Vodafone DNS issues with www.bnz.co.nz

Forums › One NZ (including Farmside) › Vodafone DNS issues with www.bnz.co.nz

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#225643 28-Nov-2017 12:31

I've just had two customers within five minutes who can't resolve www.bnz.co.nz - They can resolve bnz.co.nz but not with www on the front. We changed their DNS to google (8.8.8.8) and they can then resolve it fine.

Interestingly www.bnz.co.nz resolves to xoqza.x.incapdns.net who run a service to block bad bots etc from resolving DNS to stop them getting to your website which may or may not be related (Perhaps Vodafone's DNS servers are being blocked by the Incapsula service??).

Either way it appears Vodafone are having DNS issues. At this point they don't list any faults and neither do BNZ but if you have issues with BNZ (or clients accessing it) this is likely why so see if they/you use Vodafone as a provider first.

Matt Beechey Mobius Network Solutions

Linux

12173 posts

Uber Geek
+1 received by user: 8469

Trusted

Lifetime subscriber

#1908975 28-Nov-2017 12:46

use https://www.bnz.co.nz works for me

Linux

zocster

1994 posts

Uber Geek
+1 received by user: 105

ID Verified

Trusted

Lifetime subscriber

#1908977 28-Nov-2017 12:51

Christchurch failed on mozilla.org currently using level3 dns settings. why is it that vodafone keeps breaking their dns?? Broken dns on cable, now fibre x. GRRR!!

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#1908979 28-Nov-2017 12:56

I've done some more testing. Its definitely Vodafone DNS but its an issue that its Some of Vodafone's DNS. It turns out that the DNS the clients that wouldn't work were

203.109.191.1 & 203.118.191.1

I used NSLOOKUP and used server 203.109.129.67 and it can resolve.

Stranger still if I do an NSLOOKUP from my pc off network it will resolve. Mean time using the problem servers for that client resolves any other queries - Its just www.bnz.co.nz it can't resolve.

So ns1.ihug.co.nz is fine - rdns1.ihug.net isn't working.

Definitely something funny going on with Vodafone DNS

Matt Beechey Mobius Network Solutions

MikeHales

615 posts

Ultimate Geek
+1 received by user: 213

Trusted

#1908993 28-Nov-2017 13:12

Will investigate

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#1909000 28-Nov-2017 13:51

Its getting a little frustrating - We now have three customers swearing due to this fault. One of them we've had to rush out to as they basically rang swearing that what we did yesterday has caused all sorts of problems and when we get there their problems are related to Vodafone DNS issues.

Hard for me to bill clients time spent establishing its a Vodafone problem but I'm not one to just implement a workaround and run away as using third party DNS can cause its own issues.

Due to the limited vodafone/vodafone login we can't change the DNS in the router to Vodafone's other DNS that appear to work and its tough talking a client through finding the serial number on the back of the router over the phone when they don't even know what a router it or where it is.

Matt Beechey Mobius Network Solutions

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#1909007 28-Nov-2017 14:13

I've just had a client who was on my list to jump in and resolve - By the time I got in remotely with her the problem had resolved. She can now visit www.bnz.co.nz and also their own website which wasn't resolving so fingers crossed vodafone have gotten to the bottom of it rather than it just self resolving with no explanation?

I'll now jump into others and set their DNS back to automatic and check it out when I can without further interrupting their work flow.

Matt Beechey Mobius Network Solutions

Apple TV

Stream your favourite shows now on Apple TV (affiliate link).

MikeHales

615 posts

Ultimate Geek
+1 received by user: 213

Trusted

#1909015 28-Nov-2017 14:31

Apologies was an issue with Chch DNS, traffic now rerouted and should all be OK.

tehgerbil

1110 posts

Uber Geek
+1 received by user: 884

ID Verified

Subscriber

#1909028 28-Nov-2017 15:06

There was also an issue with DUN DNS, our DCC websites stopped working too from Dunedin based Vodafone connections.

Mattmannz

471 posts

Ultimate Geek
+1 received by user: 88

#1909029 28-Nov-2017 15:07

mobiusnz:

Its getting a little frustrating - We now have three customers swearing due to this fault. One of them we've had to rush out to as they basically rang swearing that what we did yesterday has caused all sorts of problems and when we get there their problems are related to Vodafone DNS issues.

Hard for me to bill clients time spent establishing its a Vodafone problem but I'm not one to just implement a workaround and run away as using third party DNS can cause its own issues.

Due to the limited vodafone/vodafone login we can't change the DNS in the router to Vodafone's other DNS that appear to work and its tough talking a client through finding the serial number on the back of the router over the phone when they don't even know what a router it or where it is.

We won't support any business clients with an ISP supplied router - first thing we do is replace the router with one that lets us do secure remote management.

Had two south island clients a couple of hours ago with the same problems.

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#1909040 28-Nov-2017 15:42

@MikeHales - Thanks for that - Got to say posting this sort of issue here is a lot easier than getting through the helpdesk :)

@MattmanNZ - True - But it can be a hard sell as people find it hard to believe the ISP supplied "free" device won't cut the mustard. I constantly have to explain that to get what I expect from my 100/100 Fibre connection at home I spent $500 on a pair of good Unifi access points, $250 on a router and also have a good gigabit switch to link it all. It always makes me laugh when users say their new fibre at home is no faster than the ADSL they had as all they've done is made poor wifi the new bottleneck.

Matt Beechey Mobius Network Solutions

stinger

628 posts

Ultimate Geek
+1 received by user: 169
Inactive user

#1909229 28-Nov-2017 22:11

mobiusnz:

So ns1.ihug.co.nz is fine - rdns1.ihug.net isn't working.

Definitely something funny going on with Vodafone DNS

Please tell me that Vodafone are not giving out ns1.ihug.co.nz as a resolving name server to their customers? It's been at least ten years since best practice is not to use authoritative name servers as resolving servers too. For example, if acme.nz change their nameservers from ihug to Spark, it will take ihug some time for them to remove it from ns1.ihug.co.nz, and the other authoritative name servers for the domain. In the meantime, Vodafone customers will be getting the old (incorrect) results.

New World

Shop on-line at New World now for your groceries (affiliate link).

yitz

2238 posts

Uber Geek
+1 received by user: 594

#1909240 28-Nov-2017 22:37

I think 203.109.191.1 & 203.118.191.1 are the IPv4 resolver addresses being handed out. More than likely they will be anycast routed across the country, so on-net broadband customers will be routed to the nearest servers geographically. If you're testing off-net from the outside you'll probably end up at the server closest to mutual peering location (Auckland).

Goosey

3014 posts

Uber Geek
+1 received by user: 867

Subscriber

#1909301 29-Nov-2017 08:17

Hmmm... wondering if this was my problem yesterday (In ChCh). Had to slip down to 3G to get any mobile data to work.

Ive only just upgraded to new IOS11.x.x (Iphone7).

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#1909303 29-Nov-2017 08:25

@stinger - it was just he first other Vodafone DNS server I could think of to try with nslookup. I’d already proven it worked with Google so was just trying to narrow the problem down. I’d already discovered all the sites that were affected wer Vodafone sites but I had other vodafone sites not affected. Obviously still big network differences between their different technologies and Telstraclear / Ihug parts of the network.

@yitz - that explains why some vodafone network clients didn’t have the problem and also I could query the same server externally and it worked.

I’d love to see a picture of Vodafone’s network. Still amazed me that do DNS changes for old domains I have to ring through to a small ex Paradise team in Wellington. They were bought by Clear or Telstraclear years ago.

Matt Beechey Mobius Network Solutions