How can I stop cameras from making so manyt DNS requests

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
12345...

How can I stop cameras from making so manyt DNS requests

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
72 Reply
Re:How can I stop cameras from making so manyt DNS requests
2023-01-10 12:08:17
For me, nothing has changed. Still 15k queries per day going nowhere.
  11  
  11  
#32
Options
Re:How can I stop cameras from making so manyt DNS requests
2023-01-24 06:05:49

Hi all, i had a lot of DNS requests using Adguardhome as well, i had a firewall rule in my router to redirect all DNS queries to my adguardhome instance, and then every 6 seconds i got a lot of dns requests from tapo cameras.

 

my advice is this:

 

Create a NAT rule that rewrites the source of the DNS response (the PiHole or Adguardhome) to match the intended source (the hardcoded DNS of the cameras).

 

i used this tutorial.

 

htt ps://jeff.vtkellers. com/posts/technology/force-all-dns-queries-through-pihole-with-openwrt/

 

i hope this help you guys.

  1  
  1  
#33
Options
Re:How can I stop cameras from making so manyt DNS requests
2023-02-04 07:48:46

3 weeks nothing and now it started up again.

  3  
  3  
#34
Options
Re:How can I stop cameras from making so manyt DNS requests
2023-02-04 08:22:45

@Celico I'm seeing the same behaviour - it started happening again yesterday at 14:00 GMT after weeks of nothing...

  1  
  1  
#35
Options
Re:How can I stop cameras from making so manyt DNS requests
2023-02-04 09:16:58 - last edited 2023-02-04 09:18:16

  @Weavey Both my cameras started requesting non existent URLs again every six seconds.

 

If you have the capability, do a DNS rewrite of the bad URLs to this domain : use1-relay-dcipc.i.tplinknbu.com

  1  
  1  
#36
Options
Re:How can I stop cameras from making so manyt DNS requests
2023-02-04 14:46:10

It never stopped for me, but it has increased from 15k to 70k calls per day.

  3  
  3  
#37
Options
Re:How can I stop cameras from making so manyt DNS requests
2023-02-09 10:44:22

Same problem for me... too many DNS requests without explanation.

In my case the most questioned domain (more than 11000 requests per day) is : rtsp-dcipc.tplinknbu.com

 

I made an nmap :

 

Nmap scan report for rtsp-dcipc.tplinknbu.com (52.50.225.133)

Host is up (0.048s latency).

Other addresses for rtsp-dcipc.tplinknbu.com (not scanned): 52.18.135.86 34.254.53.222

rDNS record for 52.50.225.133: ec2-52-50-225-133.eu-west-1.compute.amazonaws.com

Not shown: 999 filtered ports

PORT STATE SERVICE

443/tcp open https

 

 

The url is perfectly accessible on port 443 (https://rtsp-dcipc.tplinknbu.com, this server is online), so the excess of requests can't be attributed to an access problem in my case.

I would really like a solution to remove this excessive demand on my DNS server...

 

Do administrators, technicians or others from TP-Link sometimes visit the forum?

  0  
  0  
#38
Options
Re:How can I stop cameras from making so manyt DNS requests
2023-02-10 09:27:32

  @Tescophil How did you find one relay that works? My camera just uses the one and I don't have another camera.

  0  
  0  
#39
Options
Re:How can I stop cameras from making so manyt DNS requests
2023-02-10 10:19:05 - last edited 2023-02-10 10:19:26

For me the relays work, to check them load their addresses with a h ttps:// (it works with port 443).

The basic problem remains, why this flood of DNS request !?!

 

nmap use1-relay-dcipc.i.tplinknbu.com
Nmap scan report for use1-relay-dcipc.i.tplinknbu.com (23.21.233.36)
Host is up (0.11s latency).
Other addresses for use1-relay-dcipc.i.tplinknbu.com (not scanned): 54.197.146.240 54.146.202.30
rDNS record for 23.21.233.36: ec2-23-21-233-36.compute-1.amazonaws.com
Not shown: 999 filtered ports
PORT    STATE SERVICE
443/tcp open  https

 

Nmap done: 1 IP address (1 host up) scanned in 9.25 seconds

 

nmap euw1-relay-dcipc.i.tplinknbu.com
Nmap scan report for euw1-relay-dcipc.i.tplinknbu.com (34.248.166.100)
Host is up (0.051s latency).
Other addresses for euw1-relay-dcipc.i.tplinknbu.com (not scanned): 52.31.109.126 108.128.11.80
rDNS record for 34.248.166.100: ec2-34-248-166-100.eu-west-1.compute.amazonaws.com
Not shown: 999 filtered ports
PORT    STATE SERVICE
443/tcp open  https

 

Nmap done: 1 IP address (1 host up) scanned in 5.52 seconds

 

  0  
  0  
#40
Options
Re:How can I stop cameras from making so manyt DNS requests
2023-02-10 16:53:02

  @Celico I just mapped the broken relay URLs to use1-relay-dcipc.i.tplinknbu.com and it works fine....

  0  
  0  
#41
Options

Tags

MicroSD card
DNS Requests
Related Articles