Issue with 2degrees NS?

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Issue with 2degrees NS?

Theclaytons

203 posts

Master Geek

#277345 9-Oct-2020 07:11

Hi,

I've got a strange issue with 2degrees DNS that I can't seem to get a straight answer from anyone from. The issue is with DNS propagation to Google (and a few other) DNS servers.

When I dig the scenicgroup.co.nz domain for any DNS record for some servers (most noticably Google) it does not return any records. For most o thge others it does. e.g.

scenicgroup.co.nz@8.8.4.4 (Default): Copy results to clipboard
dig +noadditional +noquestion +nocomments +nocmd +nostats scenicgroup.co.nz. @8.8.4.4

The same query from CloudFlare or Open DNS returns records as expected

scenicgroup.co.nz@1.1.1.1 (CloudFlare):
dig +noadditional +noquestion +nocomments +nocmd +nostats scenicgroup.co.nz. @1.1.1.1
scenicgroup.co.nz. 300 IN A 119.47.120.70

scenicgroup.co.nz@208.67.222.222 (OpenDNS):
dig +noadditional +noquestion +nocomments +nocmd +nostats scenicgroup.co.nz. @208.67.222.222
scenicgroup.co.nz. 300 IN A 119.47.120.70

I have logged 2 x tickets with 2degrees who have done nothing and logged a ticket with Google DNS bug tracker and I got this suggestion:

There appears to be some sort of rate limiting/firewalling/access control or similar on your authoritative servers. From any IP controlled by Google that I've tried:

$ dig @ns3.snap.net.nz. scenicgroup.co.nz. A

; <<>> DiG 9.16.6-Debian <<>> @ns3.snap.net.nz. scenicgroup.co.nz. A
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1449
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
...

Your authoritative server refuses to answer, producing a SERVFAIL.

This to me looks like an issue with 2degrees DNS servers - can anyone shed any further light on this issue? This is affecting email and web browsing where google DNS servers are set.

Any help greatly appreicated.

http://www.speedtest.net/result/6594768645.png

freitasm

BDFL - Memuneh
79314 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2581729 9-Oct-2020 07:49

Is 2degrees your domain NS host?

Theclaytons

203 posts

Master Geek

#2581730 9-Oct-2020 07:50

2Degrees is my NS provider.....

http://www.speedtest.net/result/6594768645.png

freitasm

BDFL - Memuneh
79314 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2581732 9-Oct-2020 07:51

Any particular reason? Why not use Umbrellar - or even move DNS to Cloudflare?

Theclaytons

203 posts

Master Geek

#2581733 9-Oct-2020 07:52

It is on the list to change, but that does not fix my current problem quickly

http://www.speedtest.net/result/6594768645.png

freitasm

BDFL - Memuneh
79314 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2581734 9-Oct-2020 07:54

Changing NS is probably quicker than waiting for the ISP to change their systems.

It could be rate limiting in an attempt to prevent DDoS in which case it will be a lengthy process to change.

aspired

32 posts

Geek

ID Verified

Trusted

2degrees

#2581755 9-Oct-2020 08:58

I've just fixed this one up, should be good now - there was an error in one of the scenicgroup.co.nz resource records, causing SERVFAIL for the whole zone.
I'll respond to your support ticket with further details.

freitasm

BDFL - Memuneh
79314 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2581758 9-Oct-2020 09:06

Well, there you go... Thanks @aspired

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

Theclaytons

203 posts

Master Geek

#2581764 9-Oct-2020 09:10

Thank you - seems to be resolving now.

Keen to undestand what change affected this.....

http://www.speedtest.net/result/6594768645.png

icecold510

1 post

Wannabe Geek

#2610971 26-Nov-2020 10:14

We are currently experiencing the same issue.

The website works fine on 2degreess mobile but not 2 degrees fiber. seems the DNS propagation has not taken effect?

spacedog

482 posts

Ultimate Geek

#2610983 26-Nov-2020 10:21

I'm on 2d fibre and currently this reporting:

> scenicgroup.co.nz
Server: resolver02.2degrees.nz
Address: 111.69.69.69

Non-authoritative answer:
Name: scenicgroup.co.nz
Address: 119.47.120.70

Linux

11435 posts

Uber Geek

Trusted

Lifetime subscriber

#2610990 26-Nov-2020 10:34

@aspired

aspired

32 posts

Geek

ID Verified

Trusted

2degrees

#2611083 26-Nov-2020 12:19

icecold510:

We are currently experiencing the same issue.

The website works fine on 2degreess mobile but not 2 degrees fiber. seems the DNS propagation has not taken effect?

Hey @icecold510

Have replied to you DM, need a few more details so I can investigate

Cheers

Theclaytons

203 posts

Master Geek

#2614641 2-Dec-2020 11:32

Hi,

Got the sme problem now with a new domain: henterprises.co.nz - not propogating to Google DNS - most other servers are fine.

Logged 2 x job with @2degrees and the repose is to wait....any ideas?

I did see a post about using resolver servers in place of NS in another post https://www.geekzone.co.nz/forums.asp?forumid=85&topicid=272911

Should we be using new NS for DNS hosted at 2dregrees?

http://www.speedtest.net/result/6594768645.png

aspired

32 posts

Geek

ID Verified

Trusted

2degrees

#2614666 2-Dec-2020 12:10

Theclaytons:

Got the sme problem now with a new domain: henterprises.co.nz - not propogating to Google DNS - most other servers are fine.

Hi,

There was an issue causing that not to propagate which I've just fixed.
Currently there's no resource records for that domain, you can add these via your Self Care Portal.

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2614696 2-Dec-2020 12:51

aspired:

Theclaytons:

Got the sme problem now with a new domain: henterprises.co.nz - not propogating to Google DNS - most other servers are fine.

Hi,

There was an issue causing that not to propagate which I've just fixed.
Currently there's no resource records for that domain, you can add these via your Self Care Portal.

Nice to see you popping up here! now I know who's leg to yank on next time something looks broken :P

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.