<div dir="ltr">You have to tell dig to use DoH<br><br>`+https=/dns-query` for https<br>`+http-plain=/dns-query` for http</div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Mon, Nov 17, 2025 at 11:51 AM ROGER VIncent via Pdns-users <<a href="mailto:pdns-users@mailman.powerdns.com">pdns-users@mailman.powerdns.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><u></u>
<div>
<p>Hi,</p>
<p>I intend to access dnsdist via DoH with an apache reverse proxy,
but first I can't get dnsdist respond to queries :</p>
<p> </p>
<blockquote type="cite">➜ ~ dig -t aaaa <a href="http://powerdns.com" target="_blank">powerdns.com</a> @<a href="http://127.0.0.1" target="_blank">127.0.0.1</a> -p
5300 +short +nocookie<br>
;; communications error to 127.0.0.1#5300: connection refused<br>
;; communications error to 127.0.0.1#5300: connection refused<br>
;; communications error to 127.0.0.1#5300: connection refused<br>
<br>
; <<>> DiG 9.20.15-1~deb13u1-Debian <<>>
-t aaaa <a href="http://powerdns.com" target="_blank">powerdns.com</a> @<a href="http://127.0.0.1" target="_blank">127.0.0.1</a> -p 5300 +short +nocookie<br>
;; global options: +cmd<br>
;; no servers could be reached</blockquote>
Here is my dnsdist.conf :
<p></p>
<p> </p>
<blockquote type="cite">-- disable security status polling via DNS<br>
setSecurityPollSuffix("")<br>
<br>
setACL("<a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>")<br>
<br>
-- Define upstream DNS server (Pi-hole)<br>
newServer({address="<a href="http://192.168.0.26:53" target="_blank">192.168.0.26:53</a>", name="Pi2-hole",
checkInterval=60, mustResolve=true})<br>
newServer({address="<a href="http://192.168.0.24:53" target="_blank">192.168.0.24:53</a>", name="Pi1-hole",
checkInterval=60, mustResolve=true})<br>
<br>
-- Set the load balancing policy<br>
setServerPolicy(roundrobin)<br>
<br>
-- Create local DOH server listener in DNS over HTTP mode,
otherwise the information coming from nginx won't be processed
well<br>
addDOHLocal("<a href="http://127.0.0.1:5300" target="_blank">127.0.0.1:5300</a>", nil, nil, "/dns-query",
{reusePort=true, trustForwardedForHeader=false,
keepIncomingHeaders=true})<br>
</blockquote>
dnsdist is listening port 5300 though :
<p></p>
<p> </p>
<blockquote type="cite">➜ ~ sudo netstat -tapn | grep 5300
<br>
tcp 0 0 <a href="http://127.0.0.1:5300" target="_blank">127.0.0.1:5300</a> 0.0.0.0:*
LISTEN 508356/dnsdist</blockquote>
What is my mistake here ?
<p><br>
</p>
<pre cols="72">--
ROGER Vincent</pre>
</div>
_______________________________________________<br>
Pdns-users mailing list<br>
<a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank">Pdns-users@mailman.powerdns.com</a><br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" rel="noreferrer" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
</blockquote></div>