http://deb.debian.org/debian bullseye/main amd64 libfstrm0 amd64 0.6.0-1+b1 [21.5 kB]
Get:13 http://deb.debian.org/debian bullseye/main amd64 libwslay1 amd64 1.1.1-2 [11.7 kB]
Get:14 http://deb.debian.org/debian bullseye/main amd64 libh2o-evloop0.13 amd64 2.2.5+dfsg2-6 [182 kB]
Get:15 http://deb.debian.org/debian bullseye/main amd64 liblmdb0 amd64 0.9.24-1 [45.0 kB]
Get:16 http://deb.debian.org/debian bullseye/main amd64 libluajit-5.1-common all 2.1.0~beta3+dfsg-5.3 [46.9 kB]
Get:17 http://deb.debian.org/debian bullseye/main amd64 libluajit-5.1-2 amd64 2.1.0~beta3+dfsg-5.3 [241 kB]
Get:18 http://deb.debian.org/debian bullseye/main amd64 libre2-9 amd64 20210201+dfsg-1 [170 kB]
Get:19 http://deb.debian.org/debian bullseye/main amd64 pci.ids all 0.0~2021.02.08-1 [224 kB]
Get:20 http://deb.debian.org/debian bullseye/main amd64 libpci3 amd64 1:3.7.0-5 [62.7 kB]
Get:21 http://deb.debian.org/debian bullseye/main amd64 libsensors-config all 1:3.6.0-7 [32.3 kB]
Get:22 http://deb.debian.org/debian bullseye/main amd64 libsensors5 amd64 1:3.6.0-7 [52.3 kB]
Get:23 http://deb.debian.org/debian bullseye/main amd64 libwrap0 amd64 7.6.q-31 [59.0 kB]
Get:24 http://deb.debian.org/debian bullseye/main amd64 libsnmp-base all 5.9+dfsg-3 [1736 kB]
Get:25 http://deb.debian.org/debian bullseye/main amd64 libsnmp40 amd64 5.9+dfsg-3+b1 [2550 kB]
Get:26 http://deb.debian.org/debian bullseye/main amd64 libsodium23 amd64 1.0.18-1 [161 kB]
debconf: delaying package configuration, since apt-utils is not installed
Fetched 15.2 MB in 0s (67.0 MB/s)
Selecting previously unselected package perl-modules-5.32.
(Reading database ... 9407 files and directories currently installed.)
Preparing to unpack .../00-perl-modules-5.32_5.32.1-4+deb11u2_all.deb ...
Unpacking perl-modules-5.32 (5.32.1-4+deb11u2) ...
Selecting previously unselected package libgdbm6:amd64.
Preparing to unpack .../01-libgdbm6_1.19-2_amd64.deb ...
Unpacking libgdbm6:amd64 (1.19-2) ...
Selecting previously unselected package libgdbm-compat4:amd64.
Preparing to unpack .../02-libgdbm-compat4_1.19-2_amd64.deb ...
Unpacking libgdbm-compat4:amd64 (1.19-2) ...
Selecting previously unselected package libperl5.32:amd64.
Preparing to unpack .../03-libperl5.32_5.32.1-4+deb11u2_amd64.deb ...
Unpacking libperl5.32:amd64 (5.32.1-4+deb11u2) ...
Selecting previously unselected package perl.
Preparing to unpack .../04-perl_5.32.1-4+deb11u2_amd64.deb ...
Unpacking perl (5.32.1-4+deb11u2) ...
Selecting previously unselected package libcap2:amd64.
Preparing to unpack .../05-libcap2_1%3a2.44-1_amd64.deb ...
Unpacking libcap2:amd64 (1:2.44-1) ...
Selecting previously unselected package libcdb1:amd64.
Preparing to unpack .../06-libcdb1_0.78+b1_amd64.deb ...
Unpacking libcdb1:amd64 (0.78+b1) ...
Selecting previously unselected package libmd0:amd64.
Preparing to unpack .../07-libmd0_1.0.3-3_amd64.deb ...
Unpacking libmd0:amd64 (1.0.3-3) ...
Selecting previously unselected package libbsd0:amd64.
Preparing to unpack .../08-libbsd0_0.11.3-1_amd64.deb ...
Unpacking libbsd0:amd64 (0.11.3-1) ...
Selecting previously unselected package libedit2:amd64.
Preparing to unpack .../09-libedit2_3.1-20191231-2+b1_amd64.deb ...
Unpacking libedit2:amd64 (3.1-20191231-2+b1) ...
Selecting previously unselected package libfstrm0:amd64.
Preparing to unpack .../10-libfstrm0_0.6.0-1+b1_amd64.deb ...
Unpacking libfstrm0:amd64 (0.6.0-1+b1) ...
Selecting previously unselected package libwslay1:amd64.
Preparing to unpack .../11-libwslay1_1.1.1-2_amd64.deb ...
Unpacking libwslay1:amd64 (1.1.1-2) ...
Selecting previously unselected package libh2o-evloop0.13:amd64.
Preparing to unpack .../12-libh2o-evloop0.13_2.2.5+dfsg2-6_amd64.deb ...
Unpacking libh2o-evloop0.13:amd64 (2.2.5+dfsg2-6) ...
Selecting previously unselected package liblmdb0:amd64.
Preparing to unpack .../13-liblmdb0_0.9.24-1_amd64.deb ...
Unpacking liblmdb0:amd64 (0.9.24-1) ...
Selecting previously unselected package libluajit-5.1-common.
Preparing to unpack .../14-libluajit-5.1-common_2.1.0~beta3+dfsg-5.3_all.deb ...
Unpacking libluajit-5.1-common (2.1.0~beta3+dfsg-5.3) ...
Selecting previously unselected package libluajit-5.1-2:amd64.
Preparing to unpack .../15-libluajit-5.1-2_2.1.0~beta3+dfsg-5.3_amd64.deb ...
Unpacking libluajit-5.1-2:amd64 (2.1.0~beta3+dfsg-5.3) ...
Selecting previously unselected package libre2-9:amd64.
