Documentation Downloads Knowledge How-To Hub Forums Cases Assets Warranty
Skip to main content
patrick_lupien

2 Messages

 • 

80 Points

Tue, May 21, 2019 4:24 PM

DNS Requests to baidu.com from Unleashed AP.

I had an internet outage at my home yesterday. After taking a look at my PiHole I noticed that my Unleashed R310 had made 1200 DNS requests to that domain in the course of a few hours.

After some searching I've never seen a baidu.com DNS lookup from the AP. Is this an undocumented thing? Just want to make sure that I don't have a compromised firmware or anything.

Question

 • 

Updated 

2 years ago

71

2

Responses

Brand User
michael_brado

Former Employee

 • 

2.6K Messages

 • 

44.8K Points

2 years ago

I don't think anything in our firmware has any DNS contact code.  Try collecting a wired trace and see if you can determine the source MAC client.

1

0

Brand User
michael_brado

Former Employee

 • 

2.6K Messages

 • 

44.8K Points

I stand corrected - our APs _do_ look for Internet connectivity.  All APs will look to our cloud based AP Registrar (APR) to see if they belong on a Cloud controller, otherwise look locally for a nearby ZoneDirector, SmartZone or Unleashed network, and if not finding any of these and running our Solo/Standalone firmware image, they would present a Solo/Standalone WebUI.
I'm researching other Internet targets that might be used to detect Internet connectivity, ie www.microsoft.com, and captive.apple.com I've heard before.

Like

2 years ago

0

mike_kuly

44 Messages

 • 

614 Points

2 years ago

Patrick,

I was curious about your question yesterday so I did a little digging. This is what I found...
Our controllers will ping the following sites to ensure we have internet connectivity.
apple.com, Microsoft.com, Baidu.com and support.ruckuckuswireless.com.
We will do this every 3 seconds if we determine there is no internet service. If we do detect the internet is available we change that polling to every 60 seconds.

So it looks like the AP was doing what it was designed to do. Hopefully you can breath a little easier now.

2

0

Brand User
michael_brado

Former Employee

 • 

2.6K Messages

 • 

44.8K Points

Thanks Mike,
   And it appears we have a FR-3731 to either configure the Internet targets, or turn off detection on Unleashed APs.  Customers who open a ticket can request a link to FR-3731 to add votes.

Like

2 years ago

0

patrick_lupien

2 Messages

 • 

80 Points

Ok, thanks for the info.

Like

2 years ago

0

Was this helpful?