DNS problems with GZ on TCL

Forums › Geekzone › DNS problems with GZ on TCL

blair003

557 posts

Ultimate Geek

#111862 17-Nov-2012 11:51

Hello, posting from phone so excuse berivity or is I missed a related thread.

I can't access geekzone from work which is a TCL fibre BIA connection. Started happening yesterday afternoon I think. I am not having issues with any other sites, could it be at GZs end?

GZ works fine from home (snap) and mobile (telecom).

freitasm

BDFL - Memuneh
76401 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#718714 17-Nov-2012 11:53

What DNS is your connection using?

I am on TelstraClear cable and have no problems here. We use 203.97.78.43 and 203.97.78.44 for DNS.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

freitasm

BDFL - Memuneh
76401 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#718718 17-Nov-2012 11:59

Also, could you try this on a Windows box and post the results?

nslookup www.geekzone.co.nz

Here I get this:

 
Server:  srp521w 
Address:  192.168.2.1 
 
Name:    www.geekzone.co.nz 
Addresses:  2400:cb00:2048:1::6ca2:ca42 
	  2400:cb00:2048:1::6ca2:cb42 
	  108.162.202.66 
	  108.162.203.66

Note that 192.168.2.1 is my router, and that gets the DNS from the servers I have mentioned before.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

blair003

557 posts

Ultimate Geek

#718719 17-Nov-2012 11:59

I was using root hints on a local SBS box. Never had issues with this method before, and I was not having issues with any other websites. If I use those forwarders it all works fine.

freitasm

BDFL - Memuneh
76401 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#718721 17-Nov-2012 12:02

For best results make sure you use the appropriate DNS for TelstraClear in your network.

Using third party DNS will make things harder, possibly making local cached content unavailable and creating problems with their transparent proxy or firewall.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

blair003

557 posts

Ultimate Geek

#718726 17-Nov-2012 12:08

I removed the DNS forwarders did the nslookup and got the same result as you. Figured it might be cached, so I cleared the cache on the local DNS server but it all still worked without forwarders.

I will go back to using forwarders though. I vaguely recall a significant DNS (bind?) security issue within the past year or two which meant I perceived using forwarders as riskier. Prior to that I had always used forwarders as I figured the ISP's servers would have more cached results.

Zeon

3876 posts

Uber Geek

Trusted

#718736 17-Nov-2012 12:43

Lol you should never use root hints. Use your ISP's DNS servers. I have also stopped using the DNS forwarder service in Windows servers now - doing it all through my routers (pfsense) with an overide for .local addresses.

Speedtest 2019-10-14

blair003

557 posts

Ultimate Geek

#718748 17-Nov-2012 13:27

Well thanks for that. Now that someone in an internet forum has said never use root hints without any reasoning at all, I will take that for gospel.

Seriously dude, some of us like to learn so we can make our own decisions now and in the future. So a bit more information on your point of view would be good. What is inherently wrong with root hints? Must be some pretty compelling reasoning to say that it should never be used.

mercutio

1387 posts

Uber Geek

#725192 30-Nov-2012 15:32

blair003: Well thanks for that. Now that someone in an internet forum has said never use root hints without any reasoning at all, I will take that for gospel.

Seriously dude, some of us like to learn so we can make our own decisions now and in the future. So a bit more information on your point of view would be good. What is inherently wrong with root hints? Must be some pretty compelling reasoning to say that it should never be used.

it puts more unnecessary load on the root nameservers, and the second level name servers.