Can't resolve some domains

Same here haaretz.co.il won’t resolve with 1.1.1.1 but will resolve with 8.8.8.8

Same here, can’t resolve any of the domains listed by @MohammadAG.

Weird, I can resolve all of them, so maybe it only happen from some POPs (due to rate limiting?).

For people who can’t resolve this, can you resolve resolver.dnscrypt.info to check what Cloudflare servers are used?

Accoording to the list, it looks like we have issue to reach those ns servers in our Tel Aviv PoP
We are looking into this.

5 Likes

www.themarker.com and https://imncdn.pas-rahav.com/ as well won’t resolve on 1.1.1.1

Additionally, it seems like WiFi calling for Partner does not work, I’m not sure how to get the domain name that doesn’t resolve for that though.

This shows up in the iPhone’s logs, which confirms the issue is related to DNS at least:
CommCenter: #N DATA.dns: operator(): Failed to resolve name with error (12:8).

Edit: Actually seems like partner.co.il does not resolve at all, adding to the list.

Edit 2: Found the domain, epdg.epc.mnc001.mcc425.pub.3gppnetwork.org

Our local provider applied some changes. Please kindly retry.

3 Likes

I think it looks good now, thanks!

2 Likes

Everything seems to be fine now, thanks!

1 Like

I see its working now… still need to be tasted with IL domains :slight_smile:
Thanks!

1 Like

Update: Still not resolving sxhssatyanagar.in !

Hi there!
According to the post, I’d like to add to the test some more Israeli websites which found as not working with 1.1.1.1, but with Google DNS (8.8.8.8) it works flawless.

http://www.idf.il/- And every sub-domain of idf.il
https://www.bezeq.co.il/

Thanks

1 Like

Hi @dahan.amit1, we are checking regarding those two domains

Thank you!
Would appreciate if you can keep us posted for these 2 domains.

This is a problem with the DNS settings for the zone. The zone owner has specified DNSSEC but the the DNSSEC settings for the zone are invalid. The 1.1.1.1 servers check to verify this is valid and it is failing so we aren’t returning results.

If you happen to know the zone owner, you might let them know they have a problem with their zone settings.

http://dnsviz.net/d/sxhssatyanagar.in/dnssec/

segment.com not resolving:

[email protected]:/home/mshallop/code/python/djBlog# dig segment.com @8.8.8.8

; <<>> DiG 9.10.3-P4-Ubuntu <<>> segment.com @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53043
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;segment.com. IN A

;; ANSWER SECTION:
segment.com. 7 IN A 52.41.124.76
segment.com. 7 IN A 54.148.60.118
segment.com. 7 IN A 54.191.143.77

;; Query time: 148 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Fri Apr 06 15:32:04 PDT 2018
;; MSG SIZE rcvd: 88

[email protected]:/home/mshallop/code/python/djBlog# ping segment.com
ping: unknown host segment.com

$ dig segment.com @1.1.1.1 +short
52.41.124.76
54.148.60.118
54.191.143.77

Using the Google DNS Settings no issues.
Only with CludFlare DNS it happens that way
Talked to the ISP and no issues with them, so it seems only something from your direction.

Thanks!

Derp! I should have tried the dig with the 1.1.1.1 NS… you’re absolutely correct!

Turns out, I was being blocked by my pi-hole service…

Thank you!

2 Likes

http://mitgaisim.idf.il/

https://www.aman.idf.il/Modiin/default.aspx

Could this be checked out?
They are reachable on Google DNS and on the public one