Туннель DNS в TCP с использованием йода - PullRequest
0 голосов
/ 25 февраля 2019

Я пытаюсь туннелировать трафик TCP через протокол DNS, используя йод на сервере и клиенте.это моя конфигурация имени хоста:

t1              IN      NS      t1ns.mydomain.com. 
t1ns            IN      A       SERVER_IP

сервер йода:

sudo iodined -f -c -P password 10.0.1.1 t1.mydomain.com &

при подключении с помощью клиента йода:

sudo iodine -f -P password t1.mydomain.com &

вывод:

    [2] 3379
root@elhadj-Lenovo-G50-80:/home/elhadj# Opened dns1
Opened IPv4 UDP socket
Sending DNS queries for t1.tewsila.com to 127.0.0.53
Autodetecting DNS query type (use -T to override).iodine: Got NOTIMP as reply: server does not support our request
...iodine: Got NOTIMP as reply: server does not support our request
..iodine: Got NOTIMP as reply: server does not support our request
.
Using DNS type TXT queries
Version ok, both using protocol v 0x00000502. You are user #1
Setting IP of dns1 to 10.0.1.3
Setting MTU of dns1 to 1130
Server tunnel IP is 10.0.1.1
Testing raw UDP data to the server (skip with -r)
Server is at 172.31.17.74, trying raw login: ....failed
Using EDNS0 extension
Switching upstream to codec Base128
Server switched upstream to codec Base128
Autodetecting downstream codec (use -O to override)
Switching downstream to codec Raw
Server switched downstream to codec Raw
Switching to lazy mode for low-latency
Server switched to lazy mode
Autoprobing max downstream fragment size... (skip with -m fragsize)
..768 ok.. .1152 ok.. ...1344 not ok.. ...1248 not ok.. ...1200 not ok.. 1176 ok.. ...1188 not ok.. will use 1176-2=1174
Setting downstream fragment size to max 1174...
Connection setup complete, transmitting data.

также я получаю эту ошибку:

iodine: Got SERVFAIL as reply: server failed or recursion timeout

я могу подключиться к серверу через ssh:

ssh -i test.pem ubuntu@10.0.1.1 -D 5000

это работает:

curl --socks5-hostname 127.0.0.1:5000 http://httpbin.org/ip

но ничего больше не работает.

...