Unable to Resolve www.worldometers.info

hhoong

@johnpoz said in Unable to Resolve www.worldometers.info:

Ask your ISP why you can not query that ns or the other one listed.

moura.ns.cloudflare.com

You can ping them - so you have connectivity to them, so why no query on 53?

i don't think they will entertain me, they would ask me to use DNS forwarder and point to them.

do pfsense resolver support DNS over SSL/TLS for outgoing to root DNS? if can, what if i enable?
i dont seem to able to find that option.

johnpoz

@hhoong said in Unable to Resolve www.worldometers.info:

SSL/TLS for outgoing to root DNS?

No doesn't work that way... Every single NS on the planet would have to support tls for something like that to work.. And GAWD would be be horribly slow!!!

hhoong

@johnpoz

Then is sad, so for the time been i have to enable forward in my DNS resolver
until i get a VPN... haha

thanks for all the help :)

johnpoz

Well if you have only found that specific one - you could prob just do a domain override to send that domain to wherever..

hhoong

@johnpoz
hmm, let me try ...

johnpoz

But if you can not talk to those specific ns for cloudflare, its possible you can not talk to others. Also I would "assume" that those ns are used for more than just that specific domain.. So there could be others that you can not resolve - that you have just not found yet.

So while a conditional forward would allow you to resolve this specific domain, you could have things that don't resolve later that you have just not run across yet. So it would be a wack-a-mole game.. The root of the problem is you can not talk to those NS for whatever reason via dns query.

Gertjan

This one :

@johnpoz said in Unable to Resolve www.worldometers.info:

moura.ns.cloudflare.com

and it's brother collins.ns.cloudflare.com are most probably servers or VPS hosted by cloudflare. To me, it like they are dedicated servers that have as a role : a name server.
But they are managed by a private person, because :
Double; identical A records are returned.
Both name servers are in the same AS : that a DNS bad practice.
"cloudfare" should never done that.
And private person means : a trigger happy server with fail2ban, DNSBL software ....

This ll boils down to : you got yourself probably blacklisted - or worse, your (ISP) WAN IP is on some blacklist, used by the guy who operates worldoyyyymeters.info.

edit : I just had a look at what that site www.worldoyyyyymeters.info is ... a Corona counter ...

johnpoz

Where do you see they return the same IP?

;; ANSWER SECTION:
collins.ns.cloudflare.com. 86383 IN A 162.159.38.226

;; ANSWER SECTION:
moura.ns.cloudflare.com. 86375 IN A 162.159.44.217

They are are in different networks..

And that network is owned by cloudflare.. And while they are part of the same block, there is nothing wrong with having 2 ns in the same AS.. They just shouldn't be on the same network.. You could have same AS all over the globe, so there is no reason why they couldn't be in the same AS.. In a perfect world sure - you would put your NS in completely different AS, I agree.

But sure if those are hosted by cloudflare for someone, if that someone runs that NS, then sure they could of blocked his IP or block.. Its its possible cloudflare is actually blocking his IP.. very possible!

hhoong

@johnpoz said in Unable to Resolve www.worldometers.info:

Where do you see they return the same IP?

;; ANSWER SECTION:
collins.ns.cloudflare.com. 86383 IN A 162.159.38.226

;; ANSWER SECTION:
moura.ns.cloudflare.com. 86375 IN A 162.159.44.217

They are are in different networks..

And that network is owned by cloudflare.. And while they are part of the same block, there is nothing wrong with having 2 ns in the same AS.. They just shouldn't be on the same network.. You could have same AS all over the globe, so there is no reason why they couldn't be in the same AS.. In a perfect world sure - you would put your NS in completely different AS, I agree.

But sure if those are hosted by cloudflare for someone, if that someone runs that NS, then sure they could of blocked his IP or block.. Its its possible cloudflare is actually blocking his IP.. very possible!

y they wanna block me... I'm so sad :(

Gertjan

@johnpoz said in Unable to Resolve www.worldoyyyymeters.info:

Where do you see they return the same IP?

Here :

AS : do something like https://www.zonemaster.net/domain_check

@johnpoz said in Unable to Resolve www.worldoyyyymeters.info:

there is nothing wrong with having 2 ns in the same AS

It will work just fine. It just not good practice. Most domain - name - root server tester will tell you this.

@johnpoz said in Unable to Resolve www.worldoyyyymeters.info:

And that network is owned by cloudflare.

