From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wi0-f181.google.com (mail-wi0-f181.google.com [209.85.212.181]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 02D3F200994 for ; Thu, 14 Jun 2012 11:45:50 -0700 (PDT) Received: by wibhn14 with SMTP id hn14so1786849wib.10 for ; Thu, 14 Jun 2012 11:45:49 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-originating-ip:in-reply-to:references:date :message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=ruLRxDpIg212Gs/ZE5VfNqxs27n2dT0pw1n4TnNVrEg=; b=hX5iTlevehl2QN6DuCf/0P5WQa42FGWFJhN4fjpE1uNjL/8ac+yw2h4ryIwiSIMT5H xHXD2MKq+cdw9QJK0DipLak/kffj5Oa8vXK8LpWxyfxpPPZcyCiQiJzbn2Kr9Sx7ZlUz vQEBYcg0XlzrPvMLhvhi76qRd1bKwoKumvvddwDgGpgymEOP2pQYJbm5OQvAZ8ZP/42n BX/SuMv6QcNx6Fb8ec7JBe8DzuScw68R7IloV3sWmlkHxtIPgEt0bnSwy2mFKBbeBter mWvSTGZoZT2PsHvjjgsdt7nQK+u3S8O8QweTgBsXu4TPDKPQC1sFH2+UJBLuL+sY6eGE OQFQ== MIME-Version: 1.0 Received: by 10.180.7.133 with SMTP id j5mr6512476wia.14.1339699548857; Thu, 14 Jun 2012 11:45:48 -0700 (PDT) Received: by 10.223.76.24 with HTTP; Thu, 14 Jun 2012 11:45:48 -0700 (PDT) X-Originating-IP: [77.65.42.82] In-Reply-To: References: Date: Thu, 14 Jun 2012 20:45:48 +0200 Message-ID: From: Maciej Soltysiak To: Dave Taht Content-Type: multipart/alternative; boundary=f46d0442822cb7247c04c2731bf3 X-Gm-Message-State: ALoCoQnKnOGWpAQK3JG2WuVQuuLm/Nfq1TYbKqZqstyg1xvbl+CXGMoYAAwjSz9Fi0iRkDeVwRnm Cc: cerowrt-devel@lists.bufferbloat.net Subject: Re: [Cerowrt-devel] =?utf-8?q?=5BOT=5D_DNS_redirected_to_third-part?= =?utf-8?b?4oCL4oCLeSBzZXJ2ZXJzOiB3d3cuZ29vZ2xl4oCL4oCLLmNvbSA/?= X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Jun 2012 18:45:51 -0000 --f46d0442822cb7247c04c2731bf3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Dave, Thanks for having a go and confirming bind setup. I hear from netalyzr folks it might be a new CDN setup for Poland by Google and the reverse dns is not yet renamed. Other than that, the response seems legit, will wait for update on google front as somebody on netalyzr list said he can ask. Regards, Maciej On Thu, Jun 14, 2012 at 8:42 PM, Dave Taht wrote: > On Thu, Jun 14, 2012 at 2:32 PM, Maciej Soltysiak > wrote: > > Hi, > > > > > > A bit off topic, not sure if this is cerowrt related but I know you guy= s > use > > netalyzr. > > > > My netalyzr on cerowrt-3.3.8-3 started recently to show that my ISP > > redirects www.google.com to 3rd party. > > cerowrt by default accesses the *ROOT* servers to get it's dns data. > so if that is corrupt or wrong, there's a major issue. It is possible > you are losing on a geo-location basis, however. > > If your ISP supports DNSSEC (and is not playing games with DNS) you > can optimize your dns access by using your ISP's provided dns servers > in the forwarders.conf file and uncommenting the relevant line in > named.conf. > > What I get for a host www.google.com is: > > www.google.com is an alias for www.l.google.com. > www.l.google.com has address 74.125.45.105 > www.l.google.com has address 74.125.45.147 > www.l.google.com has address 74.125.45.103 > www.l.google.com has address 74.125.45.104 > www.l.google.com has address 74.125.45.99 > www.l.google.com has address 74.125.45.106 > www.l.google.com has IPv6 address 2001:4860:800a::63 > > > > My run is here: > > > http://n1.netalyzr.icsi.berkeley.edu/summary/id=3D43ca253f-21386-3947730d= -5148-4bce-9140#DNSLookup > > The IPs that get resolved are e.g.: > > 46.28.247.113 > > 46.28.247.118 > > > > Can anyone please do a netalyzr scan and see if you report anything > similar? > > Maybe it's google CDN, maybe it's something in bind build. > > > > Funny thing is that on a windows client when I do nslookup > www.google.com > > 172.30.42.97 (or .1) I get different results, but never this 46.28 > nonsense. > > I get same results when I query my ISP DNS or some other major ISP's DN= S > in > > my country. > > > > When I do diagnostics from cerowrt, it shows 46.28.x.y. > > > > Thanks in advance for having a go with the test! > > > > Best regards, > > Maciej Soltysiak > > > > _______________________________________________ > > Cerowrt-devel mailing list > > Cerowrt-devel@lists.bufferbloat.net > > https://lists.bufferbloat.net/listinfo/cerowrt-devel > > > > > > -- > Dave T=C3=A4ht > SKYPE: davetaht > http://ronsravings.blogspot.com/ > --f46d0442822cb7247c04c2731bf3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Dave,
=C2=A0
Thanks for having a go and=C2=A0co= nfirming bind setup.
=C2=A0
I hear from netalyzr folks = it might be a new CDN setup for Poland by Google and the reverse dns is not= yet renamed.
Other than that, the response seems legit, will wait for update on goo= gle front as somebody on netalyzr list said he can ask.
=C2=A0
Regards,
Maciej

