Unable to Resolve www.worldometers.info



  • Hi, anyone having this issue? i have 3 pfsense in 3 different location all reported same problem...
    all site is running with DNS resolver.
    cae1e0de-9410-46dc-a6e4-a50dbd76cba8-image.png



  • Im kinda believe'n this is a spam style flyby.. Political in nature.



  • Running Resolver here, no issue.
    https://www.worldometers.info/coronavirus/

    96ab3a36-0b1c-43bd-8407-7ed779feee48-image.png



  • @hhoong

    Works fine here.


  • LAYER 8 Global Moderator

    Are you resolving? Or are you forwarding to some NS, if so what?

    This resolves just fine.. And here is the trace showing how it is resolved.

    $ dig www.worldometers.info +trace
    
    ; <<>> DiG 9.16.1 <<>> www.worldometers.info +trace
    ;; global options: +cmd
    .                       848     IN      NS      f.root-servers.net.
    .                       848     IN      NS      b.root-servers.net.
    .                       848     IN      NS      d.root-servers.net.
    .                       848     IN      NS      l.root-servers.net.
    .                       848     IN      NS      g.root-servers.net.
    .                       848     IN      NS      m.root-servers.net.
    .                       848     IN      NS      c.root-servers.net.
    .                       848     IN      NS      h.root-servers.net.
    .                       848     IN      NS      i.root-servers.net.
    .                       848     IN      NS      a.root-servers.net.
    .                       848     IN      NS      k.root-servers.net.
    .                       848     IN      NS      e.root-servers.net.
    .                       848     IN      NS      j.root-servers.net.
    .                       848     IN      RRSIG   NS 8 0 518400 20200515050000 20200502040000 48903 . dGTnT7OISNAcz0hcLgOXqLpvSAMJBWDpi1XSSvWpVekIo3ZOwfOHqMdJ DcZlGtmC4QfU7YXJi9LBVdCI57v9AbL8uyOJhCFVPmmjXoZvijZ9toPd Ou0YMdBQG2y5ToXinStHcZGeICNUYpwPyuNs+ulK7smJd7Co4N5y5V3t V+SO9wmVQNou3TIrUUX6KQ7DmyPBmoFIs24wy4NeQ/q547QZgSff7LUP 5rJMwxQhPwy3V3FcaMSbJfHFu5uO3WIHXS98i6HNVw/8G02xhHsTBtj3 NVsXzOB1Wfu4NERzka+Tle53jeK4TZnGWdXldnw4/729RVVVpfF4KpGt j3UQpw==
    ;; Received 525 bytes from 192.168.3.10#53(192.168.3.10) in 1 ms
    
    info.                   172800  IN      NS      a0.info.afilias-nst.info.
    info.                   172800  IN      NS      a2.info.afilias-nst.info.
    info.                   172800  IN      NS      b0.info.afilias-nst.org.
    info.                   172800  IN      NS      b2.info.afilias-nst.org.
    info.                   172800  IN      NS      c0.info.afilias-nst.info.
    info.                   172800  IN      NS      d0.info.afilias-nst.org.
    info.                   86400   IN      DS      8674 7 1 197789A2CBABA6FECD0B5AC88C5BC414CE1FC309
    info.                   86400   IN      DS      8674 7 2 EC9B6082B96B5F87143696F2B483ACC9B2C433DCE0C94E70F1FF5648 CA18008B
    info.                   86400   IN      RRSIG   DS 8 1 86400 20200516050000 20200503040000 48903 . eUpv5wm4BegEB1eLUx1HTRA2DIuyLRjmulteRIimx0VrSEx79j5j8HyH SF5bHs90HzjD/J1SpTC6QkKG/PnUGiJxFFAFmo1cXb99KSHTcRkzbHrg MQayosTK1j0PuGbxYwalNDiNWoYNgl0ErDn+rJXk9t98MCBAoZRer7rb XT2EZ3Dj/gBz60FwBK8l/N7iaFlNWiNjBSCn8f3dR0Zer2HVsGFyVtQI TNrOrYtICgzGqh7ZKhBqs5bZeGgB7tzUplYB/9OUb+3LcihiVF3PHgqn iu2evVDuXz1MXuQjag3RZF/KnU+bMw1uMPKdxAEnFgkp0RgwTFy8IgHt aneOvw==
    ;; Received 824 bytes from 192.5.5.241#53(f.root-servers.net) in 35 ms
    
