<!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>Thank you. It seems I missed that one. :) </div><div><br></div><div>On Sun, Mar 19, 2023, at 21:06, Otto Moerbeek wrote:<br></div><blockquote type="cite" id="qt" style=""><div>On Sun, Mar 19, 2023 at 04:54:19PM +0100, Chandra via dnsdist wrote:<br></div><div><br></div><div>> Hello all,<br></div><div>> <br></div><div>> I am trying to configure DOH over HTTP and I can't seem to figure out what I'm doing wrong. I have a nginx proxying the incoming request and don't need it on HTTPS. Here's my config<br></div><div>> <br></div><div>> *--- doh over http*<br></div><div>> setACL({"0.0.0.0/0", "::/0"})<br></div><div>> addLocal('0.0.0.0:7070')<br></div><div>> webserver("127.0.0.1:8083")<br></div><div>> <br></div><div>> newServer({address="1.1.1.1", pool="pub-unsafe-tier1",name="cloudflare"})<br></div><div>> newServer({address="8.8.8.8", pool="pub-unsafe-tier1",name="google"})<br></div><div>> newServer({address="194.242.2.2",pool="pub-safe-tier1",name="mullvad-noadblock",checkInterval=60})<br></div><div>> newServer({address="84.200.69.80", pool="pub-safe-tier2",name="dnswatch1",checkInterval=60})<br></div><div>> newServer({address="84.200.70.40", pool="pub-safe-tier2",name="dnswatch2",checkInterval=60})<br></div><div>> <br></div><div>> <br></div><div>> addDOHLocal("0.0.0.0:9090",nil,nil, "/dns-query", { reusePort=true, trustForwardedForHeader=true })<br></div><div>> ```<br></div><div>> <br></div><div>> When testing on the locally, here's what I get:<br></div><div>> <br></div><div>> $ curl -H 'accept: application/dns-message' '<a href="http://localhost:9090/dns-query?dns=AAABAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB">http://localhost:9090/dns-query?dns=AAABAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB</a>'<br></div><div>> <br></div><div>> dns query not allowed<br></div><div>> <br></div><div>> $ ...<br></div><div>> <br></div><div>> <br></div><div>> Where am I going wrong?<br></div><div><br></div><div>You have no policy defined. The default policy is to send packets to<br></div><div>the default pool (named ""). Your default pool is empty. So the query<br></div><div>gets refused, since no policy applies.<br></div><div><br></div><div>-Otto<br></div><div><br></div></blockquote><div><br></div></body></html>