Preparing to unpack .../16-libre2-9_20210201+dfsg-1_amd64.deb ...
Unpacking libre2-9:amd64 (20210201+dfsg-1) ...
Selecting previously unselected package pci.ids.
Preparing to unpack .../17-pci.ids_0.0~2021.02.08-1_all.deb ...
Unpacking pci.ids (0.0~2021.02.08-1) ...
Selecting previously unselected package libpci3:amd64.
Preparing to unpack .../18-libpci3_1%3a3.7.0-5_amd64.deb ...
Unpacking libpci3:amd64 (1:3.7.0-5) ...
Selecting previously unselected package libsensors-config.
Preparing to unpack .../19-libsensors-config_1%3a3.6.0-7_all.deb ...
Unpacking libsensors-config (1:3.6.0-7) ...
Selecting previously unselected package libsensors5:amd64.
Preparing to unpack .../20-libsensors5_1%3a3.6.0-7_amd64.deb ...
Unpacking libsensors5:amd64 (1:3.6.0-7) ...
Selecting previously unselected package libwrap0:amd64.
Preparing to unpack .../21-libwrap0_7.6.q-31_amd64.deb ...
Unpacking libwrap0:amd64 (7.6.q-31) ...
Selecting previously unselected package libsnmp-base.
Preparing to unpack .../22-libsnmp-base_5.9+dfsg-3_all.deb ...
Unpacking libsnmp-base (5.9+dfsg-3) ...
Selecting previously unselected package libsnmp40:amd64.
Preparing to unpack .../23-libsnmp40_5.9+dfsg-3+b1_amd64.deb ...
Unpacking libsnmp40:amd64 (5.9+dfsg-3+b1) ...
Selecting previously unselected package libsodium23:amd64.
Preparing to unpack .../24-libsodium23_1.0.18-1_amd64.deb ...
Unpacking libsodium23:amd64 (1.0.18-1) ...
Selecting previously unselected package dnsdist.
Preparing to unpack .../25-dnsdist_1.7.1-1pdns.bullseye_amd64.deb ...
Unpacking dnsdist (1.7.1-1pdns.bullseye) ...
Setting up liblmdb0:amd64 (0.9.24-1) ...
Setting up libre2-9:amd64 (20210201+dfsg-1) ...
Setting up pci.ids (0.0~2021.02.08-1) ...
Setting up libsodium23:amd64 (1.0.18-1) ...
Setting up libcdb1:amd64 (0.78+b1) ...
Setting up libsnmp-base (5.9+dfsg-3) ...
Setting up perl-modules-5.32 (5.32.1-4+deb11u2) ...
Setting up libfstrm0:amd64 (0.6.0-1+b1) ...
Setting up libsensors-config (1:3.6.0-7) ...
Setting up libcap2:amd64 (1:2.44-1) ...
Setting up libwrap0:amd64 (7.6.q-31) ...
Setting up libluajit-5.1-common (2.1.0~beta3+dfsg-5.3) ...
Setting up libsensors5:amd64 (1:3.6.0-7) ...
Setting up libpci3:amd64 (1:3.7.0-5) ...
Setting up libmd0:amd64 (1.0.3-3) ...
Setting up libbsd0:amd64 (0.11.3-1) ...
Setting up libgdbm6:amd64 (1.19-2) ...
Setting up libwslay1:amd64 (1.1.1-2) ...
Setting up libedit2:amd64 (3.1-20191231-2+b1) ...
Setting up libluajit-5.1-2:amd64 (2.1.0~beta3+dfsg-5.3) ...
Setting up libgdbm-compat4:amd64 (1.19-2) ...
Setting up libperl5.32:amd64 (5.32.1-4+deb11u2) ...
Setting up libh2o-evloop0.13:amd64 (2.2.5+dfsg2-6) ...
Setting up perl (5.32.1-4+deb11u2) ...
Setting up libsnmp40:amd64 (5.9+dfsg-3+b1) ...
Setting up dnsdist (1.7.1-1pdns.bullseye) ...
Processing triggers for libc-bin (2.31-13+deb11u3) ...
Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages will be upgraded:
  libssl1.1
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 1558 kB of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://security.debian.org/debian-security bullseye-security/main amd64 libssl1.1 amd64 1.1.1n-0+deb11u2 [1558 kB]
debconf: delaying package configuration, since apt-utils is not installed
Fetched 1558 kB in 0s (23.0 MB/s)
(Reading database ... 11654 files and directories currently installed.)
Preparing to unpack .../libssl1.1_1.1.1n-0+deb11u2_amd64.deb ...
Unpacking libssl1.1:amd64 (1.1.1n-0+deb11u2) over (1.1.1n-0+deb11u1) ...
Setting up libssl1.1:amd64 (1.1.1n-0+deb11u2) ...
Processing triggers for libc-bin (2.31-13+deb11u3) ...
Removing intermediate container bd1d7565210c
 ---> 25bb3dccf4ac
Step 14/20 : COPY configs/dnsdist/dnsdist.conf /etc/dnsdist/dnsdist.conf
 ---> 9f2384e65527
Step 15/20 : COPY configs/dnsdist/conf.d/SniDust.conf /etc/dnsdist/conf.d/SniDust.conf
 ---> c3e7808a3d6a
Step 16/20 : COPY configs/sniproxy/sniproxy.conf /etc/sniproxy.conf
 ---> 8f5450c66d59
Step 17/20 : COPY domains.lst /tmp/domains.lst
 ---> f856b5b910c8
Step 18/20 : COPY entrypoint.sh /entrypoint.sh
 ---> b84396273578
Step 19/20 : RUN chmod +x /entrypoint.sh
 ---> Running in 0002b82a40a6
Removing intermediate container 0002b82a40a6
 ---> 5ccdfe7052fd
Step 20/20 : ENTRYPOINT ["/usr/bin/tini", "--", "/entrypoint.sh"]
 ---> Running in 6f9645453ef2
Removing intermediate container 6f9645453ef2
 ---> 461c24b378f5
Successfully built 461c24b378f5
Successfully tagged seji64/snidust:latest`