    worldometers.info.      86400   IN      NS      moura.ns.cloudflare.com.
    worldometers.info.      86400   IN      NS      collins.ns.cloudflare.com.
    adnsd9nk7nk82he8h21rj0jjhj11o5gb.info. 3600 IN NSEC3 1 1 1 D399EAAB ADNVG6B2JJN9MIEU7DJB24BL7RG5MDPI NS SOA RRSIG DNSKEY NSEC3PARAM
    adnsd9nk7nk82he8h21rj0jjhj11o5gb.info. 3600 IN RRSIG NSEC3 7 2 3600 20200524115927 20200503105927 10544 info. GK/dXpMq+q/DtXuSRmLmeQkKDStjUujOurmKUxZTYrO9H3yWK5KXC5hs FVoMVQwGE4WyLnUe7bAUrMvyn3yToJQ/M+dER6tnVqq4Jm0MC++az9Kh oMHwkyT47aomHIjRvejLUjC/RN+xKrveTEh5cifTkmc5a0R+kL9yDQmV Ljg=
    j5pp0lj9ubr4gc69kn0f92n8hl9fia5m.info. 3600 IN NSEC3 1 1 1 D399EAAB J5PRQOQOFDNL3C96SOQM6UMF21J9D6NU NS DS RRSIG
    j5pp0lj9ubr4gc69kn0f92n8hl9fia5m.info. 3600 IN RRSIG NSEC3 7 2 3600 20200522152132 20200501142132 10544 info. bF5/e3x5Voy0S7F3MUtgohAwNaJ7tjsZkfVryubOmLQAoLCCxhCNDbtZ 9aw2MTIc9dpQpxfUi48g94//Vk9sRUZduvaf3zNVIh4l/WtIggFiKPHP OhtBY6OOrBL8j/SIFspj3pp4V1r2RExn+w1ZKSADctQr2oRavuloY6KC fl8=
    ;; Received 604 bytes from 199.249.113.1#53(a2.info.afilias-nst.info) in 16 ms
    
    www.worldometers.info.  300     IN      A       104.26.5.2
    www.worldometers.info.  300     IN      A       104.26.4.2
    ;; Received 82 bytes from 162.159.44.217#53(moura.ns.cloudflare.com) in 14 ms
    

    If your resolving and not working - where is it failing, lets see the trace from your pfsense..



  • @johnpoz

    dig worldometers.info +trace

    ; <<>> DiG 9.14.9 <<>> worldometers.info +trace
    ;; global options: +cmd
    . 57654 IN NS a.root-servers.net.
    . 57654 IN NS b.root-servers.net.
    . 57654 IN NS c.root-servers.net.
    . 57654 IN NS d.root-servers.net.
    . 57654 IN NS e.root-servers.net.
    . 57654 IN NS f.root-servers.net.
    . 57654 IN NS g.root-servers.net.
    . 57654 IN NS h.root-servers.net.
    . 57654 IN NS i.root-servers.net.
    . 57654 IN NS j.root-servers.net.
    . 57654 IN NS k.root-servers.net.
    . 57654 IN NS l.root-servers.net.
    . 57654 IN NS m.root-servers.net.
    . 57654 IN RRSIG NS 8 0 518400 20200516170000 20200503160000 48903 . ixcOjZ5e4x/QGKzUs6DD3WZb738Prf6PXyJZCOudIRZ6ghuxv2bMSOXw FNDz7yP3q7XmSp7/LPcaWQf2jHKlReVvXgXkXbsXd+USXZ1tGrcwnTjX pXIieYo12fBidt9vLV/5hFz4e2YGUWl9i0146fb8Vop/slcETAba5wpf Jj+bzPGpKiu9Inm0CJMLZxlrBm/dIhnhmYQhCmpGUhtBIRueDL1hArXp GukbMmScfuktOCD8ori+6l+NUM5U9V3klAZg3LYXXRmBaqYBgpRN7x/B d2La2VLoUKpcdiRAwM+cJiivoejYH6pa63sj4Xewr0z7Cq8jb89P4c2w qs1dXA==
    ;; Received 525 bytes from 127.0.0.1#53(127.0.0.1) in 1 ms

