Supervisor still trying to use external google DNS servers

[workingmanrob]

Describe the issue you are experiencing

In my network for *reasons port 53 access to 8.8.8.8 or 8.8.4.4 is blocked at the firewall. In fact this is somewhat due to running the HA wearOS app but there were other reasons.

I will explicitly set dns fallback false on any home assistant instances I setup.. ha dns options --fallback=false For some time - don't ask me when it started - I see log messages reporting failed attempts to reach the 2 google DNS IPs above and I get a little more annoyed until I finally came here to report this.

I was able to track it down on my main system to the docker IP of the supervisor making the request.

Thanks.

What type of installation are you running?

Home Assistant Supervised

Which operating system are you running on?

Debian

Steps to reproduce the issue

1. Block port 53 access to 8.8.8.8 and 8.8.4.4 at the firewall
2. run ha dns options --fallback=false
3. watch the system log for the attempts to reach either of those IP addresses ...

Anything in the Supervisor logs that might be useful for us?

2024-08-06T11:08:48.930850-04:00 hass dockerd[858]: time="2024-08-06T11:08:48.929954488-04:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.17.0.2:47915" dns-server="udp:8.8.8.8:53" error="read udp 172.17.0.2:47915->8.8.8.8:53: read: connection refused" question=";checkonline.home-assistant.io.\tIN\t AAAA"
2024-08-06T11:08:48.931853-04:00 hass dockerd[858]: time="2024-08-06T11:08:48.931346813-04:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.17.0.2:36966" dns-server="udp:8.8.4.4:53" error="read udp 172.17.0.2:36966->8.8.4.4:53: read: connection refused" question=";checkonline.home-assistant.io.\tIN\t A"
2024-08-06T11:08:48.932178-04:00 hass dockerd[858]: time="2024-08-06T11:08:48.931724422-04:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.17.0.2:49486" dns-server="udp:8.8.4.4:53" error="read udp 172.17.0.2:49486->8.8.4.4:53: read: connection refused" question=";checkonline.home-assistant.io.\tIN\t AAAA"
2024-08-06T11:11:16.166472-04:00 hass dockerd[858]: time="2024-08-06T11:11:16.165051473-04:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.17.0.2:53904" dns-server="udp:8.8.8.8:53" error="read udp 172.17.0.2:53904->8.8.8.8:53: read: connection refused" question=";version.home-assistant.io.\tIN\t A"
2024-08-06T11:11:16.168301-04:00 hass dockerd[858]: time="2024-08-06T11:11:16.166267059-04:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.17.0.2:37683" dns-server="udp:8.8.4.4:53" error="read udp 172.17.0.2:37683->8.8.4.4:53: read: connection refused" question=";version.home-assistant.io.\tIN\t A"
2024-08-06T11:11:16.168515-04:00 hass dockerd[858]: time="2024-08-06T11:11:16.166194263-04:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.17.0.2:48484" dns-server="udp:8.8.8.8:53" error="read udp 172.17.0.2:48484->8.8.8.8:53: read: connection refused" question=";version.home-assistant.io.\tIN\t AAAA"

A different system trying to reach the weather..?  Not sure which docker container did this but honestly none should.

2024-08-07T17:17:39.467068-04:00 ott-hass dockerd[762]: time="2024-08-07T17:17:39.465502450-04:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.30.32.3:48368" dns-server="udp:8.8.8.8:53" error="read udp 172.30.32.3:48368->8.8.8.8:53: i/o timeout" question=";dd.weather.gc.ca.\tIN\t AAAA"

System Health information

System Information

version	core-2024.8.0
installation_type	Home Assistant Supervised
dev	false
hassio	true
docker	true
user	root
virtualenv	false
python_version	3.12.4
os_name	Linux
os_version	6.6.31+rpt-rpi-v8
arch	aarch64
timezone	America/Toronto
config_dir	/config

Home Assistant Community Store

GitHub API	ok
GitHub Content	ok
GitHub Web	ok
GitHub API Calls Remaining	5000
Installed Version	1.34.0
Stage	running
Available Repositories	1391
Downloaded Repositories	7
HACS Data	ok

Home Assistant Supervisor

host_os	Debian GNU/Linux 12 (bookworm)
update_channel	stable
supervisor_version	supervisor-2024.08.0
agent_version	1.6.0
docker_version	27.1.1
disk_total	155.6 GB
disk_used	107.8 GB
healthy	true
supported	true
host_connectivity	true
supervisor_connectivity	true
ntp_synchronized	true
virtualization
supervisor_api	ok
version_api	ok
installed_addons	Z-Wave JS (0.6.2), Let's Encrypt (5.0.26), ESPHome (2024.7.3), Piper (1.5.2), Whisper (2.1.2), Alsa & PulseAudio Fix (3.4.1), openWakeWord (1.10.0)

Dashboards

dashboards	5
resources	2
views	14
mode	storage

Recorder

oldest_recorder_run	7 August 2024 at 17:23
current_recorder_run	7 August 2024 at 17:23
estimated_db_size	15585.25 MiB
database_engine	mysql
database_version	10.11.8

Supervisor diagnostics

No response

Additional information

No response