ubuntu@myproxy-2:~/SniDust$ sudo docker image list
REPOSITORY       TAG       IMAGE ID       CREATED         SIZE
seji64/snidust   latest    461c24b378f5   3 seconds ago   259MB
debian           11-slim   ed595c52174a   2 weeks ago     80.4MB
ubuntu@myproxy-2:~/SniDust$ sudo docker run -dit -e ALLOWED_CLIENTS="127.0.0.1, 171.4.236.109" -e EXTERNAL_IP=185.79.235.218 -p 443:443 -p 80:80 -p 53:5300/udp 461c24b378f5
d576db33afa51be12ba469df95041fe08b46079178ff176fa956490cc060dc8a
docker: Error response from daemon: driver failed programming external connectivity on endpoint sleepy_snyder (b12e27e7da384445be9908bc825686ebbe0c7f186799ad47385ed02c0cbe179d): Error starting userland proxy: listen udp4 0.0.0.0:53: bind: address already in use.

ubuntu@myproxy-2:~/SniDust$ sudo systemctl stop systemd-resolved
ubuntu@myproxy-2:~/SniDust$ sudo systemctl disable systemd-resolved
Removed /etc/systemd/system/multi-user.target.wants/systemd-resolved.service.
Removed /etc/systemd/system/dbus-org.freedesktop.resolve1.service.
ubuntu@myproxy-2:~/SniDust$ sudo docker run -dit -e ALLOWED_CLIENTS="127.0.0.1, 171.4.236.109" -e EXTERNAL_IP=185.79.235.230 -p 443:443 -p 80:80 -p 53:5300/udp 461c24b378f5
3c8a9c9ffb64469e0528e595d031eb4bf5e098f547a409178d6e930742960b4c
ubuntu@myproxy-2:~/SniDust$ sudo docker container list
CONTAINER ID   IMAGE          COMMAND                  CREATED         STATUS         PORTS                                                                                                             NAMES
3c8a9c9ffb64   461c24b378f5   "/usr/bin/tini -- /e…"   5 seconds ago   Up 4 seconds   0.0.0.0:80->80/tcp, :::80->80/tcp, 0.0.0.0:443->443/tcp, :::443->443/tcp, 0.0.0.0:53->5300/udp, :::53->5300/udp   gracious_leakey