    info. 172800 IN NS a0.info.afilias-nst.info.
    info. 172800 IN NS a2.info.afilias-nst.info.
    info. 172800 IN NS b0.info.afilias-nst.org.
    info. 172800 IN NS b2.info.afilias-nst.org.
    info. 172800 IN NS c0.info.afilias-nst.info.
    info. 172800 IN NS d0.info.afilias-nst.org.
    info. 86400 IN DS 8674 7 1 197789A2CBABA6FECD0B5AC88C5BC414CE1FC309
    info. 86400 IN DS 8674 7 2 EC9B6082B96B5F87143696F2B483ACC9B2C433DCE0C94E70F1FF5648 CA18008B
    info. 86400 IN RRSIG DS 8 1 86400 20200517050000 20200504040000 48903 . KPfLBaO9rbq5LhAAjF6yt/xiTH7qVgGzTkEpoTqTLhwSn8kecKzcDE5H P/qeUxA+jjmAsAA8Cl0ENtFsbtOVs6s1GteyxS3jx1YoL4sDLvs6wj8D vMTdNfaMDqPAVPYJDTiVXcvuG7sxOqyYEF07oTPtOqQ6kZ/MhgyLIC8S XxAe95kJnxj5hKJqzjmizlxNy56I5MV30FH9VC1VsIWvAfViE5uq2JNs gDhm6a5jNEYXWrtVTl4+zM7K7dStO3+f8X87L0DW0x85v/gN2QmeawQD YIJlJDRLwrH1jF3/Bvce4S+xYPEd4xGDDGk80mX3JK3OqQ82gTaGWVFl YuNBUg==
    ;; Received 820 bytes from 198.97.190.53#53(h.root-servers.net) in 175 ms

    worldometers.info. 86400 IN NS collins.ns.cloudflare.com.
    worldometers.info. 86400 IN NS moura.ns.cloudflare.com.
    adnsd9nk7nk82he8h21rj0jjhj11o5gb.info. 3600 IN NSEC3 1 1 1 D399EAAB ADNVG6B2JJN9MIEU7DJB24BL7RG5MDPI NS SOA RRSIG DNSKEY NSEC3PARAM
    adnsd9nk7nk82he8h21rj0jjhj11o5gb.info. 3600 IN RRSIG NSEC3 7 2 3600 20200525111235 20200504101235 10544 info. MhAkTtKuXTb7wmZ1hhcF1z7eBLh/sM/DcFNkhK48bW5mTIg6TU1m01nE zcFMxFaDOU3Kt60UUSp9fOFyU0DsKU2yNRYLgyCqFLK4fGuwObRBXA/l jUyZh2VRDpBUl3+MSftz7sBW4T6mcVa1OQCUmaApXwFw8MpVas4/qcwE hMY=
    j5pp0lj9ubr4gc69kn0f92n8hl9fia5m.info. 3600 IN NSEC3 1 1 1 D399EAAB J5PRQOQOFDNL3C96SOQM6UMF21J9D6NU NS DS RRSIG
    j5pp0lj9ubr4gc69kn0f92n8hl9fia5m.info. 3600 IN RRSIG NSEC3 7 2 3600 20200522152132 20200501142132 10544 info. bF5/e3x5Voy0S7F3MUtgohAwNaJ7tjsZkfVryubOmLQAoLCCxhCNDbtZ 9aw2MTIc9dpQpxfUi48g94//Vk9sRUZduvaf3zNVIh4l/WtIggFiKPHP OhtBY6OOrBL8j/SIFspj3pp4V1r2RExn+w1ZKSADctQr2oRavuloY6KC fl8=
    ;; Received 600 bytes from 199.254.48.1#53(b0.info.afilias-nst.org) in 241 ms

    ;; connection timed out; no servers could be reached
    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root:
    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root:


  • LAYER 8 Global Moderator

    @hhoong said in Unable to Resolve www.worldometers.info:

    connection timed out; no servers could be reached

    Well you failing to talk to cloudflare NS from that statement.. So yeah those would fail..



