Centroid.EU Blog

(this blog is mostly encrypted - adults only)

Previous Page

Making use of delphinusdnsd regions (for logs)

March 31th, 2018

Today I turned on regions on my delphinusdnsd running on omega.virgostar.net. This is only useful for logging and statistics, but it allows me to give an indicator right away what region a query for my dns service comes from. I'll give you an example log:

Mar 31 16:23:01 omega delphinusdnsd[42119]: request on descriptor 12 interface \
"" from (ttl=57, region=2) for "psi.virgostar.net." \
type=A(1) class=1, edns0, dnssecok, answering "psi.virgostar.net." (46/235)
Mar 31 16:23:01 omega delphinusdnsd[42119]: request on descriptor 16 interface \
"2001:19f0:6c00:9041:5400:ff:fe11:3332" from 2a01:4f8:0:a104::add:1b (ttl=54, \
region=8) for "psi.virgostar.net." type=AAAA(28) class=1, edns0, dnssecok, \
answering "psi.virgostar.net." (46/247)
for example the above two logs are a typical delphinusdnsd log that I log from recursive nameservers that look up my services. As you can see there is a region code 2 and 8. When I cross reference that to my regions file that would be:
region "RIPE[2]" {
region "RIPE6[8]" {
So from the European region. I can go deeper for a /24 as well, but it's costly because every IP lookup goes through a singly linked list and does a comparison for netmask. So it's best to stay on the major regions which are usually continental.

The data for making these region lists I got from IANA and are publically available. I'm not too worried about spying as this is really very coarse logging. Also most end-users use a resolving recursor (a proxy) to get their DNS so it doesn't reveal them per se. I have also made this list publically available here (delphinusdns.regions).

Happy Easter!


New router at home

March 25th, 2018

I have received the Ubiquiti Unifi Security Gateway Model USG, from the shop where I bought it. First time at poweron I installed OpenBSD on it. I required a serial console cable (cisco cable) and an ethernet cable to perform the netboot (bootstrap). Here is the commands I used that worked for me:

boot, press a key to break into the prompt...
# dhcp
# tftpboot 0 bsd.rd
# bootoctlinux rootdev=rd0 coremask=0x3
then install OpenBSD via HTTP from zeta.  I called this new box 'eta'

I want to provide you the dmesg of this box:

Copyright (c) 1982, 1986, 1989, 1991, 1993
        The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2018 OpenBSD. All rights reserved.  https://www.OpenBSD.org

OpenBSD 6.3 (GENERIC.MP) #0: Sat Mar 24 03:50:49 UTC 2018
real mem = 536870912 (512MB)
avail mem = 523862016 (499MB)
mainbus0 at root: board 20004 rev 0.16
cpu0 at mainbus0: CN50xx CPU rev 0.1 500 MHz, Software FP emulation
cpu0: cache L1-I 32KB 4 way D 16KB 64 way, L2 128KB 8 way
cpu1 at mainbus0: CN50xx CPU rev 0.1 500 MHz, Software FP emulation
cpu1: cache L1-I 32KB 4 way D 16KB 64 way, L2 128KB 8 way
clock0 at mainbus0: int 5
iobus0 at mainbus0
simplebus0 at iobus0: "soc"
octciu0 at simplebus0
cn30xxsmi0 at simplebus0
com0 at simplebus0: ns16550a, 64 byte fifo
com0: console
dwctwo0 at iobus0 base 0x1180068000000 irq 56
usb0 at dwctwo0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "Octeon DWC2 root hub" rev 2.00/1.00 \
addr 1
octrng0 at iobus0 base 0x1400000000000 irq 0
cn30xxgmx0 at iobus0 base 0x1180008000000
cnmac0 at cn30xxgmx0: RGMII, address fc:ec:da:04:8d:68
atphy0 at cnmac0 phy 7: AR8035 10/100/1000 PHY, rev. 2
cnmac1 at cn30xxgmx0: RGMII, address fc:ec:da:04:8d:69
atphy1 at cnmac1 phy 6: AR8035 10/100/1000 PHY, rev. 2
cnmac2 at cn30xxgmx0: RGMII, address fc:ec:da:04:8d:6a
atphy2 at cnmac2 phy 5: AR8035 10/100/1000 PHY, rev. 2
/dev/ksyms: Symbol table not valid.
umass0 at uhub0 port 1 configuration 1 interface 0 "vendor 0x13fe UDinfo UF2 \
4GB" rev 2.00/1.00 addr 2
umass0: using SCSI over Bulk-Only
scsibus0 at umass0: 2 targets, initiator 0
sd0 at scsibus0 targ 1 lun 0: <, UDinfo UF2 4GB, PMAP> SCSI4 0/direct removable serial.13fe420077C9177D2781
sd0: 3824MB, 512 bytes/sector, 7831552 sectors
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
boot device: sd0
root on sd0a (32485cbbbe75c57b.a) swap on sd0b dump on sd0b
WARNING: No TOD clock, believing file system.

