Replies: 8 comments 23 replies
-
|
right now I've got mine back on the internet so I haven't been able to check. |
Beta Was this translation helpful? Give feedback.
-
|
right now, i've got a test v3 camera setup, i installed dnsmasq on it, and i see dns queries to c1ybkrkbr1j10x.credentials.iot.us-west-2.amazonaws.com about every 5 seconds. |
Beta Was this translation helpful? Give feedback.
-
|
maybe thisis something we can add on startup, also check for traffic on port 10001, that is weirdly enough what it floods out on, according to this doc here: that port is used by wyze for p2p live streaming, yet I see nothing using it on mine...im curious what would happen to the camera if i just flat out block that port on outbound. |
Beta Was this translation helpful? Give feedback.
-
|
do you have any tcpdump logs from port 10001? I have no traffic on that port, even with P2P streaming active. |
Beta Was this translation helpful? Give feedback.
-
|
Nothing at this moment, can quickly capture one, though i am experimenting with that port as mine always has a few unreplied connections out on it. |
Beta Was this translation helpful? Give feedback.
-
|
A solution I have found to stop the dns queries for certain:
this stops them, the query never makes it to the dns server. |
Beta Was this translation helpful? Give feedback.
-
|
Sorry for delay, here is the pcap :) note I had a stream running over 5g interestingly enough as this was streaming... |
Beta Was this translation helpful? Give feedback.
-
|
Im also wondering how I could potentially make a script to setup this dns entry, this way if the IP ever changes the camera would just quietly detect that on boot and be able to update accordingly. |
Beta Was this translation helpful? Give feedback.
-
|
Is there a way to make this solution more permanent? I find this doesn't survive reboots and even without reboots it randomly stops working and has to be reapplied. |
Beta Was this translation helpful? Give feedback.
-
|
yes, i will add a function to wz_mini.conf to prevent dns flooding, its a planned feature |
Beta Was this translation helpful? Give feedback.
-
|
latest release has the config option set this to true to enable a local caching dns server, no more flooding to your network. |
Beta Was this translation helpful? Give feedback.
-
|
thank you!! I'll upgrade my cameras and test it out asap |
Beta Was this translation helpful? Give feedback.
-
|
any feedback? =D |
Beta Was this translation helpful? Give feedback.
-
|
So far no news is good news! I upgraded all my cameras yesterday (both V3 and V2) and so far everything is working fine. Pihole also doesn't report the AWS DNS calls so that's good. Great work! |
Beta Was this translation helpful? Give feedback.
-
some usecase would be great how to setup the dnsmasq.conf
|
Beta Was this translation helpful? Give feedback.
-
|
you mean how to turn it on? Or how this works technically? to turn it on, it's a parameter you can add to your wz_mini.conf file |
Beta Was this translation helpful? Give feedback.
-
|
right, @Vendo232 just add that to your config on the latest wz_mini version. Make sure you also disable any previous dns related stuff you were doing in any scripts, as to not interfere. If you want to use your pihole's upstream dns, just edit no other configuration is required. |
Beta Was this translation helpful? Give feedback.
-
|
ah i didn't realize the nameservers are hardcoded now in the dnsmasq file. I'll update mine to point to my pihole to confirm the DNS flooding stopped |
Beta Was this translation helpful? Give feedback.
-
|
any flooding should hit dnsmasq and not go out of the camera |
Beta Was this translation helpful? Give feedback.
-
|
true, but if the nameserver isn't pointing to the pihole I have no way of confirming. Unfortunately I don't have a USG or any other type of packet identification service |
Beta Was this translation helpful? Give feedback.
-
|
after updating the resolv.dnsmasq to point to my pihole, I can see there are still DNS queries happenening to the AWS domain (c1ybkrkbr1j10x.credentials.iot.us-west-2.amazonaws.com). They don't seem as regular as every 5 seconds now, but they still occur. This happens on one of the cameras more than the others One other camera also pinging google and wyze a lot which didn't happen before...
So far I haven't been able to figure out why the camera behaviour isn't consistent. |
Beta Was this translation helpful? Give feedback.
-
|
try adding:
to the bottom of |
Beta Was this translation helpful? Give feedback.
-
|
I also just released a new update to wz_mini, i patched dnsmasq to allow min-cache-ttl values up to 86400 (1 day), so it will only ask for the domain name to the upstream server, once a day. Without the new version, the max can only be set up to 3600 (1 hour) |
Beta Was this translation helpful? Give feedback.
-
|
i noticed the wz_mini/etc/resolv.dnsmasq file does not survive upgrade (at least this morning's update). I have edit the nameserver again.. i was wondering why the cameras went silent all day on the pihole |
Beta Was this translation helpful? Give feedback.
-
|
all files inside the wz_mini folder, except for etc/configs and etc/ssh and etc/rc.local.d are replaced with the package versions. just fyi |
Beta Was this translation helpful? Give feedback.
-
|
as a future feature request, can we have some parameters in the wz_mini.conf file to put in custom nameservers? |
Beta Was this translation helpful? Give feedback.
-
|
@Vendo232 the latest version supports the hosts file |
Beta Was this translation helpful? Give feedback.
-
does anyone still experience this issue? dns flooding/spamming on their networks
Beta Was this translation helpful? Give feedback.
All reactions