46 lines
1.4 KiB
Python
46 lines
1.4 KiB
Python
|
import socket
|
|||
|
|
import ssl
|
|||
|
|
import dns.message
|
|||
|
|
import dns.query
|
|||
|
|
import dns.rcode
|
|||
|
|
import argparse
|
|||
|
|
|
|||
|
|
parser = argparse.ArgumentParser()
|
|||
|
|
parser.add_argument('-dot', '--dot', default='dns.alidns.com')
|
|||
|
|
args = parser.parse_args()
|
|||
|
|
print(f'DoT server: {args.dot}')
|
|||
|
|
upstream_server = '47.88.31.213'
|
|||
|
|
|
|||
|
|
# 创建监听socket
|
|||
|
|
listener = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
|||
|
|
listener.bind(('127.0.0.1', 53))
|
|||
|
|
|
|||
|
|
# 创建TLS连接
|
|||
|
|
context = ssl.create_default_context()
|
|||
|
|
context.check_hostname = False
|
|||
|
|
context.verify_mode = ssl.CERT_NONE
|
|||
|
|
while True:
|
|||
|
|
# 接收DNS请求
|
|||
|
|
data, addr = listener.recvfrom(1024)
|
|||
|
|
#print(dns.message.from_wire(data))
|
|||
|
|
data = dns.message.from_wire(data)
|
|||
|
|
if 'baidu' in data.question.__str__():
|
|||
|
|
# print(data)
|
|||
|
|
# print(addr)
|
|||
|
|
print('DNS请求：', data.question)
|
|||
|
|
# # 创建TLS连接并发送DNS请求到上游服务器
|
|||
|
|
resp = dns.query.tls(
|
|||
|
|
q=data,
|
|||
|
|
where=upstream_server,
|
|||
|
|
timeout=10,
|
|||
|
|
ssl_context=context)
|
|||
|
|
print('DNS响应：', resp.answer)
|
|||
|
|
# with socket.create_connection((upstream_server,853)) as sock:
|
|||
|
|
# with context.wrap_socket(sock, server_hostname=upstream_server[0]) as tls_sock:
|
|||
|
|
# tls_sock.sendall(data.to_wire())
|
|||
|
|
# resp = tls_sock.recv(4096)
|
|||
|
|
|
|||
|
|
# 将上游服务器的响应发送回客户端
|
|||
|
|
listener.sendto(resp.to_wire(), addr)
|
|||
|
|
break
|