Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

My ISP router DNS forwarder filters 127.0.0.1 by default #166

Open
abitmore opened this issue Jun 9, 2021 · 14 comments
Open

My ISP router DNS forwarder filters 127.0.0.1 by default #166

abitmore opened this issue Jun 9, 2021 · 14 comments

Comments

@abitmore
Copy link
Member

abitmore commented Jun 9, 2021

$ nslookup local.get-beet.io 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Non-authoritative answer:
*** Can't find local.get-beet.io: No answer

No sure what the consequence is or how serious the issue is.

I think it's a common issue. Everyone using the same type of device may encounter the same issue. Asking everyone to change their default DNS settings is not the solution IMHO.

@dls-cipher
Copy link

I'm not sure about this, but have you tried adding
beet.bitshares.org 127.0.0.1
in hosts file in OS ?

@abitmore
Copy link
Member Author

Sure I know how to work around locally. But it's not the key point of this issue. New users will likely simply give up if an app does not work.

Asking everyone to change their default DNS settings is not the solution IMHO.

@sschiessl-bcp
Copy link
Collaborator

sschiessl-bcp commented Jun 17, 2021

Is 192.168.0.1 the IP of your local machine that woudl run beet in that case?

@clockworkgr
Copy link
Member

Check if it does it for all localhost addresses or just 127.0.0.1....(i.e. 127.0.0.2 or 3 or 4 etc)

@abitmore
Copy link
Member Author

Is 192.168.0.1 the IP of your local machine that woudl run beet in that case?

192.168.0.1 is my modem / router / WiFi AP with built-in DHCP server and DNS forwarder - the default settings.

Interestingly,

$ nslookup localhost 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Name:	localhost
Address: 127.0.0.1

$ nslookup localhost123 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Non-authoritative answer:
*** Can't find localhost123: No answer

$ nslookup local.get-beet.io 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Non-authoritative answer:
*** Can't find local.get-beet.io: No answer

$ nslookup loca.get-beet.io 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

** server can't find loca.get-beet.io: NXDOMAIN

$ nslookup get-beet.io 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Non-authoritative answer:
Name:	get-beet.io
Address: 185.199.111.153
Name:	get-beet.io
Address: 185.199.108.153
Name:	get-beet.io
Address: 185.199.110.153
Name:	get-beet.io
Address: 185.199.109.153

@dls-cipher
Copy link

Is 192.168.0.1 the IP of your local machine that woudl run beet in that case?

192.168.0.1 is my modem / router / WiFi AP with built-in DHCP server and DNS forwarder - the default settings.

Interestingly,

$ nslookup localhost 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Name:	localhost
Address: 127.0.0.1

$ nslookup localhost123 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Non-authoritative answer:
*** Can't find localhost123: No answer

$ nslookup local.get-beet.io 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Non-authoritative answer:
*** Can't find local.get-beet.io: No answer

$ nslookup loca.get-beet.io 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

** server can't find loca.get-beet.io: NXDOMAIN

$ nslookup get-beet.io 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Non-authoritative answer:
Name:	get-beet.io
Address: 185.199.111.153
Name:	get-beet.io
Address: 185.199.108.153
Name:	get-beet.io
Address: 185.199.110.153
Name:	get-beet.io
Address: 185.199.109.153

I'm not quite sure why you still getting get-beet.io as response when we updated it for a new domain ... hmmm

Have you tried lately to use it ?

@abitmore
Copy link
Member Author

abitmore commented Aug 3, 2021

$ nslookup beet.bitshares.org
Server:		127.0.0.53
Address:	127.0.0.53#53

Non-authoritative answer:
*** Can't find beet.bitshares.org: No answer

$ nslookup beet.bitshares.org 192.168.0.1
Server:		192.168.0.1
Address:	192.168.0.1#53

Non-authoritative answer:
*** Can't find beet.bitshares.org: No answer

As I've said, the point of this issue is not what domain name you are using in the code, but what the IP address is used.

@grctest
Copy link
Contributor

grctest commented Sep 9, 2022

Alternatively perhaps there are tunneling solutions which can address this issue? It does introduce risk as the traffic between app and beet wallet would be proxied.

@grctest
Copy link
Contributor

grctest commented Sep 13, 2022

Might any of these tunneling solutions resolve your https localhost routing issues? https://github.com/anderspitman/awesome-tunneling

@abitmore
Copy link
Member Author

abitmore commented Sep 13, 2022

@grctest thanks for your suggestion. Technically I have many options to solve the issue for myself, however it's just me. As mentioned in OP,

I think it's a common issue. Everyone using the same type of device may encounter the same issue. Asking everyone to change their default DNS settings is not the solution IMHO.

In other words, what I was looking for is a solution for average end users, but not developers.

@grctest
Copy link
Contributor

grctest commented Sep 21, 2022

We could allow the user to select a preferred communications method (Either HTTPS+get-beet.io || HTTP).

Selecting HTTP communications preference would solve OP issue.

HTTP only is less secure, but it's over localhost not through ISP so middleman risk is low & so HTTPS justification is lessened.

We could also look into some form of URI or Deeplinking as a completely optional alternative communications method to websockets.

@abitmore
Copy link
Member Author

We use HTTPS for beet, because if the user is on a HTTPS page already, (IIRC) the browser will refuse to connect to beet using HTTP.

@grctest
Copy link
Contributor

grctest commented Sep 13, 2023

With the new TOTP, Raw Deeplink, QR codes and Local JSON upload features, perhaps we can now close this issue?

Users with the localhost blockage can use the above features instead of beet comms over wss.

@grctest
Copy link
Contributor

grctest commented Mar 10, 2024

The latest beeteos release has a dedicated page for web requests, meaning that the ISP blocked ip address and ports will not be launched/opened unless you explicitly navigate to the web request page. https://github.com/beetapp/beeteos

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants