Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


OmniouS

423 posts

Ultimate Geek

Trusted
Lifetime subscriber

#280477 16-Dec-2020 18:01
Send private message

We recently had 2degrees fibre set up in a small remote office down south.

 

 

 

We planned to run the connection for at least 2 weeks via the ISP supplied FRITZ!Box to ensure there were no issues before swapping it out for managed equipment & split tunnel VPN etc.

 

The connection is performing well but we have encountered a strange issue - DNS queries for youtube.com result in 'server error' or timeouts.

 

This behaviour is observed on multiple devices, including Windows laptops, Android phones, tablets and TVs. It's also interesting that changing DNS servers on devices to 8.8.8.8/1.1.1.1/9.9.9.9 makes no difference.

 

If we connect those same devices to Voda/Spark 4G, everything is fine. If we connect the laptops to our split tunnel corporate VPN on Fritzbox wifi, there are no issues with that either as queries for youtube.com are returned via our corporate VPN DNS servers.

 

Youtube works on the one Apple device that we have tested but I believe that's due to iOS14 using DNS over TLS by default.

 

 

 

During the course of troubleshooting with the support team, the public IP was changed, IPv6 was disabled temporarily, and the router was factory reset among other things.

 

nslookup/dig and equivalents were used to test. Does anyone know if it's possible to run a DNS host record query directly on the Fritzbox?

 

 

 

At this point, it seems like it could be an issue with the router, or something further upstream. We have arranged to supply our replacement equipment ahead of schedule to see if that will make a difference.

 

There is also an ISP web filter set on the connection. I asked about this and the support guys didn't think it could be the cause - is this correct? I might see if they will temporarily disable it to test as well.

 

 

 

 

 

 


Filter this topic showing only the reply marked as answer Create new topic
RunningMan
8963 posts

Uber Geek


  #2622980 16-Dec-2020 18:24
Send private message

The web filter intercepting DNS queries would be high on the list of things to rule in or out.




OmniouS

423 posts

Ultimate Geek

Trusted
Lifetime subscriber

  #2622999 16-Dec-2020 19:21
Send private message

I just got off the phone with support - good quick call. They are going to remove the web filter tomorrow morning.

 

 

 

I did some more testing, and DNS responses for dodgy domains are changed to '123.255.8.146' which redirects to the following publicly accessible page: https://secure.2degreesbroadband.co.nz/public/c/blocked

 

DNS responses are modified regardless of the external DNS server used. This leads me to believe that the filter is a likely culprit

 

 

 

 


OmniouS

423 posts

Ultimate Geek

Trusted
Lifetime subscriber

  #2623243 17-Dec-2020 12:36
Send private message

It was confirmed that the content filter was unintentionally blocking YouTube. Strange that DNS queries were blocked outright, instead of returning the IP address of the block page like we see with dodgy domains.

 

We'll keep the filter off and will use our gear to block dodgy sites instead for now.

 


What would be nice to have is the ability to turn it on and off from the web portal, and/or the ability to add custom exceptions as well.


Filter this topic showing only the reply marked as answer Create new topic





News and reviews »

Gen Threat Report Reveals Rise in Crypto, Sextortion and Tech Support Scams
Posted 7-Aug-2025 13:09


Logitech G and McLaren Racing Sign New, Expanded Multi-Year Partnership
Posted 7-Aug-2025 13:00


A Third of New Zealanders Fall for Online Scams Says Trend Micro
Posted 7-Aug-2025 12:43


OPPO Releases Its Most Stylish and Compact Smartwatch Yet, the Watch X2 Mini.
Posted 7-Aug-2025 12:37


Epson Launches New High-End EH-LS9000B Home Theatre Laser Projector
Posted 7-Aug-2025 12:34


Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.