News for hackers. Stuff that matters.

A comment on On Firefox moving DNS to a third party. Parent comment

Re:On Firefox moving DNS to a third party by Habbie on Tuesday September 04, 2018 @01:45PM (#17911104)
Can you share the domain name so we can investigate?
[ Parent | on HN ]
Re:On Firefox moving DNS to a third party by buckminster on Tuesday September 04, 2018 @06:15PM (#17913325)
I can't share the domain name but its DNS servers are:

  ns3.cisws.nl
  ns6.cis-websolutions.nl
[ Parent | on HN ]
Re:On Firefox moving DNS to a third party by mnordhoff on Tuesday September 04, 2018 @07:05PM (#17913639)
Sharing the domain is usually critical.

Picking a random domain hosted on those nameservers, mdfs.net, it looks like, of the 4 IPs, 2 are down and 1 of the remaining ones doesn't support TCP.

http://dnsviz.net/d/mdfs.net/W48OcQ/dnssec/ https://ednscomp.isc.org/ednscomp/4040283963

1.1.1.1 is less tolerant than some resolvers of that level of breakage.

https://community.cloudflare.com/t/ipv6-timeouts-appear-to-b...

[ Parent | on HN ]
Re:On Firefox moving DNS to a third party by buckminster on Tuesday September 04, 2018 @07:32PM (#17913792)
Thanks for having a look. If I understand that correctly the DNS servers are returning IPv6 addresses for themselves, which aren't functioning. So he needs to get his host to stop returning the IPv6 addresses (or to fix IPv6).
[ Parent | on HN ]
Re:On Firefox moving DNS to a third party by mnordhoff on Tuesday September 04, 2018 @07:46PM (#17913879)
Yup. And also one of the IPv4 IPs isn't doing TCP.

I'm not sure nothing else is wrong, but the IPv6 issue is likely why 1.1.1.1 is having trouble resolving it.

[ Parent | on HN ]