Erratic rule behavior for an alias

  • Hello,

    I have an alias defined for an akamai CDN host originating from LAN with a Gateway (VPN) assigned to. Sometimes the rule is honored and the traceroute shows that VPN gateway is used. However, for other times the gateway is not at all used.

    Here is a traceroute within minutes of each other:

    Incorrect behaviour
    $ traceroute
    traceroute to (, 30 hops max, 60 byte packets
     1  pfSense.localdomain (  0.192 ms  0.167 ms  0.143 ms
     9 (  72.576 ms  71.077 ms *
    Correct behaviour (using VPN gateway)
    $ traceroute
    traceroute to (, 30 hops max, 60 byte packets
     1 (  260.782 ms  260.796 ms  260.826 ms
    16 (  536.298 ms  531.746 ms *

    Is there any way to debug this behaviour?


  • Turns out that the akamai host is changing its ip address and filterdns is not able to catchup.

  • I decided to use my own dns server as domain override. To test the DNS server i tried it directly,

    $ nslookup 
    > server
    Default server:
    Non-authoritative answer:    canonical name =

    and it works as seen above. Next i changed the Domain override as follows,

    alt text

    But nslookup fails to work

    $ nslookup 
    ;; Got SERVFAIL reply from, trying next server
    ;; connection timed out; no servers could be reached

    Any idea what is wrong?

Log in to reply