Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS Resolver problems

    Scheduled Pinned Locked Moved DHCP and DNS
    43 Posts 5 Posters 18.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Chrismallia
      last edited by

      Here is what I got

      error.png
      error.png_thumb

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        there is going to more to it than that - scroll through it… Can you resolve what I posted speedtest.melita.com

        So I show socket latency fails as well, but then it goes to http latency

        5780  INFO: socket-latency Test started at 1457451815780
        15781  WARNING: REPLACE ME: Handle SubTest Start - socket-latency
        30784  ERROR: Latency test returned an error: [AnchorEvent type="error" bubbles=false cancelable=false eventPhase=2] timeout
        30785  DEBUG: test started: false
        30786  INFO: cleaning up: socket-latency
        30787  INFO: MethodId set to: 1
        30887  INFO: Starting: latency
        30889  INFO: Method: 2/2
        30890  INFO: Method Used: http
        30890  INFO: Starting subtest: http-latency
        30892  INFO: http-latency Test started at 1457451830892
        30894  WARNING: REPLACE ME: Handle SubTest Start - http-latency
        31619  INFO: progress: 0.1  current: 719  time left: 7434  test: http-latency

        You will have to look through the debug where it loads the file and see if you can load it..

        Here is from their troubleshooting info

        See I can load this - can you
        http://speedtest.melita.com/speedtest/latency.txt

        latencyerror.png
        latencyerror.png_thumb
        lattest.png
        lattest.png_thumb

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • C
          Chrismallia
          last edited by

