DNS to 8.8.8.8 refused. 8.8.4.4 / 1.1.1.1 / 9.9.9.9 OK
Hi all, Sorry in advance for the partial MT post, but I am hoping someone can assist. We have our own AS and an IP range routed through a MT. Clients connected to our IP range are receiving 'query refused' from a NS lookup using google DNS 8.8.8.8. Other DNS servers (8.8.4.4 / 1.1.1.1 / 9.9.9.9) etc work fine. For the router itself and NAT I use 9.9.9.9 so never noticed until clients started connecting. Is there anything special I need to do to use Googles DNS via our IP range? Below is a debug log from Windows nslookup. Thanks in advance for any clues. Cheers, Mal ====================== C:\Users\Mal>nslookup -debug avcomm.com.au ------------ Got answer: HEADER: opcode = QUERY, id = 1, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0 QUESTIONS: 8.8.8.8.in-addr.arpa, type = PTR, class = IN ------------ Server: UnKnown Address: 8.8.8.8 ------------ Got answer: HEADER: opcode = QUERY, id = 2, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0 QUESTIONS: avcomm.com.au, type = A, class = IN ------------ ------------ Got answer: HEADER: opcode = QUERY, id = 3, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0 QUESTIONS: avcomm.com.au, type = AAAA, class = IN ------------ ------------ Got answer: HEADER: opcode = QUERY, id = 4, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0 QUESTIONS: avcomm.com.au, type = A, class = IN ------------ ------------ Got answer: HEADER: opcode = QUERY, id = 5, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0 QUESTIONS: avcomm.com.au, type = AAAA, class = IN ------------ *** UnKnown can't find avcomm.com.au: Query refused *Malcolm Faed*Network Broadcast Engineer malcolm@avcomm.com.au Av-Comm Office: +61 2 9939 4377 Mobile+61 424 957 053 Unit 24 / 9 Powells Road, Brookvale, NSW 2100, Australia. avcomm.com.au [image: Twitter] <https://twitter.com/AvCommSatellite>[image: Google Plus] <https://plus.google.com/+AvcommAustralia/>[image: Youtube] <https://www.youtube.com/channel/UCO8ZtcnwoTH7e54LAndE-yw>[image: Linkedin] <https://www.linkedin.com/company-beta/6583589/> This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorised disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. Av-Comm is not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.
Replying to my own post... Problem was with our ISP. Resolved now . On Mon., 12 Aug. 2019, 17:42 Malcolm Faed, <malcolm@avcomm.com.au> wrote:
Hi all,
Sorry in advance for the partial MT post, but I am hoping someone can assist.
We have our own AS and an IP range routed through a MT. Clients connected to our IP range are receiving 'query refused' from a NS lookup using google DNS 8.8.8.8.
Other DNS servers (8.8.4.4 / 1.1.1.1 / 9.9.9.9) etc work fine.
For the router itself and NAT I use 9.9.9.9 so never noticed until clients started connecting.
Is there anything special I need to do to use Googles DNS via our IP range?
Below is a debug log from Windows nslookup.
Thanks in advance for any clues.
Cheers, Mal
======================
C:\Users\Mal>nslookup -debug avcomm.com.au ------------ Got answer: HEADER: opcode = QUERY, id = 1, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0
QUESTIONS: 8.8.8.8.in-addr.arpa, type = PTR, class = IN
------------ Server: UnKnown Address: 8.8.8.8
------------ Got answer: HEADER: opcode = QUERY, id = 2, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0
QUESTIONS: avcomm.com.au, type = A, class = IN
------------ ------------ Got answer: HEADER: opcode = QUERY, id = 3, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0
QUESTIONS: avcomm.com.au, type = AAAA, class = IN
------------ ------------ Got answer: HEADER: opcode = QUERY, id = 4, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0
QUESTIONS: avcomm.com.au, type = A, class = IN
------------ ------------ Got answer: HEADER: opcode = QUERY, id = 5, rcode = REFUSED header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 0
QUESTIONS: avcomm.com.au, type = AAAA, class = IN
------------ *** UnKnown can't find avcomm.com.au: Query refused
*Malcolm Faed*Network Broadcast Engineer malcolm@avcomm.com.au
Av-Comm
Office: +61 2 9939 4377 Mobile+61 424 957 053
Unit 24 / 9 Powells Road, Brookvale, NSW 2100, Australia. avcomm.com.au
[image: Twitter] <https://twitter.com/AvCommSatellite>[image: Google Plus] <https://plus.google.com/+AvcommAustralia/>[image: Youtube] <https://www.youtube.com/channel/UCO8ZtcnwoTH7e54LAndE-yw>[image: Linkedin] <https://www.linkedin.com/company-beta/6583589/>
This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorised disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. Av-Comm is not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.
participants (1)
-
Malcolm Faed