  • @johnpoz

    how come only this www.worldometers.info not working, very odd, i mean i donno if there is anything else that not working, so far overall everything working just fine >.<


  • LAYER 8 Global Moderator

    Again you for whatever reason can not talk to the NS for that domain.. Do a directed query to either of those cloudflare ns

    example

    $ dig @collins.ns.cloudflare.com worldometers.info
    
    ; <<>> DiG 9.16.1 <<>> @collins.ns.cloudflare.com worldometers.info
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52275
    ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
    ;; WARNING: recursion requested but not available
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 512
    ;; QUESTION SECTION:
    ;worldometers.info.             IN      A
    
    ;; ANSWER SECTION:
    worldometers.info.      300     IN      A       104.26.4.2
    worldometers.info.      300     IN      A       104.26.5.2
    
    ;; Query time: 14 msec
    ;; SERVER: 162.159.38.226#53(162.159.38.226)
    ;; WHEN: Mon May 04 06:17:27 Central Daylight Time 2020
    ;; MSG SIZE  rcvd: 78
    


  • @johnpoz

    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root: dig @collins.ns.cloudflare.com worldometers.info

    ; <<>> DiG 9.14.9 <<>> @collins.ns.cloudflare.com worldometers.info
    ; (2 servers found)
    ;; global options: +cmd
    ;; connection timed out; no servers could be reached
    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root:

    anyway how do i reply in the black text box like u do ... LOL


  • LAYER 8 Global Moderator

    Use the code box

    quotebox.jpg

    Can you ping the IP even?

    $ ping collins.ns.cloudflare.com
    
    Pinging collins.ns.cloudflare.com [162.159.38.226] with 32 bytes of data:
    Reply from 162.159.38.226: bytes=32 time=29ms TTL=55
    Reply from 162.159.38.226: bytes=32 time=20ms TTL=55
    Reply from 162.159.38.226: bytes=32 time=13ms TTL=55
    

    Those NS are the authoritative NSers for that domain - so no if you can not talk to them, then you wouldn't be able to resolve stuff they are authoritative for..



  • @johnpoz

    can ping can nslookup
    odd right >.<

    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root: ping collins.ns.cloudflare.com
    PING collins.ns.cloudflare.com (162.159.38.226): 56 data bytes
    64 bytes from 162.159.38.226: icmp_seq=0 ttl=61 time=12.373 ms
    64 bytes from 162.159.38.226: icmp_seq=1 ttl=61 time=11.953 ms
    64 bytes from 162.159.38.226: icmp_seq=2 ttl=61 time=13.656 ms
    64 bytes from 162.159.38.226: icmp_seq=3 ttl=61 time=13.199 ms
    64 bytes from 162.159.38.226: icmp_seq=4 ttl=61 time=15.022 ms
    64 bytes from 162.159.38.226: icmp_seq=5 ttl=61 time=13.560 ms
    ^C
    --- collins.ns.cloudflare.com ping statistics ---
    6 packets transmitted, 6 packets received, 0.0% packet loss
    round-trip min/avg/max/stddev = 11.953/13.294/15.022/0.987 ms
    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root: nslookup collins.ns.cloudflare.com
    Server:         127.0.0.1
    Address:        127.0.0.1#53
    
    Non-authoritative answer:
    Name:   collins.ns.cloudflare.com
    Address: 162.159.38.226
    Name:   collins.ns.cloudflare.com
    Address: 2606:4700:50::a29f:26e2
    
    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root:
    

  • LAYER 8 Global Moderator

    Well I would say something is blocking port 53 to them then, either on your end, or the ISP or cloudflare themselves - or something between.

    But if you can not query them - then you can not resolve stuff they are authoritative for.

    Are you forcing traffic out a vpn connection? What part of the world are you in - is it one where they dick with dns queries?

    Can you query them for something else? Say for example.

