D7000v2 DNS does not work

[evdanil]

hello all

my D7000v2 does not resolve domain names. Any computer connected with DHCP configured cannot open any websites. However if I set up DNS manually to 8.8.8.8 everything works fine. I live with it since September(when I bought it) and configured all devices manually, but recently I had to enable Parental Controls and with this 'feature' enabled any DNS requests to any DNS servers are not passing through. Also DNS server on router itself does not work too! Any dns request sent to router's ip gets ICMP unreachable message meaning there is no server listening or there is firewall rule rejecting connection. I am getting a bit annoyed with this and this is the reason I opened this thread. Is there anyone else experiencing this issue?  Netgear support can you help with this ?

Some logs below:

my router internal ip: 192.168.2.1

my PC requesting dns lookup: 192.168.2.10

tcpdump output:

root@home-pc1]# tcpdump -i eno1 -n "(port 53 or icmp) and host 192.168.2.1"   
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eno1, link-type EN10MB (Ethernet), capture size 262144 bytes
10:45:40.348774 IP 192.168.2.10.55907 > 192.168.2.1.domain: 62331+ A? google.com. (28)
10:45:40.354611 IP 192.168.2.1 > 192.168.2.10: ICMP 192.168.2.1 udp port domain unreachable, length 64
10:45:45.348666 IP 192.168.2.10.55907 > 192.168.2.1.domain: 62331+ A? google.com. (28)
10:45:45.357905 IP 192.168.2.1 > 192.168.2.10: ICMP 192.168.2.1 udp port domain unreachable, length 64

Again I want to re-iterate that this behavior is the same since purchase date, current firmware is: V1.0.0.40_1.0.1, tried to upgrade to .44 with same results, had to revert back to .40 because of some other issues which I can't recall now. 

[antinode]

> my D7000v2 does not resolve domain names. [...]

   My D7000 is a plain/v1, which is different, so I know nothing, but if
there were some global problem with the DNS relay on these things, then
I'd expect almost everyone to have problems, instead of only you.  This
behavior is sufficiently odd that I'd suggest a full ("factory") reset
(and manual reconfiguration), preferably in stages, to determine where
things go wrong.

   How is the DNS configured on the D7000v2?  Are you getting good
DNS-server info from your ISP, or did you configure the router's DNS
manually?  (How?)

   Around here, with Telnet access enabled (I use the program which I
modified, http://antinode.info/nte , but others are available):

# netstat -anp | grep ':53 '
tcp        0      0 10.0.0.1:53             0.0.0.0:*               LISTEN
      2988/dnrd_1
udp        0      0 10.0.0.1:53             0.0.0.0:*                    
      2988/dnrd_1

   It wouldn't be a trivial exercise, but it might be interesting to see
if you have such a process running on yours.  (I'd guess not, which
could be a problem, but what do I know?)

[evdanil]

Hello,

Thanks for your utility, i got into my router and there was no process listening on :53 port on br-lan interface, however there was one listening on tun0

I have VPN service enabled on the router, dnsmasq was executed with following args

dnsmasq -h -n -c 0 -N -z -i br-lan -i tun0 -r /tmp/resolv.conf

i killed it, and started again to see following:

interface br-lan IP address is 192.168.2.1
interface tun0 IP address is 192.168.254.1
bypass unwanted i/f (0xc0a80201)
bypass unwanted i/f (0x7f000001)

It seemed that it had to be listening, but after a check there was still only tun0 interface. 

At the moment I am re-configuring VPN service to check if it resovles the issue

p.s. kudos to you for this utility!

[jimbaxter]

Hi, I had the same problem after I enabled the VPN service.
When I initially enabled it everything was ok, then when I rebooted the router for an unconnected reason then DNS stopped working.

Jim

[evdanil]

Hi Mate,

I ended up disabling VPN :). I can tell that this is the worst customer experience I ever had, we don't get much responses here from official NetGear reps, we don't get fixes soon enough and I can tell that my next router will be NOT NetGear product.