Enable Guardian for nonsupported interfaces


Broadcom interface is not supported by default, only intel interfaces are supported for the Guardian service.

this workaround only for POC:

1. login to the guardian SSH.

2. sudo su

vi /etc/sysctl.conf

dev.netmap.admode=2

:wq

sysctl dev.netmap.admode=2

vi /etc/rc.conf

dnsblast_enable="YES"

dnsblast_flags="-i hn1"

:wq

/usr/local/etc/rc.d/dnsblast start

/usr/local/etc/rc.d/dnsblast status

rm /tmp/running_config.cf

rm /tmp/previous_config.cf


Did you find this article useful?



  • Measure QPS on BIND9

    BIND9 DNS engine was installed on Ubuntu server, the goal is to measure the QPS by enabling the statistics.Installing the BIND9 command: sudo apt inst...

  • Enabling DNSSEC on an external zone

    Domain Name System Security Extensions (DNSSEC) is used to strengthen DNS protocol security.It controls the integrity of all DNS answers and ensures t...

  • Utilizing ioc2rpz.net as open source RPZ

    ioc2rpz community is a portal which provides open source DNS Firewall / RPZ feeds. The DNS Firewall feeds are based on publicly available threat intel...

  • Cascaded DNS

    EDNS: Port 53 is reserved for DNS usage, DNS uses both UDP and TCP for message transport.Conventional message exchanges are short, and thus well suit...

  • NXDomain Redirection

    What is NXDOMAIN Redirection? NXDOMAIN redirection provides the ability for a recursive server to replace an NXDOMAIN response to a query with a conf...