Anyhow that's it. I'm very happy so far. Now I'll run a few benches on this new router. Who knows maybe it's some sort of super-computer (hehe). Thanks goes out to visa and the entire octeon team at OpenBSD for making this possible.


Donated 30 EUR to F3Netze

March 25th, 2018

I have donated 30 EUR for this reason. This brings my yearly donations to F3Netze to 50 EUR.


#deletefacebook, when are you coming?

March 25th, 2018

I left facebook in 2011. I can't promise you, you won't miss your friends. But I can promise you, your data is more in control by you without facebook.


Ordered 2 Power Supplies for Soekris 6501

March 23rd, 2018

I have ordered these from soekris.eu which still carry stock. Remember soekris as a company closed their shop around May 11th, 2017. I highly suspect the powersupply in the case has dead/leaking capacitors since I hear a humming sound from the undead soekris. I'm hoping that if the internal powersupply doesn't work out that I'll be able to transplant the 6501 into the portable case and use the external power supply. Here is hoping it'll work out.


I have ordered three books

March 21st, 2018

This brings my books to eight this year so far. I usually try to stay under 15 per year, so this is half way. I have ordered:

  • Linux Kernel Development (Developer's Library) - Love, Robert
  • AIX 7.2, PowerVM - UNIX, Virtualization, and Security. An administrator's guide. - Biedron, Sebastian
  • Linux Device Drivers - Corbet, Jonathan,Rubini, Alessandro,Kroah-Hartman, Greg
This will keep me busy for a while. The AIX book is interesting because I'm currently learning this OS.


Tomorrow is Equinox

March 19th, 2018

Tomorrow is the march equinox. This marks officialy the start of spring in the northern hemisphere. In Germany we have snow on teh ground still. This is interesting.


Happy Pi day

March 14th, 2018

Today in America, is Pi day. Because I'm on the Internet it's hard to avoid it, even though I live in Germany. I even saw a guy with a pirate hat this morning. That's when it dawned on me that it was Pi day.


dd-convert has been replaced with dddctl

March 3rd, 2018

The signing tool dd-convert in delphinusdnsd has been replaced with the tool dddctl. The particular signing function can be achieved with dddctl sign ... Goodbye dd-convert, thanks for a great time! All makefiles should be updated to make dddctl as of tonights snapshot.


Performed a ZSK rollover on dtschland.eu with delphinusdnsd

March 3rd, 2018

With the new tool "dddctl" I have performed the key rollover. delphinusdnsd had to be patched minutely to allow more dnskeys and less rrsigs at the same time. I'm very happy with this change. I'll be monitoring this for a bit and then I'M going to see if I can do a KSK or even an algorithm key rollover. Should be interesting.


Next Page


RSS Feed

Click here for RSS

On this day in

Other links

Have feedback?

By clicking on the header of an article you will be served a cookie. If you do not agree to this do not click on the header. Thanks!

Using a text-based webbrowser?

... such as lynx? Welcome back it's working again for the time being.

Older Blog Entries

Powered by BCHS