SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-08-04 19:55:09 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Attach DNS on wt0 interface without admin right #1809

New Issue
Open
opened 2025-11-20 06:07:12 -05:00 by saavagebueno · 0 comments
saavagebueno commented 2025-11-20 06:07:12 -05:00
Owner
Copy Link

Originally created by @Mordi33 on GitHub (Apr 11, 2025).

Hi everyone,

I think I have identify a problem with the DNS nameserver on a device who the user doesn't have admin right !

I have a self-host console and my agents are on 0.40 version

On my console I add 1 nameserver DNS to resolve all domain.
I attach this nameserver to my users group.
after connexion of my client I collect the good info in the status.

netbird status -d
Nameservers:
[10.xxx.xxx.250:53] for [.] is Available

On my route table I have a dedicated route for this device (configure in the Network on the netbird console) and I have a dedicated Policy from my users to the DNS server (for UDP/53).

After connexion is up I can confirm the correct connexion. On Windows I'm using the command :
Test-NetConnexion 10.xxx.xxx.250 -Port 53"
The test is good !

But if I use a "nslookup asset.mydomain.lan" the server DNS use is the "default" DNS of my network card and not the netbird DNS configure.

If I display the ip configuration on the wt0 interface I have an IP (automatic configuration) but no DNS.
After enter my admin credential I can modify my DNS configuration to manualy add 10.xxx.xxx.253 on first DNS and after the nslookup comman dwork correctly.

If I disconnect/connect my netbird connection the DNS configuration is lost (the card is removed on disconnect action).
And I need add again the DNS manualy to have a correct DNS resolve.

I tested to add my account user (On my Windows) in the Administrators group - restart my computer - when my client netbirt is connected I have a correct DNS (10.xxx.xxx.250) and everythink works fine.

I check with my system team to deploy a policy to allow non-administrators user to change the network configuration on network card but maybe the netbird agent can change to configure DNS without admin right.

Thank a lot for your current (and futur) work about this software !

Originally created by @Mordi33 on GitHub (Apr 11, 2025). Hi everyone, I think I have identify a problem with the DNS nameserver on a device who the user doesn't have admin right ! I have a self-host console and my agents are on 0.40 version On my console I add 1 nameserver DNS to resolve all domain. I attach this nameserver to my users group. after connexion of my client I collect the good info in the status. netbird status -d Nameservers: [10.xxx.xxx.250:53] for [.] is Available On my route table I have a dedicated route for this device (configure in the Network on the netbird console) and I have a dedicated Policy from my users to the DNS server (for UDP/53). After connexion is up I can confirm the correct connexion. On Windows I'm using the command : Test-NetConnexion 10.xxx.xxx.250 -Port 53" The test is good ! But if I use a "nslookup asset.mydomain.lan" the server DNS use is the "default" DNS of my network card and not the netbird DNS configure. If I display the ip configuration on the wt0 interface I have an IP (automatic configuration) but no DNS. After enter my admin credential I can modify my DNS configuration to manualy add 10.xxx.xxx.253 on first DNS and after the nslookup comman dwork correctly. If I disconnect/connect my netbird connection the DNS configuration is lost (the card is removed on disconnect action). And I need add again the DNS manualy to have a correct DNS resolve. I tested to add my account user (On my Windows) in the Administrators group - restart my computer - when my client netbirt is connected I have a correct DNS (10.xxx.xxx.250) and everythink works fine. I check with my system team to deploy a policy to allow non-administrators user to change the network configuration on network card but maybe the netbird agent can change to configure DNS without admin right. Thank a lot for your current (and futur) work about this software !
saavagebueno added the triage-needed label 2025-11-20 06:07:12 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label triage-needed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1809
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?