Afterwards, I added the DNS server to my network settings on my client and performed a NSLOOKUP for confirming it uses my new DNS server

nslookup google.ch
Server:		185.79.235.230
Address:	185.79.235.230#53

Non-authoritative answer:
Name:	google.ch
Address: 216.58.196.3

For me, it looks like my DNS server is running and is able to resolve the DNS request.
I tried to access Netflix.com in the hope that it will show me the Swiss movie collection. However, it still shows the Thai collection.

Can you provide any guidance on troubleshooting?

Thank you!

ALLOWED_CLIENTS suggestion/request/recommendation

The ALLOWED_CLIENTS in the docker run and compose file that you have specified. Would it make more sense to have a AllowedClients.txt file that you can add/remove entries from and SniDust monitors for changes. This would reduce reloads on the container and allow for scripts to update the file should the ISP change the client address. Also I have not tried it yet, but does the ALLOWED_CLIENTS allow for domain names (ex. sub.domain.com) or domain wildcards (e.x *.domain.com)?

How to debug when a streaming site isn't working properly?

Hey,

First of all, wanted to say thank you for the amazing work. The docker image you created makes spinning up sniproxy and dnsdist so much easier and seamless.

Wanted to get your thoughts on an issue I am running into where a streaming site (canalplus.com) isn't working properly. Here is the observed behavior:

I have added 3 top domains I observed to the domains.lst and it seems more successful than having a domain list with really specific ones coming from SmartDNS services such as ControlD or even just the top domains from that list.
First attempt to watch live TV works perfectly but then switching to a different channel would throw a "Playback error, sorry, a temporary technical problem is preventing access to this programme."
When getting that error message and switching my DNS configuration to another instance of SniDust on a different VPS, LiveTV works again until it doesn't. Switching back to the previous VPS usually works.
Never an issue to watch VoD, just live TV that is finicky

TL;DR I am having some issues to get a streaming site working and wanted to see if you have ideas on how I could debug that?

Thanks so much!

Question: Different location depending on domain/service?

Hello,

I would like to be able to access streaming services from both the UK and France (while not being located in either country), and possibly the US too. And I already have either cloud servers or VPN accesses (that I can run in a Docker container or if needed in a VM to "emulate* a VPS) with valid IPs for all the different services I want to be able to access. I also understand how SniDust works when you only want to spoof one location.

So my question is, if possible how could I route requests through different locations based on domain lists (i.e. UK IP for the BBC for example and French IP for Molotov)?

Thanks in advance for any help or pointers

Installation guide

I am trying to install on DigitalOcean droplet, Ubuntu 20.04
But getting error at line 8 of the script
I did was ./SniDust.git
Am I doing it wrong ?
Please provide me a installation guide 🙏
Also I just want to watch Indian content, how can I add domains ?
Thanks

seji64 / snidust Goto Github PK

snidust's People

Contributors

Stargazers

Watchers

Forkers

snidust's Issues

Recommend Projects

Recommend Topics

Recommend Org