From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wg0-f47.google.com (mail-wg0-f47.google.com [74.125.82.47]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 4E34A201251 for ; Thu, 14 Jun 2012 11:42:10 -0700 (PDT) Received: by wgbfa7 with SMTP id fa7so1576047wgb.28 for ; Thu, 14 Jun 2012 11:42:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=YoY/Cy5tUHR/lXjxXj2bSJymiSElUC9PJZXdl3AwDVc=; b=T+zWmmaz1yuR+DF0ZxcXfFVKcEu1mXg04LVy4RkJg+RvGtlXfeQWoNQDdx8jo8N1Ol oaWgobeD4JL1g4MAlslO+qDgl6kgahOYOAiiF273bvhhAZi9fovqGGbTuW3VCuVp9CmS kYfOMTg17pjohaSZjdi1EV6pdsNa6zmmBlIZpLBhw2/D/tzjeBYn+aYbNlSs95DPmvhh DgViAjuDIxwmfJWPhaTnhMGe9Ctjm5FdFPquQxGKXbbbbzKE5ipvhhLUCtWMQMf56XP7 HmsR3XtAFdT6as7MpenEZzYo2o4NFWd7mOoq0mMBNiKy5rNsSOeWPO2Ja3STnyUaiWAO fC6w== MIME-Version: 1.0 Received: by 10.216.198.14 with SMTP id u14mr1611492wen.12.1339699322962; Thu, 14 Jun 2012 11:42:02 -0700 (PDT) Received: by 10.223.103.199 with HTTP; Thu, 14 Jun 2012 11:42:02 -0700 (PDT) In-Reply-To: References: Date: Thu, 14 Jun 2012 14:42:02 -0400 Message-ID: From: Dave Taht To: Maciej Soltysiak Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: cerowrt-devel@lists.bufferbloat.net Subject: Re: [Cerowrt-devel] =?utf-8?q?=5BOT=5D_DNS_redirected_to_third-part?= =?utf-8?b?4oCL4oCLeSBzZXJ2ZXJzOiB3d3cuZ29vZ2xl4oCL4oCLLmNvbSA/?= X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Jun 2012 18:42:11 -0000 On Thu, Jun 14, 2012 at 2:32 PM, Maciej Soltysiak wr= ote: > Hi, > > > A bit off topic, not sure if this is cerowrt related but I know you guys = use > netalyzr. > > My netalyzr on cerowrt-3.3.8-3=A0 started recently to show that my ISP > redirects www.google.com to 3rd party. cerowrt by default accesses the *ROOT* servers to get it's dns data. so if that is corrupt or wrong, there's a major issue. It is possible you are losing on a geo-location basis, however. If your ISP supports DNSSEC (and is not playing games with DNS) you can optimize your dns access by using your ISP's provided dns servers in the forwarders.conf file and uncommenting the relevant line in named.conf. What I get for a host www.google.com is: www.google.com is an alias for www.l.google.com. www.l.google.com has address 74.125.45.105 www.l.google.com has address 74.125.45.147 www.l.google.com has address 74.125.45.103 www.l.google.com has address 74.125.45.104 www.l.google.com has address 74.125.45.99 www.l.google.com has address 74.125.45.106 www.l.google.com has IPv6 address 2001:4860:800a::63 > My run is here: > http://n1.netalyzr.icsi.berkeley.edu/summary/id=3D43ca253f-21386-3947730d= -5148-4bce-9140#DNSLookup > The IPs that get resolved are e.g.: > 46.28.247.113 > 46.28.247.118 > > Can anyone please do a netalyzr scan and see if you report anything simil= ar? > Maybe it's google CDN, maybe it's something in bind build. > > Funny thing is that on a windows client when I do nslookup www.google.com > 172.30.42.97 (or .1) I get different results, but never this 46.28 nonsen= se. > I get same results when I query my ISP DNS or some other major ISP's DNS = in > my country. > > When I do diagnostics from cerowrt, it shows 46.28.x.y. > > Thanks in advance for having a go with the test! > > Best regards, > Maciej Soltysiak > > _______________________________________________ > Cerowrt-devel mailing list > Cerowrt-devel@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/cerowrt-devel > --=20 Dave T=E4ht SKYPE: davetaht http://ronsravings.blogspot.com/