Unable to resolve host behind cloudflare using 1.1.1.1

Hello Everyone,

I have a host running behind Cloudflare, and do not resolve when using the Cloudflare DNS resolver. It works very well with any other DNS resolver apart from 1.1.1.1

dig with @1.1.1.1

$ dig api.nuclei.sh @1.1.1.1

; <<>> DiG 9.10.6 <<>> api.nuclei.sh @1.1.1.1

;; global options: +cmd

;; connection timed out; no servers could be reached

dig with @8.8.8.8

$ dig api.nuclei.sh @8.8.8.8

; <<>> DiG 9.10.6 <<>> api.nuclei.sh @8.8.8.8

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33989

;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 512

;; QUESTION SECTION:

;api.nuclei.sh. IN A

;; ANSWER SECTION:

api.nuclei.sh. 300 IN A 172.66.43.44

api.nuclei.sh. 300 IN A 172.66.40.212

;; Query time: 304 msec

;; SERVER: 8.8.8.8#53(8.8.8.8)

;; WHEN: Sun May 08 12:31:40 IST 2022

;; MSG SIZE rcvd: 74

It seems you are unable to reach 1.1.1.1 yourself. The domain resolves fine on Cloudflare for me. Perhaps you’re using Jio as network provider, they are blackholing 1.1.1.1.

Could you try the query with 1.0.0.1? And also post your output of https://one.one.one.one/help

1 Like
https://one.one.one.one/help?_gl=1*2d1chf*_ga*Mjk2NDE5Mjc2LjE2MTI3MjA5OTc.*_gid*MTUwMjczNzEyNy4xNjUyMDkzMTMy#eyJpc0NmIjoiTm8iLCJpc0RvdCI6Ik5vIiwiaXNEb2giOiJObyIsInJlc29sdmVySXAtMS4xLjEuMSI6Ik5vIiwicmVzb2x2ZXJJcC0xLjAuMC4xIjoiWWVzIiwicmVzb2x2ZXJJcC0yNjA2OjQ3MDA6NDcwMDo6MTExMSI6Ik5vIiwicmVzb2x2ZXJJcC0yNjA2OjQ3MDA6NDcwMDo6MTAwMSI6Ik5vIiwiZGF0YWNlbnRlckxvY2F0aW9uIjoiREVMIiwiaXNXYXJwIjoiTm8iLCJpc3BOYW1lIjoiR29vZ2xlIiwiaXNwQXNuIjoiMTUxNjkifQ==

@milk thanks for the info, this is not just me, I got users sharing the same issue for connecting to this host using CF resolver.

As you can see from that result your internet provider is blocking 1.1.1,1. However, 1.0.0.1 works fine. Try performing the query using 1.0.0.1 instead and possibly contact your internet service provider about unblocking 1.1.1.1.

See also this: https://blog.cloudflare.com/fixing-reachability-to-1-1-1-1-globally/

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.