This topic created in 3390 days ago, the information mentioned may be changed or developed.
由于权限问题没有搞定，开机启动的程序不能监听 53 端口，用 pf 把 53 端口转发到了 127.0.0.1 的 53 端口，本机使用 127.0.0.1 作为 DNS 可以正常使用，但是局域网其他机器就一直超时
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** 请求 UnKnown 超时
然后在本机上试了一下用局域网的 IP ，结果返回的是：
;; reply from unexpected source: 192.168.50.245#5533, expected 192.168.50.245#53
有办法能解决这个问题吗
pf 配置是这样写的：
rdr pass on lo0 inet proto udp from any to any port 53 -> 127.0.0.1 port 5533
rdr pass on en0 inet proto udp from any to any port 53 -> 127.0.0.1 port 5533
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** 请求 UnKnown 超时
然后在本机上试了一下用局域网的 IP ，结果返回的是：
;; reply from unexpected source: 192.168.50.245#5533, expected 192.168.50.245#53
有办法能解决这个问题吗
pf 配置是这样写的：
rdr pass on lo0 inet proto udp from any to any port 53 -> 127.0.0.1 port 5533
rdr pass on en0 inet proto udp from any to any port 53 -> 127.0.0.1 port 5533
 |
1
linbiaye Jan 20, 2017
不懂 mac ，但是你只做了 DNAT, 还需要 SNAT 。简单的说，别的程序给你的 IP:53 端口发包，你的 dns 用 IP:5353 端口回包。
|
 |
4
millken Jan 20, 2017
不需要监听也可以的，直接使用 pcap 来收发包。
我的 dns 服务器就是这样搞的。 |
 |
5
thekll Jan 21, 2017
redirection 配置可能有问题。
返回信息已经指出你向 port53 发请求，响应的源端口只能是 port53 ，不能是 5353. https://www.openbsd.org/faq/pf/rdr.html |
Select Language