Flood of DNS requests to NTP server
Flood of DNS requests to NTP server
Hi,
Since the last firmware update, I can see a huge increase in DNS requests coming from the Deco units (M9 plus).
In fact, every second (!) on average there are multiple requests to eu.pool.ntp.org. My logs are being flooded by this.
I know this is an NTP server used for time synchronisation, but it is not normal to do this multiple times per second. More like once every hour.
A small excerpt from my Pi-Hole logs:
Jun 3 14:27:52 dnsmasq[546]: query[AAAA] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:52 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:52 dnsmasq[546]: query[A] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:52 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:53 dnsmasq[546]: query[AAAA] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:53 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:53 dnsmasq[546]: query[A] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:53 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:53 dnsmasq[546]: query[AAAA] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:53 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:53 dnsmasq[546]: query[A] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:53 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:58 dnsmasq[546]: query[AAAA] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:58 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:58 dnsmasq[546]: query[A] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:58 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:59 dnsmasq[546]: query[AAAA] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:59 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:59 dnsmasq[546]: query[A] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:59 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:59 dnsmasq[546]: query[AAAA] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:59 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN Jun 3 14:27:59 dnsmasq[546]: query[A] eu.pool.ntp.org from 192.168.1.xxx Jun 3 14:27:59 dnsmasq[546]: cached eu.pool.ntp.org is NXDOMAIN
I have three Deco units installed and they are all making these silly requests.
Does anyone else experience the same?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi, glad to know it works.
BTW, the build-in NTP server will be corrected in the next 1.5.0 firmware, please keep an eye on the newer firmware update on your Deco app.
Just let us know if you have any other inquiries.
Good day~
- Copy Link
- Report Inappropriate Content
How long? I discovered this problem with my V2 over a year ago. I have contacted the TP link Neterland. They don't know about this problem. They don't know anything about Deco at all. That seems an exaggeration? They really don't know anything about Deco. It is me.
This problem is a serious problem, but you make it look like it isn't.
You don't take your customers seriously.
It turns out that you are in the business of sales. You are not taking the reports seriously.
Example:
2020-12-14 10:50:12 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:50:06 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:50:06 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:50:00 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.2ms) | Blacklist |
2020-12-14 10:50:00 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.2ms) | Blacklist |
2020-12-14 10:49:54 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:49:54 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:49:48 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:49:48 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:49:42 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:49:42 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:49:36 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:49:36 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.6ms) | Blacklist |
2020-12-14 10:49:30 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:49:30 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:49:24 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:49:24 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:49:18 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:49:18 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:49:12 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:49:12 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:49:06 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:49:06 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.6ms) | Blacklist |
2020-12-14 10:49:00 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.2ms) | Blacklist |
2020-12-14 10:49:00 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.2ms) | Blacklist |
2020-12-14 10:48:54 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:48:54 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.6ms) | Blacklist |
2020-12-14 10:48:48 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:48:48 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:48:42 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:48:42 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:48:36 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:48:36 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:48:30 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:48:30 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:48:24 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:48:24 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:48:18 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:48:18 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.6ms) | Blacklist |
2020-12-14 10:48:12 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:48:12 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:48:06 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.4ms) | Blacklist |
2020-12-14 10:48:06 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
2020-12-14 10:48:00 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.2ms) | Blacklist |
2020-12-14 10:48:00 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.2ms) | Blacklist |
2020-12-14 10:47:54 | A | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.6ms) | Blacklist |
2020-12-14 10:47:54 | AAAA | eu.pool.ntp.org | 192.168.0.157 | OK (cached) | NXDOMAIN (0.5ms) | Blacklist |
- Copy Link
- Report Inappropriate Content
How long does TP-link take to respond?
- Copy Link
- Report Inappropriate Content
Hi,
Thank you very much for your time and patience.
The firmware 1.5.x has fixed this issue already and please make sure that you have updated to the latest firmware already.
Thanks a lot for your understanding and support.
- Copy Link
- Report Inappropriate Content
Can @TP-Link also explain me why a Deco is contacting to Facebook, YouTube, LinkedIn, Live.com and Reddit.com? This is what Deco also does when trying to contact eu.pool.ntp.org. See more on this topic: https://community.tp-link.com/en/home/forum/topic/243290
- Copy Link
- Report Inappropriate Content
Good day,
Thank you very much for your kind reply
In order to test the internet connection, Deco would try to resolve these domain names and the LED light would come green once getting the correct response from these domain names.
it would not send any private information to these websites.
Thanks a lot for your understanding and support.
- Copy Link
- Report Inappropriate Content
@TP-Link, if I connect a server they see my IP address right? If so, my private is gone.
- Copy Link
- Report Inappropriate Content
@Wobbo I expected this. TP-link does not answer and ignores topics like this.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 4730
Replies: 18
Voters 0
No one has voted for it yet.