Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




8 posts

Wannabe Geek


Topic # 143791 27-Apr-2014 13:16
Send private message

Hi,

Long time reader, first time poster.

I'm at my G/F's place and have had a bit of trouble accessing particular sites/things on the net. I decided to do some digging. Something very suspicious (and peculiar) is happening and I'm trying to figure out exactly what is being futzed with on her connection.

I'm currently trying to determine whether any transparent DNS proxying is being applied by Telecom.  A simple way to test this is with the useful site DNSLeakTest.com

Trying to run a test using the router-assigned DNS servers result in the tests getting stuck before completing.  If I use alternative DNS servers via a VPN (home is a SNAP connection, work is a DTS connection) there's no problem and the standard tests completes as expected.

Telecom staff members on Geekzone:

Can someone from Telecom confirm or deny whether transparent DNS proxying takes place please?  If so, is there any disclosure that this takes place?

For other readers (Telecom customers):

Could you please do me a favour and point your browser to http://www.dnsleaktest.com and click the "Standard Test" button.
If the test completes you will be presented with a "Test Complete" heading on the page (plus some other stuff).  Please advise if the test completes OK. 

Optional details would also be helpful, consisting of:
Whether your IP allocation is dynamic or static.
Your location (city) in NZ. 
The model of router/modem you have.
Your DNS servers (from your modem's broadband connection status page, not your PC/Mac.).

Thanks VM.

Bert

Create new topic
25686 posts

Uber Geek
+1 received by user: 5441

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 1031997 27-Apr-2014 13:22
Send private message

It might help to explain what problem you're trying to solve, and more importantly whether you're using the Telecom DHCP allocated DNS servers. If you're not you should be unless you fully understand the issues that will result from using something different.

If you're seeing issues loading pages the most obvious cause is the use of incorrect DNS servers, DNS proxying won't be the cause of such issues. Telecom will let you use any DNS you want, but if you're going to use DNS servers other than those handed out to you (which are geo balanced to ensure you get the best performance) you need to be weighting up the pros and cons of 3rd party servers.





3388 posts

Uber Geek
+1 received by user: 1806

Trusted
Spark NZ

  Reply # 1032014 27-Apr-2014 14:24
Send private message

Can someone from Telecom confirm or deny whether transparent DNS proxying takes place please?  If so, is there any disclosure that this takes place?


No, and no, because there isn't.

How about explaining the issue you're having?

Cheers - N


 
 
 
 


1211 posts

Uber Geek
+1 received by user: 147


  Reply # 1032036 27-Apr-2014 14:34
Send private message

Not using a Technicolor router with windows 8.1 by chance? if so call telecom support and have it replace by a Huawei.





8 posts

Wannabe Geek


  Reply # 1032061 27-Apr-2014 14:43
Send private message

Hi Steve, thanks for the reply.

My specific problem appears to be that certain hosts are not being resolved. NSLookup reports "non existent domain".  In summary - When using Telecom's DNS servers, stuff doesn't work. When using another DNS server (connected via VPN to another network using other nameservers) (or Google's public ones) stuff does work.

The context of my post was in relation to Telecom's DNS servers (as this is a Telecom connection I'm on at present).   The DNS server being used by my machine is the router (a TG585v8) and the router is forwarding DNS queries to dynamically assigned (presumably) Telecom DNS servers 122.56.237.1 and 210.55.111.1.  Putting those two DNS servers into the TCP/IP settings of my machine manually does not resolve my problems. (i.e still using Telecom's DNS servers, but bypassing the router).  

In summary, NSLookup and DIG fail to get results from Telecom's nameservers.  I do get results querying Google's nameservers, or nameservers from an alt. ISP when connected to another network via a VPN.

Cheers
Bert

3388 posts

Uber Geek
+1 received by user: 1806

Trusted
Spark NZ

  Reply # 1032062 27-Apr-2014 14:45
Send private message

COuld you please supply some examples of domains that aren't being resolved by the Telecom DNS servers?