    $ dig @collins.ns.cloudflare.com cloudflare.com
    
    ; <<>> DiG 9.16.1 <<>> @collins.ns.cloudflare.com cloudflare.com
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38819
    ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
    ;; WARNING: recursion requested but not available
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 512
    ;; QUESTION SECTION:
    ;cloudflare.com.                        IN      A
    
    ;; ANSWER SECTION:
    cloudflare.com.         300     IN      A       104.17.175.85
    cloudflare.com.         300     IN      A       104.17.176.85
    
    ;; Query time: 16 msec
    ;; SERVER: 162.159.38.226#53(162.159.38.226)
    ;; WHEN: Mon May 04 06:40:32 Central Daylight Time 2020
    ;; MSG SIZE  rcvd: 75
    


  • @johnpoz

    No VPN, I'm from Malaysia,
    I have 3 pfsense across 3 location, all using same telco, all 3 not working ☹

    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root: dig @collins.ns.cloudflare.com cloudflare.com
    
    ; <<>> DiG 9.14.9 <<>> @collins.ns.cloudflare.com cloudflare.com
    ; (2 servers found)
    ;; global options: +cmd
    ;; connection timed out; no servers could be reached
    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root:
    

  • LAYER 8 Global Moderator

    @hhoong said in Unable to Resolve www.worldometers.info:

    all using same telco

    Well that would seem to be a problem then with them.

    You for whatever reason can not query them for dns - so no you wouldn't not be able to resolve anything that they are authoritative for..

    Can you get to https://www.cloudflare.com/

    even - maybe they don't like your ISP and are blocking them ;) Do you get a captcha when you try and access?



  • @johnpoz said in Unable to Resolve www.worldometers.info:

    @hhoong said in Unable to Resolve www.worldometers.info:

    all using same telco

    Well that would seem to be a problem then with them.

    You for whatever reason can not query them for dns - so no you wouldn't not be able to resolve anything that they are authoritative for..

    Can you get to https://www.cloudflare.com/

    even - maybe they don't like your ISP and are blocking them ;)

    thanks for the info :)

    i guess now the only way for me to able to query www.worldometers.info is to enable forwarding in my DNS resolver.

    i can access to https://www.cloudflare.com/ main page,

    @hhoong said in Unable to Resolve www.worldometers.info:

    @johnpoz

    can ping can nslookup
    odd right >.<

    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root: ping collins.ns.cloudflare.com
    PING collins.ns.cloudflare.com (162.159.38.226): 56 data bytes
    64 bytes from 162.159.38.226: icmp_seq=0 ttl=61 time=12.373 ms
    64 bytes from 162.159.38.226: icmp_seq=1 ttl=61 time=11.953 ms
    64 bytes from 162.159.38.226: icmp_seq=2 ttl=61 time=13.656 ms
    64 bytes from 162.159.38.226: icmp_seq=3 ttl=61 time=13.199 ms
    64 bytes from 162.159.38.226: icmp_seq=4 ttl=61 time=15.022 ms
    64 bytes from 162.159.38.226: icmp_seq=5 ttl=61 time=13.560 ms
    ^C
    --- collins.ns.cloudflare.com ping statistics ---
    6 packets transmitted, 6 packets received, 0.0% packet loss
    round-trip min/avg/max/stddev = 11.953/13.294/15.022/0.987 ms
    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root: nslookup collins.ns.cloudflare.com
    Server:         127.0.0.1
    Address:        127.0.0.1#53
    
    Non-authoritative answer:
    Name:   collins.ns.cloudflare.com
    Address: 162.159.38.226
    Name:   collins.ns.cloudflare.com
    Address: 2606:4700:50::a29f:26e2
    
    [2.4.5-RELEASE][admin@pfSense-Router.HuiHoong.Home]/root:
    

    i can ping and nslookup to the collins.ns.cloudflare.com as well, maybe is time for me to get a VPN ☺



  • Could the ISP be blocking DNS to any servers but their own?


  • LAYER 8 Global Moderator

    No since from his trace he talked to roots, and the affiliates.. He got told where to go for his domain in his trace.. He just can't seem to get there.



  • @provels

    I'm not sure but overall my DNS resolver was working, i just notice this www.worldometers.info not working for now, not sure of any other that is not working.
    But base on what u said, maybe all that register under @collins.ns.cloudflare.com, most likely i not able to query ...


  • LAYER 8 Global Moderator

    No you would not be able to resolve anything that you can not talk to the authoritative NS for.. When you resolve you directly talk to the authoritative NS for that domain.. If you can not get to any of them, then anything they are authoritative for would fail to resolve..