The network, yes. These name server : I guess probably not - as said, some rented dedicated server.

johnpoz

The hard part is figure out why you can not get there, clearly you can ping it.. But dns is being blocked somewhere between you and them.. Where that is happening is the question.

johnpoz

That is the Site, not the NS for the domain.

Look as something major player - and their NS are quite often on the same AS, just different network blocks - most likely in different regions of the world.

We have same AS, and just different networks under the AS are advertised out of different locations..

Now a days many of the IPs used for NS are just going to be anycast anyway. Look at google dns for example 8.8.8.8 and 8.8.4.4, both are in the same AS 15169

Gertjan

@hhoong said in Unable to Resolve www.worldometers.info:

y they wanna block me... I'm so sad :(

What about the solution that worked well for the last couple of thousand of centuries : ask them ? https://www.worldoxxxxxmeters.info/contact/

hhoong

@Gertjan said in Unable to Resolve www.worldometers.info:

@hhoong said in Unable to Resolve www.worldometers.info:

y they wanna block me... I'm so sad :(

What about the solution that worked well for the last couple of thousand of centuries : ask them ? https://www.worldometers.info/contact/

actually not My IP that got blocked.
i have 3 pfSense over 3 different location, but all same ISP, maybe the ISP been blocked?
maybe i can ask https://www.worldometers.info/contact/ as u suggested :)

Gertjan

@hhoong said in Unable to Resolve www.worldometers.info:

actually not My IP that got blocked.

Still, not a real problem.
Thee letter solution : VPN ;)
( to get an IP that will work )

provels

You can traceroute to 104.26.5.2 and 104.26.4.2 all right?
I suppose in the meantime you could add the IPs to /etc/hosts...no? Or is that what Host Overrides are for?
Can't hit the target by using the IP in the URL.
Just my 2 cents. Ignore as needed. :)

Gertjan

@provels said in Unable to Resolve www.worldometers.info:

Or is that what Host Overrides are for?

Bringing the name resolution to home would work.
The IP itself, the A record, is also not accessible for @hhoong.

There is some progress on the site : it's loaded up to the ceiling with Google adds now.
I had to stop pfBlocker to make it visible again.
It's probably not even a dedicated web server, but a shared web server .... just some private guy who build it's own site, as we all do or have done.
@hhoong : this site is just a small java counter with some html. Many other sites showing the same info exist, without obliteration the viewer with WoW publicity.

provels

@Gertjan said in Unable to Resolve www.worldometers.info:

There is some progress on the site : it's loaded up to the ceiling with Google adds now.
I had to stop pfBlocker to make it visible again.

Wow, didn't know. Never seen an ad there. Thanks, pfB!

Gertjan

@provels said in Unable to Resolve www.worldometers.info:

Never seen an ad there. Thanks, pfB!

Shut down pfblocker and check for yourself.
80 % of the page are screaming adds.

edit : Nothing against adds .. but now I'm going to edit all my messages above to nuke the URL's. No need to bring that site more revenue for the cause it seems to represent.

edit2: @chpalmer is right after all ?

johnpoz

The destination doesn't really matter with this problem.. It could be a site for midget p0rn - doesn't matter what the site is..

Doesn't matter what the IP that returned is, or even if he can get to that IP.

The problem here is he can not resolve the name, and can not talk to clouldflare ns.. That are listed as the authoritative NS for this domain.

He can not query

;; ANSWER SECTION:
collins.ns.cloudflare.com. 86383 IN A 162.159.38.226

;; ANSWER SECTION:
moura.ns.cloudflare.com. 86375 IN A 162.159.44.217

Doesn't matter what he is trying to resolve, he can not resolve anything from either of those. He should be able to resolve their own names from them for example.

; <<>> DiG 9.11.3-1ubuntu1.11-Ubuntu <<>> @162.159.38.226 collins.ns.cloudflare.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31172
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;collins.ns.cloudflare.com.     IN      A

;; ANSWER SECTION:
collins.ns.cloudflare.com. 86400 IN     A       162.159.38.226

;; Query time: 27 msec
;; SERVER: 162.159.38.226#53(162.159.38.226)
;; WHEN: Wed May 06 08:58:09 CDT 2020
;; MSG SIZE  rcvd: 70

Who cares what the site he is trying to resolve is full of ads, etc... That doesn't matter in what the issue is. The owner of that server could be blocking him, doesn't matter since he can not resolve it anyway..