Cheers - N




8 posts

Wannabe Geek


  Reply # 1032065 27-Apr-2014 14:52
Send private message

Hi Neil, thanks for responding.

Thank you for confirming that no proxying takes place.

At a high level, I guess the issue is that some DNS queries return empty (no) results when in fact I do know said host does exist.

As yet I can't provide any steps to reproduce, other than suggesting you try dnsleaktest.com and see whether or not the test completes OK.  In my case it never completes when using Telecom's nameservers, but does complete when using nameservers from another network or when I tried Google's DNS servers.  Therefore I can't really define the problem more specifically, or suggest what the cause of these problems is, other than perhaps erroneous DNS query caching.

Cheers,
Bert

3388 posts

Uber Geek
+1 received by user: 1806

Trusted
Spark NZ

  Reply # 1032066 27-Apr-2014 14:56
Send private message

bertgt: [snip]

As yet I can't provide any steps to reproduce, other than suggesting you try dnsleaktest.com and see whether or not the test completes OK. [snip]


How about some examples of the websites that you have issues with?

bertgt:  I'm at my G/F's place and have had a bit of trouble accessing particular sites/things on the net.


Cheers - Neil G



8 posts

Wannabe Geek


  Reply # 1032067 27-Apr-2014 14:57
Send private message

Hi Aaron, 

As mentioned above it is a Thompson TG585v8.  It is running FW 8.2.7.8.  
I patched it with non-Telecom firmware a few months ago due to random issues I was once having with Google Drive causing the router to freeze.

Yes I know this voids any warranty etc.

What's the problem with the Technicolour routers and W8.1?

Cheers,
Bert


6041 posts

Uber Geek
+1 received by user: 159

Trusted

  Reply # 1032071 27-Apr-2014 15:11
Send private message

What's the problem with the Technicolour routers and W8.1?


DNS does not work

Cyril



8 posts

Wannabe Geek


  Reply # 1032077 27-Apr-2014 15:19
Send private message

Neil - I've PM'd you.
Cyril/Aaron - LOLs. Nice of Telecom to replace the routers then.



64 posts

Master Geek
+1 received by user: 12


  Reply # 1032197 27-Apr-2014 20:22
Send private message

cyril7:
What's the problem with the Technicolour routers and W8.1?


DNS does not work

Cyril


http://www.geekzone.co.nz/forums.asp?forumid=39&topicid=129101


1948 posts

Uber Geek
+1 received by user: 469
Inactive user


  Reply # 1032334 28-Apr-2014 08:08
Send private message

And if you do have VDSL with the older modems, you can log a case and normally get the new model Huawel modem.

Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

New Zealand government to create digital advisory group
Posted 16-Dec-2017 08:47


Australia datum changes means whole country moving 1.8 metres north-east
Posted 16-Dec-2017 08:39


UAV Traffic Management Trial launching today in New Zealand
Posted 12-Dec-2017 16:06


UFB connections pass 460,000
Posted 11-Dec-2017 11:26


The Warehouse Group to adopt IBM Cloud to support digital transformation
Posted 11-Dec-2017 11:22


Dimension Data peeks into digital business 2018
Posted 11-Dec-2017 10:55


2018 Cyber Security Predictions
Posted 7-Dec-2017 14:55


Global Govtech Accelerator to drive public sector innovation in Wellington
Posted 7-Dec-2017 11:21


Stuff Pix media strategy a new direction
Posted 7-Dec-2017 09:37


Digital transformation is dead
Posted 7-Dec-2017 09:31


Fake news and cyber security
Posted 7-Dec-2017 09:27


Dimension Data New Zealand strengthens cybersecurity practice
Posted 5-Dec-2017 20:27


Epson NZ launches new Expression Premium Photo range
Posted 5-Dec-2017 20:26


Eventbrite and Twickets launch integration partnership in Australia and New Zealand
Posted 5-Dec-2017 20:23


New Fujifilm macro lens lands in New Zealand
Posted 5-Dec-2017 20:16



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.