DNS issue

[Choong Leong Tan]

Hi, 

I have successfully reached step 4, which is to setup my gateway and tested. My "victim" can reach the internet through "wlan0" home network and the traffic goes out through "eth0". 

However, the next few steps were pretty frustrating. Looking at Mallory log, it seems that either mallory didn't forward the DNS lookup request to the correct DNS. 

sending data from ('10.0.0.10', 50120) to ('10.0.0.1', 53) 
Waiting for data 
Terminating thread for (10.0.0.10, 50120) No more data 

10.0.0.1 is the mallory gateway, 10.0.0.10 is the "victim". I don't know why mallory forwarded DNS request to itself. 

I have to do a hack here in line 186 of base.py:

#Get real destiation

rdst, rpt = nftool.getrealdest_ct(caddr[0], caddr[1])

rdst = "<insert my ISP DNS server IP here>"

raddr = (rdst, rpt)

And everything seems to be working. This is definitely NOT the correct solution. It seems there are some minute changes I got to make. I am not sure where. 

Anyone? 

Thanks in advance.

Regards,

Choong Leong

[Raj]

Choong,

What is the your name server configured to in /etc/resolv.conf?

Raj

[Choong Leong Tan]

Hi Raj,

more /etc/resolv.conf

#Generated by NetworkManager
nameserver <My DNS1 IP>
nameserver <My DNS2 IP>

[jmc]

I am having this same issue. It works up until I redirect the IP tables and start up Mallory. My setup:

-Ubuntu 10.4 LTS desktop
-Followed Mallory and Me / Mobile Gateway tutorial, but have eth0 acting as my WAN, and wlan0 (atheros 9k) acting as my WiFi access point.
-Uninstalled network-manager, and manually configured eth0 (dynamic) and wlan0 (static) - /etc/network/interfaces looks like:

auto lo
iface lo inet loopback

# Set up external (wan) interface
auto eth0
iface eth0 inet dhcp

# Set up internal interface
auto wlan0
iface wlan0 inet static
    address 10.0.0.1
    network 192.168.1.0
    netmask 255.255.255.0
    broadcast 10.0.0.255

The /etc/resolv.conf file looks like:

nameserver 192.168.1.17
nameserver 192.168.1.19
domain <my-network-name>
search <my-network-name>
nameserver 8.8.8.8 #we inserted 8.8.8.8 instead of 4.2.2.1

I can provide other config as well. Replacing rdst as 8.8.8.8/or a DNS other than what is generated (eg 10.0.0.1 - the gateway) is bad, isn't it? Any help would be greatly appreciated!

Thanks!
Jess