    That is how resolving works.. You get the info straight from the horses mouth - if you can not talk to the horse, then yeah you going to have a bad day.

    I would get with your ISP to be honest, and ask them why you can not query that NS.



  • @johnpoz said in Unable to Resolve www.worldometers.info:

    No you would not be able to resolve anything that you can not talk to the authoritative NS for.. When you resolve you directly talk to the authoritative NS for that domain.. If you can not get to any of them, then anything they are authoritative for would fail to resolve..

    That is how resolving works.. You get the info straight from the horses mouth - if you can not talk to the horse, then yeah you going to have a bad day.

    yea ... sad,
    i was so excited when i was able to not to "leak my DNS", now seem like i have to open up back to 1.1.1.1

    ☹


  • LAYER 8 Global Moderator

    Ask your ISP why you can not query that ns or the other one listed.

    moura.ns.cloudflare.com

    You can ping them - so you have connectivity to them, so why no query on 53?



  • @johnpoz said in Unable to Resolve www.worldometers.info:

    Ask your ISP why you can not query that ns or the other one listed.

    moura.ns.cloudflare.com

    You can ping them - so you have connectivity to them, so why no query on 53?

    i don't think they will entertain me, they would ask me to use DNS forwarder and point to them.

    do pfsense resolver support DNS over SSL/TLS for outgoing to root DNS? if can, what if i enable?
    i dont seem to able to find that option.


  • LAYER 8 Global Moderator

    @hhoong said in Unable to Resolve www.worldometers.info:

    SSL/TLS for outgoing to root DNS?

    No doesn't work that way... Every single NS on the planet would have to support tls for something like that to work.. And GAWD would be be horribly slow!!!



  • @johnpoz

    Then is sad, so for the time been i have to enable forward in my DNS resolver ☹
    until i get a VPN... haha

    thanks for all the help :)


  • LAYER 8 Global Moderator

    Well if you have only found that specific one - you could prob just do a domain override to send that domain to wherever..



  • @johnpoz
    hmm, let me try ...


  • LAYER 8 Global Moderator

    But if you can not talk to those specific ns for cloudflare, its possible you can not talk to others. Also I would "assume" that those ns are used for more than just that specific domain.. So there could be others that you can not resolve - that you have just not found yet.

    So while a conditional forward would allow you to resolve this specific domain, you could have things that don't resolve later that you have just not run across yet. So it would be a wack-a-mole game.. The root of the problem is you can not talk to those NS for whatever reason via dns query.



  • This one :

    @johnpoz said in Unable to Resolve www.worldometers.info:

    moura.ns.cloudflare.com

    and it's brother collins.ns.cloudflare.com are most probably servers or VPS hosted by cloudflare. To me, it like they are dedicated servers that have as a role : a name server.
    But they are managed by a private person, because :
    Double; identical A records are returned.
    Both name servers are in the same AS : that a DNS bad practice.
    "cloudfare" should never done that.
    And private person means : a trigger happy server with fail2ban, DNSBL software ....

    This ll boils down to : you got yourself probably blacklisted - or worse, your (ISP) WAN IP is on some blacklist, used by the guy who operates worldoyyyymeters.info.

    edit : I just had a look at what that site www.worldoyyyyymeters.info is ... a Corona counter ... 😨


  • LAYER 8 Global Moderator

    Where do you see they return the same IP?

    ;; ANSWER SECTION:
    collins.ns.cloudflare.com. 86383 IN A 162.159.38.226

    ;; ANSWER SECTION:
    moura.ns.cloudflare.com. 86375 IN A 162.159.44.217

    They are are in different networks..

    And that network is owned by cloudflare.. And while they are part of the same block, there is nothing wrong with having 2 ns in the same AS.. They just shouldn't be on the same network.. You could have same AS all over the globe, so there is no reason why they couldn't be in the same AS.. In a perfect world sure - you would put your NS in completely different AS, I agree.

    But sure if those are hosted by cloudflare for someone, if that someone runs that NS, then sure they could of blocked his IP or block.. Its its possible cloudflare is actually blocking his IP.. very possible!



  • @johnpoz said in Unable to Resolve www.worldometers.info:

    Where do you see they return the same IP?