          sorry here is all of it. and no I get a page error going to that url
          12528  INFO: calculateDistances: 3100
          12559  INFO: calculateDistances: 3200
          12579  INFO: calculateDistances: 3300
          12594  INFO: calculateDistances: 3400
          12607  INFO: calculateDistances: 3500
          12619  INFO: calculateDistances: 3600
          12634  INFO: calculateDistances: 3700
          12648  INFO: calculateDistances: 3800
          12671  INFO: calculateDistances: 3900
          12700  INFO: calculateDistances: 4000
          12729  INFO: calculateDistances: 4100
          12748  INFO: calculateDistances: 4200
          12759  INFO: calculateDistances: 4300
          12765  INFO: calculateDistances: 4400
          12767  INFO: Distances loaded: 39164
          12947  INFO: Distances sorted
          12947  INFO: TileMapContainer.placeMarkers
          12950  INFO: place markers: 6
          12951  INFO: Current Zoom Level: 6 - max Distance: 20 distance pairs: 39164
          12965  INFO: getMarkers Done
          12965  INFO: Groups: 4484
          13250  INFO: markers placed: 4487
          13251  INFO: Table Map Dragger Loaded
          13252  INFO: load topmap
          13252  INFO: object Added: topmap
          13252  INFO: [object _-Ei]
          13252  INFO: 114.5 11.45
          13252  INFO: 5
          13253  INFO: wavehash:undefined
          14367  INFO: bring to front
          14376  INFO: 2495,2497,2492,2494,2498
          14376  INFO: 2496,2498,2493,2495,2499
          44290  INFO: onRelease Dragger
          44290  INFO: Stopped panning, top left: 38.34277,8.96346, center: 35.93469,14.47860, bottom right: 33.45097,19.99374, zoom: 6
          52290  INFO: Showing debug window
          59086  INFO: bring to front
          59100  INFO: 2495,2497,2492,2494,2498
          59101  INFO: 2496,2498,2493,2495,2499
          60765  INFO: onRelease Dragger
          60767  INFO: serverflyoutbutton click
          60769  INFO: removed old dragger
          60773  INFO: wavehash:undefined
          60774  INFO: stopTimer current Count:8310865169
          60775  INFO: stopTimer desired Count:8310866837
          60775  INFO: ServerId set to: 2493
          60981  INFO: trackEvent: test_started
          60984  INFO: serverflyout click
          61297  INFO: delete object: [object _-9W]
          61530  INFO: Tile Map Container Loaded
          61535  INFO: object Added: tabletilemapcontainer
          61565  INFO: y: 103  factor: 1.819078947368421
          61565  INFO: y: 105  factor: 1.838815789473684
          62044  INFO: object Added: test
          62045  INFO: object Added: speedtest
          62047  INFO: object Added: speedtest-download-graph
          62049  INFO: object Added: finalresults
          62051  INFO: object Added: speedtest-download-graph-final
          62531  INFO: MethodId set to: 0
          62531  INFO: Vars: preferredserverid=2992
          62532  INFO: Vars: startmode=serverclick
          62533  INFO: Vars: promo=
          62534  INFO: Starting test
          62537  INFO: Starting: throttling
          62541  INFO: Method: 1/2
          62542  INFO: Method Used: tcp
          62545  INFO: Method: 1/2
          62546  INFO: Method Used: tcp
          62547  INFO: Starting: latency
          62549  INFO: Method: 1/2
          62550  INFO: Method Used: tcp
          62553  INFO: Starting subtest: socket-latency
          62558  INFO: socket-latency Test started at 1457451962558
          62561  WARNING: REPLACE ME: Handle SubTest Start - socket-latency
          77562  ERROR: Latency test returned an error: [AnchorEvent type="error" bubbles=false cancelable=false eventPhase=2] timeout
          77565  DEBUG: test started: false
          77567  INFO: cleaning up: socket-latency
          77569  INFO: MethodId set to: 1
          77662  INFO: Starting: latency
          77666  INFO: Method: 2/2
          77667  INFO: Method Used: http
          77668  INFO: Starting subtest: http-latency
          77671  INFO: http-latency Test started at 1457451977671
          77676  WARNING: REPLACE ME: Handle SubTest Start - http-latency
          82562  ERROR: SocketConnection 0 securityErrorHandler: [SecurityErrorEvent type="securityError" bubbles=false cancelable=false eventPhase=2 text="Error #2048"]
          88997  ERROR: Latency test returned an error while trying to read the latency file.
          88998  DEBUG: test started: false
          89003  INFO: Loading Error Strings
          89005  INFO: MethodId set to: 0
          89006  INFO: Vars: preferredserverid=2992
          89007  INFO: Vars: startmode=serverclick
          89010  INFO: Vars: promo=
          89012  INFO: Closing all TCP connections
          89014  INFO: Connections closed: 0
          89017  WARNING: REPLACE ME: HandleFatal - http-latency
          89021  INFO: EndTestHandler Loaded
          89027  INFO: object Added: endtest
          89045  INFO: trackEvent: test_error
          89999  ERROR: UNCAUGHT ERROR
          90002  ERROR: ArgumentError: Error #2109
          90011  ERROR: UNCAUGHT ERROR
          90013  ERROR: ArgumentError: Error #2109
          65989  ERROR: UNCAUGHT ERROR
          65991  ERROR: ArgumentError: Error #2109
          66008  ERROR: UNCAUGHT ERROR
          66012  ERROR: ArgumentError: Error #2109
          66027  ERROR: UNCAUGHT ERROR
          66029  ERROR: ArgumentError: Error #2109
          11535  ERROR: UNCAUGHT ERROR
          11539  ERROR: ArgumentError: Error #2109
          11746  ERROR: UNCAUGHT ERROR
          11747  ERROR: ArgumentError: Error #2109
          11838  ERROR: UNCAUGHT ERROR
          11839  ERROR: ArgumentError: Error #2109
          13307  ERROR: UNCAUGHT ERROR
          13308  ERROR: ArgumentError: Error #2109
          13329  ERROR: UNCAUGHT ERROR
          13331  ERROR: ArgumentError: Error #2109
          13338  ERROR: UNCAUGHT ERROR
          13341  ERROR: ArgumentError: Error #2109
          19624  ERROR: UNCAUGHT ERROR
          19627  ERROR: ArgumentError: Error #2109
          19682  ERROR: UNCAUGHT ERROR
          19683  ERROR: ArgumentError: Error #2109
          19705  ERROR: UNCAUGHT ERROR
          19706  ERROR: ArgumentError: Error #2109
          20744  ERROR: UNCAUGHT ERROR
          20747  ERROR: ArgumentError: Error #2109
          20757  ERROR: UNCAUGHT ERROR
          20760  ERROR: ArgumentError: Error #2109
          84523  ERROR: UNCAUGHT ERROR
          84527  ERROR: ArgumentError: Error #2109

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            I don't see in there where your even getting the server name you want to test too..

