There aren't any such entries in syslog, presumably because I had hardcoded two upstream servers (208.67.222.222 and 208.67.220.220) using the GUI Wi-Fi settings dialog in 16.10 and they're not changing. Oddly, I can't see that setting in the 17.04 dialog, even though "systemd-resolve --status" correctly reports them:
Global
DNS Servers: 127.0.0.1
DNSSEC NTA: 10.in-addr.arpa 16.172.in-addr.arpa 168.192.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa corp d.f.ip6.arpa home internal intranet lan local private test
Link 2 (wlp2s0)
Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6
LLMNR setting: yes
MulticastDNS setting: no
DNSSEC setting: allow-downgrade
DNSSEC supported: no
DNS Servers: 208.67.222.222 208.67.220.220
DNS Domain: local
The requests against the upstream server are disturbingly fast, I'm surprised I haven't been blacklisted yet.
There aren't any such entries in syslog, presumably because I had hardcoded two upstream servers (208.67.222.222 and 208.67.220.220) using the GUI Wi-Fi settings dialog in 16.10 and they're not changing. Oddly, I can't see that setting in the 17.04 dialog, even though "systemd-resolve --status" correctly reports them:
Global
16.172. in-addr. arpa
168.192. in-addr. arpa
17.172. in-addr. arpa
18.172. in-addr. arpa
19.172. in-addr. arpa
20.172. in-addr. arpa
21.172. in-addr. arpa
22.172. in-addr. arpa
23.172. in-addr. arpa
24.172. in-addr. arpa
25.172. in-addr. arpa
26.172. in-addr. arpa
27.172. in-addr. arpa
28.172. in-addr. arpa
29.172. in-addr. arpa
30.172. in-addr. arpa
31.172. in-addr. arpa
corp
d.f.ip6. arpa
home
internal
intranet
lan
local
private
test
DNS Servers: 127.0.0.1
DNSSEC NTA: 10.in-addr.arpa
Link 2 (wlp2s0)
208.67. 220.220
Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6
LLMNR setting: yes
MulticastDNS setting: no
DNSSEC setting: allow-downgrade
DNSSEC supported: no
DNS Servers: 208.67.222.222
DNS Domain: local
The requests against the upstream server are disturbingly fast, I'm surprised I haven't been blacklisted yet.
19:40:12.000415 IP hostname.50776 > resolver1. opendns. com.domain: 42051+% [1au] PTR? 4.1.168. 192.in- addr.arpa. (53) .@..... ...C... X.5.=nB. C...... .....4. 1.168.192. in-addr. arpa... ....).. ...... opendns. com.domain: 14223+% [1au] PTR? 4.1.168. 192.in- addr.arpa. (53) .@..... ...C... S.5.=.. 7...... ......4. 1.168.192. in-addr. arpa... ....).. ...... opendns. com.domain: 2501+% [1au] PTR? 4.1.168. 192.in- addr.arpa. (53) .@..... ...C... ..5.=.Z ....... .....4. 1.168.192. in-addr. arpa... ....).. ...... opendns. com.domain: 30929+% [1au] PTR? 4.1.168. 192.in- addr.arpa. (53) .@..... ...C... P.5.=.. x...... ......4. 1.168.192. in-addr. arpa... ....).. ...... opendns. com.domain: 46563+% [1au] PTR? 4.1.168. 192.in- addr.arpa. (53) .@..... ...C... ..5.=j{ ....... ......4. 1.168.192. in-addr. arpa... ....).. ...... opendns. com.domain: 61082+% [1au] PTR? 4.1.168. 192.in- addr.arpa. (53) .@..... ...C... ..5.= ....... 4.1.168. 192.in- addr.arpa. ......) ....... . opendns. com.domain: 14681+% [1au] PTR? 4.1.168. 192.in- addr.arpa. (53) .@..... ...C... z.5.=. ......4. 1.168.192. in-addr. arpa... ....).. ...... opendns. com.domain: 24423+% [1au] PTR? 4.1.168. 192.in- addr.arpa. (53) .@..... ...C... ..5.=.. _g..... ......4. 1.168.192. in-addr. arpa... ....).. ...... opendns. com.domain: 55231+% [1au] PTR? 4.1.168. 192.in- addr.arpa. (53) .@..... ...C... ..5.=mk. ....... .....4. 1.168.192. in-addr. arpa... ....).. ......
E..Q..@
19:40:12.000920 IP hostname.59219 > resolver1.
E..Q..@
19:40:12.001411 IP hostname.51647 > resolver1.
E..Q..@
19:40:12.001885 IP hostname.33104 > resolver1.
E..Q..@
19:40:12.002412 IP hostname.47231 > resolver1.
E..Q..@
19:40:12.004238 IP hostname.57292 > resolver1.
E..Q..@
w......
19:40:12.008187 IP hostname.49786 > resolver1.
E..Q..@
9Y.....
19:40:12.008926 IP hostname.53171 > resolver1.
E..Q..@
19:40:12.009629 IP hostname.37811 > resolver1.
E..Q..@