-
-
Notifications
You must be signed in to change notification settings - Fork 1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Synapse fails to make DNS query for its own hostname when attempting invite via 3PID #1126
Comments
How do you reproduce it? The nameserver in the |
if you follow the discussion in the Synapse issue, it appears now that the DNS queries are not blocked actually but instead answers that are within the ip_range_blacklist are filtered, that's why synapse doesn't find itself. The error message is misleading. matrix-org/synapse#9475 (comment) What I was trying to do initially was to set up go-neb and just invite the bot user in some test room. Inviting my very own bot user using 3PID failed with the error message above. |
That go-neb problem is interesting. The same should happen if you try to message any other user (or bridge) on your homeserver, right? Yet, we don't have failure on such a massive scale, as far as I know. |
yes, it obviously hasn't hit the masses yet :) But if you look at the issue, almost everyone there is running their installation based on your ansible scripts, so I guess there is some common determinant. I have since mitigated the issue by excluding my homeserver's internal IP net from the blacklisted address ranges. |
As discussed in matrix-org/synapse#9475, synapse has recently introduced the
ip_range_blacklist
parameter, disabling all kinds of communications with IP ranges defined there.According to https://github.com/matrix-org/synapse/blob/e9f2ad86034d27068941379f678e19bf280ed308/docs/sample_config.yaml#L212 it defaults to:
This effectively disables synapse from talking to nameservers with IPs in those ranges, leading to synapse unable to find it's own name:
twisted.internet.error.DNSLookupError: DNS lookup failed: no results for hostname lookup: matrix.example.com.
The text was updated successfully, but these errors were encountered: