Hi, I've had reports that users in TWC are getting incorrect IPs back from their local resolvers. Both of the IPs below are proxy servers and sometimes redirect the user to dnsrsearch.com instead of bing.com.
This might be a misconfig of a system that catches NXDOMAINs and provides "typo assistance". Another interesting this in the TTL on the responses is huge. Anyone seen something similar or have a contact in TWC that can help? Thanks! Ashley c:\src\ap>nslookup -debug -q=A www.bing.com<http://www.bing.com>. ------------ Got answer: HEADER: opcode = QUERY, id = 1, rcode = NOERROR header flags: response, auth. answer, want recursion, recursion avail. questions = 1, answers = 1, authority records = 0, additional = 0 QUESTIONS: 1.1.168.192.in-addr.arpa, type = PTR, class = IN ANSWERS: -> 1.1.168.192.in-addr.arpa name = router.asus.com ttl = 0 (0 secs) ------------ Server: router.asus.com Address: 192.168.1.1 ------------ Got answer: HEADER: opcode = QUERY, id = 2, rcode = NOERROR header flags: response, want recursion, recursion avail. questions = 1, answers = 2, authority records = 0, additional = 0 QUESTIONS: www.bing.com<http://www.bing.com>, type = A, class = IN ANSWERS: -> www.bing.com<http://www.bing.com> internet address = 76.79.152.20 ttl = 42126785 (487 days 13 hours 53 mins 5 secs) -> www.bing.com<http://www.bing.com> internet address = 198.105.241.134 ttl = 42126785 (487 days 13 hours 53 mins 5 secs) ------------ Non-authoritative answer: Name: www.bing.com<http://www.bing.com> Addresses: 76.79.152.20 198.105.241.134
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