    ;; ANSWER SECTION:
    collins.ns.cloudflare.com. 86383 IN A 162.159.38.226

    ;; ANSWER SECTION:
    moura.ns.cloudflare.com. 86375 IN A 162.159.44.217

    They are are in different networks..

    And that network is owned by cloudflare.. And while they are part of the same block, there is nothing wrong with having 2 ns in the same AS.. They just shouldn't be on the same network.. You could have same AS all over the globe, so there is no reason why they couldn't be in the same AS.. In a perfect world sure - you would put your NS in completely different AS, I agree.

    But sure if those are hosted by cloudflare for someone, if that someone runs that NS, then sure they could of blocked his IP or block.. Its its possible cloudflare is actually blocking his IP.. very possible!

    y they wanna block me... I'm so sad :(



  • @johnpoz said in Unable to Resolve www.worldoyyyymeters.info:

    Where do you see they return the same IP?

    Here :

    b5705b3c-6edf-4731-b9b0-2ef2016d7bb6-image.png

    AS : do something like https://www.zonemaster.net/domain_check

    @johnpoz said in Unable to Resolve www.worldoyyyymeters.info:

    there is nothing wrong with having 2 ns in the same AS

    It will work just fine. It just not good practice. Most domain - name - root server tester will tell you this.

    @johnpoz said in Unable to Resolve www.worldoyyyymeters.info:

    And that network is owned by cloudflare.

    The network, yes. These name server : I guess probably not - as said, some rented dedicated server.


  • LAYER 8 Global Moderator

    The hard part is figure out why you can not get there, clearly you can ping it.. But dns is being blocked somewhere between you and them.. Where that is happening is the question.


  • LAYER 8 Global Moderator

    That is the Site, not the NS for the domain.

    Look as something major player - and their NS are quite often on the same AS, just different network blocks - most likely in different regions of the world.

    We have same AS, and just different networks under the AS are advertised out of different locations..

    Now a days many of the IPs used for NS are just going to be anycast anyway. Look at google dns for example 8.8.8.8 and 8.8.4.4, both are in the same AS 15169



  • @hhoong said in Unable to Resolve www.worldometers.info:

    y they wanna block me... I'm so sad :(

    What about the solution that worked well for the last couple of thousand of centuries : ask them ? https://www.worldoxxxxxmeters.info/contact/



  • @Gertjan said in Unable to Resolve www.worldometers.info:

    @hhoong said in Unable to Resolve www.worldometers.info:

    y they wanna block me... I'm so sad :(

    What about the solution that worked well for the last couple of thousand of centuries : ask them ? https://www.worldometers.info/contact/

    actually not My IP that got blocked.
    i have 3 pfSense over 3 different location, but all same ISP, maybe the ISP been blocked?
    maybe i can ask https://www.worldometers.info/contact/ as u suggested :)



  • @hhoong said in Unable to Resolve www.worldometers.info:

    actually not My IP that got blocked.

    Still, not a real problem.
    Thee letter solution : VPN ;)
    ( to get an IP that will work )



  • You can traceroute to 104.26.5.2 and 104.26.4.2 all right?
    I suppose in the meantime you could add the IPs to /etc/hosts...no? Or is that what Host Overrides are for?
    Can't hit the target by using the IP in the URL.
    Just my 2 cents. Ignore as needed. :)

    613a8ac7-d9ad-4b3e-bdb0-505f3b5af5c0-image.png



  • @provels said in Unable to Resolve www.worldometers.info:

    Or is that what Host Overrides are for?

    Bringing the name resolution to home would work.
    The IP itself, the A record, is also not accessible for @hhoong.

    There is some progress on the site : it's loaded up to the ceiling with Google adds now.
    I had to stop pfBlocker to make it visible again.
    It's probably not even a dedicated web server, but a shared web server .... just some private guy who build it's own site, as we all do or have done.
    @hhoong : this site is just a small java counter with some html. Many other sites showing the same info exist, without obliteration the viewer with WoW publicity.



  • @Gertjan said in Unable to Resolve www.worldometers.info:

    There is some progress on the site : it's loaded up to the ceiling with Google adds now.
    I had to stop pfBlocker to make it visible again.

    Wow, didn't know. Never seen an ad there. Thanks, pfB!


Log in to reply