AdGuardHome icon indicating copy to clipboard operation
AdGuardHome copied to clipboard

AdGuardHome is unable to response to query type ANY or ALL

Open Marsupilani opened this issue 3 years ago • 3 comments

When I try the following nslookup server <AdguardHomeServerIP> set q=any (or set q=ALL) <FQDN>

I got *** [<AdguardHomeServerIP>] can't find <FQDN>: Not implemented

When I use a 'real' DNS-Server it works as designed...

Marsupilani avatar Jul 13 '22 18:07 Marsupilani

AFAIK, the DNS RFCs do not mandate that QTYPE=any be answered. And due to RFC 8482, what you see may be by design.

It's also worth pointing out that while some large DNS providers do provide answers to ANY queries, others such as CloudFlare, do not. Or it doesn't appear so when using interactive nslookup and Cloudflare's IPs for the server.

For a more in depth discussion, I recommend the following: https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any/

> set q=any
> server 1.1.1.1
Default server: 1.1.1.1
Address: 1.1.1.1#53

> set all
Default server: 1.1.1.1
Address: 1.1.1.1#53

Set options:
  novc			nodebug		nod2
  search		recurse
  timeout = 0		retry = 3	port = 53	ndots = 1
  querytype = any     	class = IN
  srchlist =

> cisco.com
Server:		1.1.1.1
Address:	1.1.1.1#53

** server can't find cisco.com: NOTIMP

> server 1.0.0.1
Default server: 1.0.0.1
Address: 1.0.0.1#53

> cisco.com
Server:		1.0.0.1
Address:	1.0.0.1#53

** server can't find cisco.com: NOTIMP

> set q=a

> cisco.com
Server:		1.0.0.1
Address:	1.0.0.1#53

Non-authoritative answer:
Name:	cisco.com
Address: 72.163.4.185

cyb3rz3us avatar Jul 13 '22 22:07 cyb3rz3us

I believe an update was added not long ago where ANY and ALL were removed as an anti DDoS mechanism.

L8X avatar Jul 27 '22 10:07 L8X

@Marsupilani, hello. Please take a look at the dns.refuse_any setting in the configuration file. It's the one responsible for processing ANY requests. If that helped?

EugeneOne1 avatar Jul 27 '22 10:07 EugeneOne1

Closing since there was no response.

ainar-g avatar Aug 10 '23 13:08 ainar-g