Deco M4R overriding DNS results
Something very strange is happening with DNS when using Deco M4R network.
Using dig connected directly to the my isp router ( bypassing Deco M4 ) I get:
dig www.youtube.com @8.8.8.8
; <<>> DiG 9.10.6 <<>> www.youtube.com @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3121
;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.youtube.com. IN A
;; ANSWER SECTION:
www.youtube.com. 16471 IN CNAME youtube-ui.l.google.com.
youtube-ui.l.google.com. 153 IN A 216.58.211.46
youtube-ui.l.google.com. 153 IN A 216.58.201.174
youtube-ui.l.google.com. 153 IN A 216.58.215.142
youtube-ui.l.google.com. 153 IN A 172.217.17.14
youtube-ui.l.google.com. 153 IN A 172.217.168.174
youtube-ui.l.google.com. 153 IN A 216.58.211.238
;; Query time: 27 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sun Dec 20 03:22:35 WET 2020
;; MSG SIZE rcvd: 174
So it is giving the correct response with multiple ips.
While using the Deco M4 I get a response for 10.0.0.2 even if I am forcing the name server to be 8.8.8.8
I took a tcpdump and here is what I see:
I don't understand why would the DNS response from the Deco M4, intercept the requests I am making directly to 8.8.8.8 and add its response.
I believe this might be a problem with dnsproxy?
You can see from the tcpdump that the the request is going to the Deco M4 ( 3c:84:6a:97:42:94 ).
This is screwing up all of my traffic, since it is messing up random domains with incorrect ips. 10.0.0.x is not any valid network that I own.
Can anyone please explain what is going on in here?