{"action":"created","issue":{"url":"https://api.github.com/repos/clowwindy/ChinaDNS/issues/78","labels_url":"https://api.github.com/repos/clowwindy/ChinaDNS/issues/78/labels{/name}","comments_url":"https://api.github.com/repos/clowwindy/ChinaDNS/issues/78/comments","events_url":"https://api.github.com/repos/clowwindy/ChinaDNS/issues/78/events","html_url":"https://github.com/clowwindy/ChinaDNS/issues/78","id":63697473,"number":78,"title":"Strange phenomenon about the DNS resloving","user":{"login":"hduffddybz","id":8110714,"avatar_url":"https://avatars.githubusercontent.com/u/8110714?v=3","gravatar_id":"","url":"https://api.github.com/users/hduffddybz","html_url":"https://github.com/hduffddybz","followers_url":"https://api.github.com/users/hduffddybz/followers","following_url":"https://api.github.com/users/hduffddybz/following{/other_user}","gists_url":"https://api.github.com/users/hduffddybz/gists{/gist_id}","starred_url":"https://api.github.com/users/hduffddybz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hduffddybz/subscriptions","organizations_url":"https://api.github.com/users/hduffddybz/orgs","repos_url":"https://api.github.com/users/hduffddybz/repos","events_url":"https://api.github.com/users/hduffddybz/events{/privacy}","received_events_url":"https://api.github.com/users/hduffddybz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-03-23T11:09:22Z","updated_at":"2015-04-05T18:21:15Z","closed_at":null,"body":"I have running ChinaDNS for couple of months,but today I encountered a strange problem that I cannot know how to deal with it. The resolving of DNS abroad can done succeed by means of \"dig at /*./*./*./* -p /*\",but always for the ChinaDNS running on the openwrt, it can only resolve the address abroad when it restart and then all the resolving are all failing !The log print here:\r\n\r\n\r\nChinaDNS 1.3.0\r\nMon Mar 23 10:56:20 2015 request mtalk.google.com\r\nMon Mar 23 10:56:20 2015 response mtalk.google.com from 114.114.114.114:53 - 17\r\n3.194.72.188, filter\r\nMon Mar 23 10:56:20 2015 response mtalk.google.com from 107./*./*.191:5050 -\r\n74.125.129.188, pass\r\nMon Mar 23 10:56:29 2015 request www.google.com.hk\r\nMon Mar 23 10:56:29 2015 response www.google.com.hk from 114.114.114.114:53 - 7\r\n4.125.203.199, filter\r\nMon Mar 23 10:56:29 2015 response www.google.com.hk from 107./*./*.191:5050 -\r\n 74.125.239.120, 74.125.239.127, 74.125.239.111, 74.125.239.119, pass\r\nMon Mar 23 10:56:40 2015 request wpad.lan\r\nMon Mar 23 10:56:40 2015 response wpad.lan from 114.114.114.114:53 - delay\r\nMon Mar 23 10:56:40 2015 response wpad.lan from 107./*./*.191:5050 - delay\r\nMon Mar 23 10:56:47 2015 request clients4.google.com\r\nMon Mar 23 10:56:47 2015 response clients4.google.com from 114.114.114.114:53 -\r\n 74.125.235.226, filter\r\nMon Mar 23 10:56:48 2015 request clients4.google.com\r\nMon Mar 23 10:56:48 2015 response clients4.google.com from 114.114.114.114:53 -\r\n 74.125.235.228, filter\r\nMon Mar 23 10:56:49 2015 request www.google.com.hk\r\nMon Mar 23 10:56:49 2015 response www.google.com.hk from 114.114.114.114:53 - 7\r\n4.125.203.199, filter\r\n\r\nMon Mar 23 13:04:45 2015 request www.google.com.hk\r\nMon Mar 23 13:04:45 2015 request www.google.com.hk\r\nMon Mar 23 13:04:45 2015 request www.google.com.hk\r\nMon Mar 23 13:04:45 2015 response www.google.com.hk from 114.114.114.114:53 - 74.125.204.199, filter\r\nMon Mar 23 13:04:45 2015 response www.google.com.hk from 114.114.114.114:53 - 74.125.204.199, filter\r\nMon Mar 23 13:04:45 2015 response www.google.com.hk from 114.114.114.114:53 - 74.125.204.199, filter"},"comment":{"url":"https://api.github.com/repos/clowwindy/ChinaDNS/issues/comments/89826055","html_url":"https://github.com/clowwindy/ChinaDNS/issues/78#issuecomment-89826055","issue_url":"https://api.github.com/repos/clowwindy/ChinaDNS/issues/78","id":89826055,"user":{"login":"clowwindy","id":1073082,"avatar_url":"https://avatars.githubusercontent.com/u/1073082?v=3","gravatar_id":"","url":"https://api.github.com/users/clowwindy","html_url":"https://github.com/clowwindy","followers_url":"https://api.github.com/users/clowwindy/followers","following_url":"https://api.github.com/users/clowwindy/following{/other_user}","gists_url":"https://api.github.com/users/clowwindy/gists{/gist_id}","starred_url":"https://api.github.com/users/clowwindy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/clowwindy/subscriptions","organizations_url":"https://api.github.com/users/clowwindy/orgs","repos_url":"https://api.github.com/users/clowwindy/repos","events_url":"https://api.github.com/users/clowwindy/events{/privacy}","received_events_url":"https://api.github.com/users/clowwindy/received_events","type":"User","site_admin":false},"created_at":"2015-04-05T18:21:15Z","updated_at":"2015-04-05T18:21:15Z","body":"You should tunnel your traffic to 8.8.8.8 through either [VPN](http://sourceforge.net/p/openwrt-dist/wiki/Plan5) or [Shadowsocks](https://sourceforge.net/p/openwrt-dist/wiki/Plan6/). Otherwise, the firewall can simply block any responses from DNS servers.\r\n\r\nWhy? Each time you restart ChinaDNS, it uses a new source port to send DNS queries. If you don't tunnel DNS queries through VPN, the queries are in just plain text. The firewall needs some time to learn that and remember your source IP and port, but eventually it will block them.\r\n"}}