抱歉,久等了。

据前所述,www.taptap.com <http://www.taptap.com/> 有一条CNAME记录,值为 
04kuymntnujtuaz35le0osayeah81vxi.aliyunwaf.com.

而然 04kuymntnujtuaz35le0osayeah81vxi.aliyunwaf.com. 接收到带有 CSUBNET 扩展的DNS查询时,如果 
Source Netmask 小于等于24,则不会返回任何数据。 如果不发送EDNS扩展请求,或 Source Netmask 大于 
24,则aliyunwaf.com. <http://aliyunwaf.com.de/>的NS服务器能够正常返回。

另外,如果查询请求带了 Cookie 扩展,aliyunwaf.com. <http://aliyunwaf.com.de/> 的NS服务器也不返回任何数据。 
测试命令:`dig +cookie @ns1.yundunddos.com. 
04kuymntnujtuaz35le0osayeah81vxi.aliyunwaf.com.`
注:在最新版的dig中,+cookie是默认选项

目前已将 ecs-ipv4-bits 覆盖为25,www.taptap.com <http://www.taptap.com/> 已经可以正常解析。


> On 16 Dec 2017, at 22:25, Tong Hui <[email protected]> wrote:
> 
> 同时 CC 给 TUNA。
> 
> 刚刚测试了一下 TUNA 的 DNS,解析 wx.qq.com 时出现问题,其他域名不能重现这个错误。
> 
> 2017-12-16 21:19 GMT+08:00 CHEN Ci <[email protected]>:
>> 还有 dx.doi.org 从周中开始无法解析(科技网)
>> 
>> 
>> On Friday, 15 December 2017 17:36:17 UTC+8, 邓俊晖 wrote:
>>> 
>>> 前天www.taptap.com无法解析,昨天开始是QQ/微信等服务开始出现异常。
>> 
>> --
>> 您收到此邮件是因为您订阅了Google网上论坛上的“USTC_LUG”群组。
>> 要退订此群组并停止接收此群组的电子邮件,请发送电子邮件到[email protected]。
>> 访问此群组:https://groups.google.com/group/ustc_lug。
>> 要查看更多选项,请访问https://groups.google.com/d/optout。
> 
> 
> 
> -- 
> /***
> * @ 启智开源 编码自由
> * @ Open Mind, Open Source, Coding for Freedom!
> * @ 佟辉 Tong Hui (Tony)
> * @ Email tonghuix AT member DOT fsf DOT org
> * @ Web https://tonghuix.io
> * @ XMPP/Jabber tonghuix AT member DOT fsf DOT org
> */
> 
> -- 
> 
> --- 
> You received this message because you are subscribed to the Google Groups 
> "TUNA 主邮件列表" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected].
> To post to this group, send email to [email protected].
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups "TUNA 
主邮件列表" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
For more options, visit https://groups.google.com/d/optout.

回复