            Looks to be more an error in your speedtest applet than any sort of network problem.. Not sure how you can get any test to work if you don't get the server url to go to.. See in my debug where it use the url http://speedtest.melita.com/

            I don't see any server url anywhere in that debug log.. did you start it after you click on the server?  Start the debug before you pick your server, and try it with a server that works.  You should see the url your going to for test when you pick a different server.

            Also validate that you can resolve

            speedtest.melita.com

            can you load this
            http://speedtest.melita.com/speedtest/latency.txt

            just direct in your browser?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • C
              Chrismallia
              last edited by

              @johnpoz:

              can you load this
              http://speedtest.melita.com/speedtest/latency.txt

              just direct in your browser?

              No I get a page error in my browser, do you want logs of server that works? I tried other browsers PCs and phone still the same error

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                what do you get when you try and resolve it.. Use nslookup, or dig or drill or even the diag lookup page on pfsense.

                Try to ping the name - does it come back with IP or unknown host, etc.

                Let me see if that domain has dnssec enabled that is broken

                edit: I don't show them having dnssec available… But its quite possible your having issue with connectivity to their authoritative servers..

                But I do show their dns to be hosed from online testers

                I show their 1 server for sure not answering

                ;; ANSWER SECTION:
                melita.com.            3600    IN      NS      ns1.melitacable.com.
                melita.com.            3600    IN      NS      ns.melitacable.com.

                ;; ADDITIONAL SECTION:
                ns.melitacable.com.    3600    IN      A      212.56.128.132
                ns1.melitacable.com.    3600    IN      A      212.56.128.196

                so while .196 answers, I can not get a response from .132

                ; <<>> DiG 9.9.5-3ubuntu0.7-Ubuntu <<>> @212.56.128.132 melita.com NS
                ; (1 server found)
                ;; global options: +cmd
                ;; connection timed out; no servers could be reached

                So it would seem they have issues.. Might be connectivity from parts of the world, etc.

                Well now another query works... So they could be having issues.. If your resolving and having problems talking to their NS then yes that could explain why using forwarder works since your just asking for something that a NS already has cached.

                dnsproblems.png
                dnsproblems.png_thumb

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • C
                  Chrismallia
                  last edited by

                  In the browser I get
                  This webpage is not available

                  DNS_PROBE_FINISHED_NXDOMAIN

                  In pfsense dns lookup I get

                  Host must be a valid hostname or IP address.

                  In cmd ipconfig I get

                  Ping request could not find host http://speedtest.melita.com/speedtest/latency.txt. Please check the name and try again.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    yeah your having issues resolving their dns… you could try a trace in say nslookup or dig.

                    But that explains your problem - your having problems resolving that domain..  You could try putting in a host over ride.

                    I show that server resolving to.. 212.56.138.60

                    So in the resolver create a host override for speedtest with melita.com as domain and that IP.. then see if you can ping by name

                    Where I see a major issue is they have a TTL of 100 seconds

                    So when they do resolve, it doesn't stay cached long

                    ;; ANSWER SECTION:
                    speedtest.melita.com.  100    IN      A      212.56.138.60

                    ;; AUTHORITY SECTION:
                    melita.com.            3600    IN      NS      ns.melitacable.com.
                    melita.com.            3600    IN      NS      ns1.melitacable.com.

                    ;; ADDITIONAL SECTION:
                    ns.melitacable.com.    3600    IN      A      212.56.128.132
                    ns1.melitacable.com.    3600    IN      A      212.56.128.196

                    Trying to query their servers seems to be hit and miss.. Sometimes it works, and then it fails… So even when you do get it resolved, it only stays cached for 100 seconds.

                    If they are your isp you might want to contact them their dns is messed up!!!

                    Their SOA is WRONG too...

