I have a RB2011 , I want to install a script on it , the script is working on other router perfectly , the script is to resolve a host , and put the ip in address list , the problem with my RB2011 is , dosent give back the ip , even I got the script via export from the other router , tried to upgrade from 5.3 to 6.7 with the same problem , my diagnostic is , I have my DNS cache empty , though it got a cache size of 2048 kib , and the max udp size is 4096 , the script is :
"
/system script
add name=Facebook policy=
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api
source=“:foreach i in=[/ip dns cache find] do={\r
\n :local bNew "true";\r
\n :local cacheName [/ip dns cache all get $i name] ;\r
\n# :put $cacheName;\r
\n\r
\n :if (([:find $cacheName "facebook"] != 0) || ([:find $cacheName
"fbdcn"] != 0)) do={\r
\n\r
\n :local tmpAddress [/ip dns cache get $i address] ;\r
\n#\t:put $tmpAddress;\r
\n\r
\n# if address list is empty do not check\r
\n :if ( [/ip firewall address-list find ] = "") do={\r
\n :log info ("added entry: $[/ip dns cache get $i name] IP
$tmpAddress");\r
\n /ip firewall address-list add address=$tmpAddress list=rest
ricted comment=$cacheName;\r
\n } else={\r
\n :foreach j in=[/ip firewall address-list find ] do={\r
\n :if ( [/ip firewall address-list get $j address] = $tm
pAddress ) do={\r
\n :set bNew "false";\r
\n }\r
\n }\r
\n :if ( $bNew = "true" ) do={\r
\n :log info ("added entry: $[/ip dns cache get $i name]
_IP $tmpAddress");\r
\n /ip firewall address-list add address=$tmpAddress list=
restricted comment=$cacheName;\r
\n }\r
\n }\r
\n }\r
\n}”
"
which is not the problem , since it is working on other router on my network perfectly .
also “strange thing” , IP DNS showing 8 used on cache , though , when I enter cache I see nothing , and there is users on the network requesting since over an hour , IP firewall does not contain anything related to DNS or DNS ports , just a simple masquerade so they can get internet .
IP Firewall nat:
0 chain=srcnat action=masquerade src-address-list=NAT out-interface=ether4
1 chain=srcnat action=masquerade dst-address=5.10.225.106
2 chain=srcnat action=masquerade dst-address=192.168.97.2
I tried to search for the problem , I cant find anything similar to my case !
thank you in advance .