DNS Lookups

Follow

luigi esposito

• May 18, 2021 13:54
• Edited

DNS queries are failing for some domains through firewalla for domains that exist.  I have rebooted my firewalla, and also I have clicked "Clear Box Cache" for DNS booster.  It still doesn't work. 

For instance on my computer:

C:\Users\test>nslookup travel.state.gov
Server: firewalla.inc.lan
Address: 192.168.139.1

*** firewalla.inc.lan can't find travel.state.gov: Non-existent domain

When I go to mxtoolbox:

Type Domain Name Canonical Name TTL
CNAME travel.state.gov travel.his.com 180 min

Type: CNAME
Domain Name: travel.state.gov
Canonical Name: travel.his.com
TTL: 80 min

a:travel.his.com
IP Address TTL
18.217.66.14 60 sec
18.219.92.14 60 sec
13.58.116.30 60 sec
Etc.

On a computer vpn'd into my work on my same home network:

Non-authoritative answer:

Name:  travel.his.com

Addresses: 216.194.196.161

  216.194.196.162

Etc.

So the domain exists but my firewalla can't find it. What's going on?

 

0

• 

  Firewalla

  • May 18, 2021 16:58

  If you have DoH (DNS over HTTPS) enabled, then try to switch providers.  We have seen this exact domain "travel.state.gov" got filtered by one of the DoH providers.  (we have no idea why ...) 

   

  1

  Comment actions Permalink
• 

  luigi esposito

  • May 18, 2021 18:00

  Yes, apparently Quad9 was filtering that ip address.  Thanks for the help!

  0

  Comment actions Permalink
• 

  Firewalla

  • May 18, 2021 18:28

  This is just one of the strangest things in the DNS world. 

  0

  Comment actions Permalink

Please sign in to leave a comment.