Gargoyle Forum

USE AT YOUR OWN RISK

WARNING: DO NOT PRESERVE SETTINGS

Now includes packages

Do not install on 4MB routers

gargoyle-ispy 2018-March-25 12:56
Link 1
https://goo.gl/u2SgDB

Link 2 (rebuild with new trackers)
http://bit.ly/2BXjEr0

magnet:?xt=urn:btih:880b0d1fbfd0184560d75df1afca96319b0b6b93&dn=gargoyle-ispy%202018-March-25%2012_56.7z&tr=udp%3a%2f%2ftracker.openbittorrent.com%3a80&tr=udp%3a%2f%2fopen.demonii.com%3a1337&tr=udp%3a%2f%2ftracker.coppersurfer.tk%3a6969&tr=udp%3a%2f%2ftracker.leechers-paradise.org%3a6969


Routers
https://goo.gl/1tG2j7

No changes from the last build but there was a suggestion that the packages (not images) might have had problems last build?

Been busy doing other builds

Is anyone having problems with Dynamic DNS on this release? I have set the refresh for 15 minutes but have noticed that it's been 203 days since a refresh and in the mean time the IP address has changed.

For what provider?
What happens when you click “force update”?

I've switched to dnsomatic, which "seems" to be working, so I'll test. The real problem I have, which I'm still trying to sort out, is with safedns.com. safedns has a profile that can change based on time. It's similar to OpenDNS but has a schedule, so categories of sites can be blocked base on time. This is very handy to keep kids off games all the time as well as blocking phishing sites, porn, etc.

It's been working fine for a long time but all of a sudden there is a problem, the schedule is set to turn a particular set of categories on at a set time and the set time comes along, safedns says it's on the right profile but sites that should be unblocked are still blocked. There is something screwy going on.

The three possible defects I can think of are:
1. SafeDNS has a problem (possible)
2. Gargoyle is doing DNS caching of some sort (does it?), which would cause the problem
3. There is a problem with the IP. safedns uses a dynamic dns to discover the IP address of the router, so when then DNS requests come through it knows which user account to use. I think at one point I saw that the IP address which safedns had was different to the IP address that dnsomatic had, so was thinking it may be a problem with the Dynamic DNS.

Any ideas to sort out would be helpful.

pmerrill wrote:I've switched to dnsomatic, which "seems" to be working, so I'll test. The real problem I have, which I'm still trying to sort out, is with safedns.com. safedns has a profile that can change based on time. It's similar to OpenDNS but has a schedule, so categories of sites can be blocked base on time. This is very handy to keep kids off games all the time as well as blocking phishing sites, porn, etc.

It's been working fine for a long time but all of a sudden there is a problem, the schedule is set to turn a particular set of categories on at a set time and the set time comes along, safedns says it's on the right profile but sites that should be unblocked are still blocked. There is something screwy going on.

The three possible defects I can think of are:
1. SafeDNS has a problem (possible)
2. Gargoyle is doing DNS caching of some sort (does it?), which would cause the problem
3. There is a problem with the IP. safedns uses a dynamic dns to discover the IP address of the router, so when then DNS requests come through it knows which user account to use. I think at one point I saw that the IP address which safedns had was different to the IP address that dnsomatic had, so was thinking it may be a problem with the Dynamic DNS.

Any ideas to sort out would be helpful.

Hi yes dnsmasq does do DNS caching. To disable it you can put the line cache-size=0 In to the file /etc/dnsmasq.conf.

I agree that caching may be your biggest issue.
It is also possible that DDNS is having an issue. The IPs should always match.

Is safedns free? If so I’ll make an account and check for issues

Ok, I've made the change to /etc/dnsmasq.conf, is there anyway that I can check that it's working? I'm still having problems but can't seem to find out why. The funny thing is that it works differently on some machines. Meaning on one machine the site is blocked but on another it isn't???

Some antivirus software prevents dns hi jacking (which essentially is what this is doing)

Ok, here's something curious, at least to me When I type the following:
Microsoft Windows [Version 10.0.16299.371]
(c) 2017 Microsoft Corporation. All rights reserved.

C:\Users\paula>tracert twitch.tv

Tracing route to twitch.tv [195.46.39.1]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms Gargoyle.lan [192.168.1.1]
2 38 ms 14 ms 12 ms 103.217.164.51
3 * * * Request timed out.
4 18 ms 13 ms 13 ms as63956.nsw.ix.asn.au [218.100.52.119]
5 13 ms 14 ms 32 ms dom.as20473.cr2.s1.nsw.au.coloau.net.au [103.52.116.169]
6 * * * Request timed out.
7 * * * Request timed out.
8 13 ms 13 ms 13 ms blockpage.safedns.com [195.46.39.1]

Which should NOT be blocked at this time, I'm getting the blockpage but the time is 13ms, which sort of tells me that it's the router that's returning the block page even though I have turned it off (or at least I think it's turned off).

If I login to the router is there any command I can issue to see if it's pulling the local cache or not? Is there anyway I can confirm the cache is indeed 0?

Sorry, just saw this at the top

Tracing route to twitch.tv [195.46.39.1]

For some reason tracert has decided that twitch.tv's IP address is 195.46.39.1 but this is wrong, this is the blockpage of safedns. I've done a ipconfig /flushdns but it didn't change the result. Now very confused...