                    ;; QUESTION SECTION:
                    ;speedtest.melita.com.          IN      SOA

                    ;; AUTHORITY SECTION:
                    melita.com.            3561    IN      SOA    helium.melitacable.com. domains.melitacable.com. 2016022500 28800 7200 2419200 86400

                    SOA should point to 1 of their name servers..

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 1
                    • C
                      Chrismallia
                      last edited by

                      wow your Great so that explains it you should come to Malta and give them a lecture lol ye they are my ISP  that might explane some issues they are having with internet disconnects and slow downs ? everyone is complaining and they say they have no problems lol.  Please how can I donate something to Thank  you for the hole day you spent with me and for all the work?

                      1 Reply Last reply Reply Quote 1
                      • C
                        Chrismallia
                        last edited by

                        And btw for plex under advance alternative host name I put plex.direct and it is now working great. I can't thank you enough

                        1 Reply Last reply Reply Quote 0
                        • C
                          Chrismallia
                          last edited by

                          I just gave $20 to free bsd from your link https://www.freebsdfoundation.org/donate/ and have the email to prove it if you would like to see. I also thankt you in the comment  box. Regards friend and thank you again

                          1 Reply Last reply Reply Quote 1
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            No problem - thanks for the donation.. You use to be able to donate direct to pfsense, but this is how they want donations now.

                            I do this for fun, I like tech problems and helping people resolve them.  Getting useful info is normally the hard part.

                            Yeah I would say they are having all kinds of issues.  Is that the dns they hand out to their subscribers?  Or is that just their authoritative dns for their own domain?  When you let pfsense get dns from your isp what IPs do you get?  It doesn't seem to be an open resolver so that is good ;)  I get a refused when try and query say google.com off of them.

                            What I can see as problems is that SOA helium.melitacable.com is not even a valid record in their nameservers.  I see that both the name servers are on the same ASN (same network) looks to be the same class C.  This is BAD IDEA!!!  If problem with that network both nameservers are down..  Most likely they are in the same location too, this is bad - what happens if location has outage?

                            The SOA expire is quite long at 2419200, this should be more like 1 week, 2 weeks tops not 28 days (4 weeks)

                            Doesn't look like their MX accepts mail for postmaster, which is BAD..  And breaks all kinds of rfc's and there isn't even a SPF record.. Some fly by night shitty little ISP to be sure ;)

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 1
                            • C
                              Chrismallia
                              last edited by

                              Here are the dns I get when I let pfsense use there dns 212.56.129.228 and
                              212.56.132.20  :)
                              Unfortunately  Here in Malta we only have Melita. VODAFONE (4G) and another is GO but GO do not have fiber everywhere yet, :) when you have time is it possible for you to check on GO please? and tell me if they are better. O n speedtest there server are MARSA that by the way speedtest works fine for me when I use there servers :)  and if possible  Vodafone is b'kara. Thanks again for all your help  thanks to you I will choose the better ISP when available

                              1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator
                                last edited by

                                well those ns are not open for people to query them when not on that isp… When I try and query them I get refused.  Which is typical setup for ISP name servers.

                                Is this your go site?

                                https://www.go.com.mt

                                They have some issues with their dns as well.. Its not that hard people ;) heheheh

                                They got no glue for 2 of their names servers, they have 4 of them.  They are running old version of Bind on atleast 2 of them.

                                195.38.30.13: "9.3.6-P1-RedHat-9.3.6-25.P1.el5_11.3"

                                That was Deprecated back in like 2009... WTF???

                                They got the same issue where their listed SOA doesn't have record ns1.go.com.nt -- and I show ns1 and ns2 being open you can query them for www.google.com and get an answer..

                                Based solely on their shameful setup of their authoritative name servers for their own freaking domain I would say yeah they have basic lack of technical skill required to run a freaking ISP ;)  But that just me an grumpy old man on the internet that has been doing this for 30 some years ;)

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • C
                                  Chrismallia
                                  last edited by

                                  loooll yes that go site hehehe wow 1 worse then the other lool. sorry but have you checked the vodafone that is the last one lol? I really love your opinions lool

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.