netbird icon indicating copy to clipboard operation
netbird copied to clipboard

Netbird >= 0.40.0 not fowarding type A dns requests to custom nameserver

Open hjweddie opened this issue 6 months ago • 2 comments

Describe the problem

My self-host netbird server use 0.41.3 version and configure custom nameserver with my public server ip(not pubic well known nameserver) and multiple search domains. I use theses custom nameservers configuration to serve private dns record with private ip. Ex: example.com resolve to 172.16.1.1. By the way, example.com can be resolved to public ip in public well known namserver, like 1.1.1.1

I find that with client version >= 0.40.0, client will not forward A dns requests, which match search domains, to my custom nameserver, but CNAME request does forward to my custom nameserver. Finally dig A example.com will output public ip, dig CNAME example.com will output my custom private ip

I also try dig @{custom_nameserver_ip} A example.com, no dns request is forwarded to my nameserver and finally output public ip resolve result

To Reproduce In MacOS 15.4.1

dig @{custom_nameserver_ip} A example.com dig @{custom_nameserver_ip} CNAME example.com

Expected behavior

Netbird client forward type A dns record to custom nameserver and get a private ip result

Are you using NetBird Cloud?

self-host NetBird's control plane.

NetBird version

0.41.3

Is any other VPN software installed?

No VPN softwares installed

Debug output

To help us resolve the problem, please attach the following debug output

netbird status -dA

Peers detail:
{nearly 100 peers}

Events:
  [INFO] SYSTEM (da68af61-afa6-49dd-bd32-52446406ece2)
    Message: Network map updated
    Time: 33 minutes, 44 seconds ago
  [INFO] SYSTEM (decec4ea-c1cb-4c9e-aade-e1e8fc8c7e1b)
    Message: Network map updated
    Time: 33 minutes, 24 seconds ago
  [INFO] SYSTEM (fdaf3f47-1ce0-4d8b-a6c7-9bbfb7b701a6)
    Message: Network map updated
    Time: 33 minutes, 20 seconds ago
  [INFO] SYSTEM (41f54ffe-dc0c-4602-a878-f1ac50937f20)
    Message: Network map updated
    Time: 31 minutes, 51 seconds ago
  [INFO] SYSTEM (fdea5a53-c076-4a45-9636-91862340978e)
    Message: Network map updated
    Time: 26 minutes, 50 seconds ago
  [INFO] SYSTEM (58aca822-da75-4db0-b5c9-51985734ed3b)
    Message: Network map updated
    Time: 21 minutes, 48 seconds ago
  [INFO] SYSTEM (577162ce-fff5-477f-afe7-7a27743ef4ee)
    Message: Network map updated
    Time: 16 minutes, 47 seconds ago
  [INFO] SYSTEM (f09e2dd6-6a09-48c7-8e7b-9018633c4b71)
    Message: Network map updated
    Time: 11 minutes, 46 seconds ago
  [INFO] SYSTEM (68a076f9-bebe-44de-9b7f-834d3a008826)
    Message: Network map updated
    Time: 6 minutes, 41 seconds ago
  [INFO] SYSTEM (be3e501a-89f8-42c5-9270-760991489a75)
    Message: Network map updated
    Time: 1 minute, 25 seconds ago
OS: darwin/arm64
Daemon version: 0.41.3
CLI version: 0.41.3
Management: Connected to https://netbird.anon-cmwwS.domain:443
Signal: Connected to https://netbird.anon-cmwwS.domain:443
Relays:
  [turn:netbird.anon-cmwwS.domain:3478?transport=udp] is Available
Nameservers:
  [198.51.100.4:53] for [anon-cmwwS.domain, anon-4RGdl.domain, anon-ci0I9.domain, anon-ZxFIP.domain, anon-T68Xm.domain, anon-X5zrZ.domain, anon-aCAzh.domain, anon-n6nlZ.domain, anon-ZuLzT.domain, anon-z5SNy.domain, anon-GzHaG.domain, anon-AYxHC.domain, anon-W8xlb.domain, anon-uzdV1.domain, anon-dgvyG.domain] is Available
FQDN: xn--7tqz31f0u5a.netbird.selfhosted
NetBird IP: 100.73.155.105/16
Interface type: Userspace
Quantum resistance: false
Networks: -
Forwarding rules: 0
Peers count: 12/87 Connected

As well as the file created by

netbird debug for 1m -AS

netbird.debug.1565465279.zip

We advise reviewing the anonymized output for any remaining personal information.

Screenshots

Image

Additional context

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • [ ☑️] Checked for newer NetBird versions
  • [ ☑️] Searched for similar issues on GitHub (including closed ones)
  • [ ☑️] Restarted the NetBird client
  • [ ☑️] Disabled other VPN software
  • [ ☑️] Checked firewall settings

hjweddie avatar Apr 19 '25 02:04 hjweddie