{"action":"created","issue":{"url":"https://api.github.com/repos/systemd/systemd/issues/6076","repository_url":"https://api.github.com/repos/systemd/systemd","labels_url":"https://api.github.com/repos/systemd/systemd/issues/6076/labels{/name}","comments_url":"https://api.github.com/repos/systemd/systemd/issues/6076/comments","events_url":"https://api.github.com/repos/systemd/systemd/issues/6076/events","html_url":"https://github.com/systemd/systemd/issues/6076","id":233234679,"node_id":"MDU6SXNzdWUyMzMyMzQ2Nzk=","number":6076,"title":"After connected to VPN, systemd-resolve still use ISP's DNS server( which was polluted because of regulation )","user":{"login":"joshuafc","id":7185089,"node_id":"MDQ6VXNlcjcxODUwODk=","avatar_url":"https://avatars2.githubusercontent.com/u/7185089?v=4","gravatar_id":"","url":"https://api.github.com/users/joshuafc","html_url":"https://github.com/joshuafc","followers_url":"https://api.github.com/users/joshuafc/followers","following_url":"https://api.github.com/users/joshuafc/following{/other_user}","gists_url":"https://api.github.com/users/joshuafc/gists{/gist_id}","starred_url":"https://api.github.com/users/joshuafc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joshuafc/subscriptions","organizations_url":"https://api.github.com/users/joshuafc/orgs","repos_url":"https://api.github.com/users/joshuafc/repos","events_url":"https://api.github.com/users/joshuafc/events{/privacy}","received_events_url":"https://api.github.com/users/joshuafc/received_events","type":"User","site_admin":false},"labels":[{"id":225812111,"node_id":"MDU6TGFiZWwyMjU4MTIxMTE=","url":"https://api.github.com/repos/systemd/systemd/labels/not-our-bug","name":"not-our-bug","color":"0052cc","default":false},{"id":219550421,"node_id":"MDU6TGFiZWwyMTk1NTA0MjE=","url":"https://api.github.com/repos/systemd/systemd/labels/resolve","name":"resolve","color":"d4c5f9","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":24,"created_at":"2017-06-02T16:25:10Z","updated_at":"2018-10-14T00:57:08Z","closed_at":null,"author_association":"NONE","body":"### Submission type\r\n\r\n<!-- Delete unnecessary option: -->\r\n\r\n - Request for enhancement (RFE)\r\n\r\n<!-- **NOTE:** Do not submit anything other than bug reports or RFEs via the issue tracker! -->\r\n\r\n### systemd version the issue has been seen with\r\n\r\n> systemd 232\r\n+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN\r\n\r\n### Used distribution\r\n\r\n> Ubuntu 17.04   Linux version 4.10.0-21-generic (buildd@lgw01-12) (gcc version 6.3.0 20170406 (Ubuntu 6.3.0-12ubuntu2) ) #23-Ubuntu SMP Fri Apr 28 16:14:22 UTC 2017\r\n\r\n\r\nBecause of the **Internet regulation**, ISP's DNS server can not resolve some domian **correctly**( for example www.google.com www.youtube.com ). Under normal conditions, we use vpn and set the vpn as default internet gateway when needed to access above website. \r\nWhen I start to use Ubuntu 17.04, It is found that when connected to vpn, all internet package transfer through vpn except domain name resolve. Infact, VPN server had tell correct DNS server IP address through DHCP. But systemd-resolve still use ISP's polluted resolve.\r\nAt /etc/resolv.conf, I found that DNS resolve had be taken over by systemd-resolve. There can't find any easy way to tell systemd-resolve to use a specified DNS server, or disable any DNS server according \" systemd-resolve --help \".\r\nWilling to accept guidance to correct my use of systemd-resolve, \r\nIf you can, Please add some necessary feature to systemd-resolve to solve such problem, \r\n\r\n\r\n### In case of bug report: Expected behaviour you didn't see\r\n\r\n> …\r\n\r\n### In case of bug report: Unexpected behaviour you saw\r\n\r\n> …\r\n\r\n### In case of bug report: Steps to reproduce the problem\r\n\r\n> …\r\n"},"comment":{"url":"https://api.github.com/repos/systemd/systemd/issues/comments/429587459","html_url":"https://github.com/systemd/systemd/issues/6076#issuecomment-429587459","issue_url":"https://api.github.com/repos/systemd/systemd/issues/6076","id":429587459,"node_id":"MDEyOklzc3VlQ29tbWVudDQyOTU4NzQ1OQ==","user":{"login":"mdunc","id":3773551,"node_id":"MDQ6VXNlcjM3NzM1NTE=","avatar_url":"https://avatars1.githubusercontent.com/u/3773551?v=4","gravatar_id":"","url":"https://api.github.com/users/mdunc","html_url":"https://github.com/mdunc","followers_url":"https://api.github.com/users/mdunc/followers","following_url":"https://api.github.com/users/mdunc/following{/other_user}","gists_url":"https://api.github.com/users/mdunc/gists{/gist_id}","starred_url":"https://api.github.com/users/mdunc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mdunc/subscriptions","organizations_url":"https://api.github.com/users/mdunc/orgs","repos_url":"https://api.github.com/users/mdunc/repos","events_url":"https://api.github.com/users/mdunc/events{/privacy}","received_events_url":"https://api.github.com/users/mdunc/received_events","type":"User","site_admin":false},"created_at":"2018-10-14T00:57:08Z","updated_at":"2018-10-14T00:57:08Z","author_association":"NONE","body":"Alright, I've been able to reproduce the problem in Ubuntu 18.10 after manually adding mycompany.com to the search domain list in the VPN connection with `nm-connection-editor`.  \r\n\r\nHere is a good DNS lookup happening over the VPN:\r\n```\r\n$ nslookup confluence.mycompany.com\r\nServer:\t\t127.0.0.53\r\nAddress:\t127.0.0.53#53\r\n\r\nNon-authoritative answer:\r\nName:\tconfluence.mycompany.com\r\nAddress: 10.200.xxx.xxx\r\n```\r\nHere is another DNS lookup made immediately after which returns an IP as if it were looked up on the ISP's DNS server:\r\n\r\n```\r\n$ nslookup jira.mycompany.com\r\nServer:\t\t127.0.0.53\r\nAddress:\t127.0.0.53#53\r\n\r\nNon-authoritative answer:\r\nName:\tjira.mycompany.com\r\nAddress: 23.29.xxx.xxx\r\n```\r\nHere is the log from systemd-resolved:\r\n```\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Got DNS stub UDP query packet for id 7408\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Looking up RR for jira.mycompany.com IN A.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Cache miss for jira.mycompany.com IN A\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Transaction 15460 for <jira.mycompany.com IN A> scope dns on vpn0/*.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Using feature level UDP+EDNS0 for transaction 15460.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Using DNS server 10.10.7.10 for transaction 15460.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Sending query packet with id 15460.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Cache miss for jira.mycompany.com IN A\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Transaction 43142 for <jira.mycompany.com IN A> scope dns on enp0s31f6/*.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Using feature level UDP+EDNS0 for transaction 43142.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Using DNS server 192.168.1.1 for transaction 43142.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Sending query packet with id 43142.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Processing query...\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Processing incoming packet on transaction 43142 (rcode=SUCCESS).\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Added positive unauthenticated cache entry for jira.mycompany.com IN A 6537s on */INET/192.168.1.1\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Transaction 43142 for <jira.mycompany.com IN A> on scope dns on enp0s31f6/* now complete with <success> from network (unsigned).\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Freeing transaction 15460.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Sending response packet with id 7408 on interface 1/AF_INET.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Freeing transaction 43142.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Got DNS stub UDP query packet for id 2394\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Looking up RR for jira.mycompany.com IN AAAA.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Cache miss for jira.mycompany.com IN AAAA\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Transaction 16591 for <jira.mycompany.com IN AAAA> scope dns on vpn0/*.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Using feature level UDP+EDNS0 for transaction 16591.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Using DNS server 10.10.7.10 for transaction 16591.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Sending query packet with id 16591.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Cache miss for jira.mycompany.com IN AAAA\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Transaction 36903 for <jira.mycompany.com IN AAAA> scope dns on enp0s31f6/*.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Using feature level UDP+EDNS0 for transaction 36903.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Using DNS server 192.168.1.1 for transaction 36903.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Sending query packet with id 36903.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Processing query...\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Processing incoming packet on transaction 36903 (rcode=SUCCESS).\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Not caching negative entry without a SOA record: jira.mycompany.com IN AAAA\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Transaction 36903 for <jira.mycompany.com IN AAAA> on scope dns on enp0s31f6/* now complete with <success> from network (unsigned).\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Freeing transaction 16591.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Sending response packet with id 2394 on interface 1/AF_INET.\r\nOct 13 20:52:23 mark-Latitude-E7470 systemd-resolved[7979]: Freeing transaction 36903.\r\n```\r\n\r\nSo it's actually doing the lookup twice for some reason.  Once from the VPN and again from the ISP.  This lookup should _never_ be going over the ISP's DNS server when I'm connected to the VPN.  It then ignores the result from the VPN and only returns the result from the ISP.  \r\n"}}
{"actor":{"display_login":"mdunc"}}