O= n Thu, Jun 14, 2012 at 8:42 PM, Dave Taht <dave.taht@gmail.com> wrote:
On Thu, Jun 14, 2012 at 2:32 PM, Maciej = Soltysiak <maciej@soltysiak.com<= /a>> wrote:
> Hi,
>
>
> A bit off topic, not sure if this is cerowrt related but I know you gu= ys use
> netalyzr.
>
> My netalyzr on cerowrt-3.3.8-3=C2=A0 started recently to show that my = ISP
> redirects www.goog= le.com to 3rd party.

cerowrt by default accesses the *ROOT* servers to get it's dns da= ta.
so if that is corrupt or wrong, there's a major issue. It is possible you are losing on a geo-location basis, however.

If your ISP supports DNSSEC (and is not playing games with DNS) you
can optimize your dns access by using your ISP's provided dns servers in the forwarders.conf file and uncommenting the relevant line in
named.conf.

What I get for a host w= ww.google.com is:

www.google.com is a= n alias for www.l.goo= gle.com.
www.l.google.com = has address 74.125.45.105
www.l.google.com = has address 74.125.45.147
www.l.google.com = has address 74.125.45.103
www.l.google.com = has address 74.125.45.104
www.l.google.com = has address 74.125.45.99
www.l.google.com = has address 74.125.45.106
www.l.google.com = has IPv6 address 2001:4860:800a::63


> My run is here:
> http://n1.netaly= zr.icsi.berkeley.edu/summary/id=3D43ca253f-21386-3947730d-5148-4bce-9140#DN= SLookup
> The IPs that get resolved are e.g.:
> 46.28.247.113
> 46.28.247.118
>
> Can anyone please do a netalyzr scan and see if you report anything si= milar?
> Maybe it's google CDN, maybe it's something in bind build.
>
> Funny thing is that on a windows client when I do nslookup www.google.com
> 172.30.42.97 (or .1) I get different results, but never this 46.28 non= sense.
> I get same results when I query my ISP DNS or some other major ISP'= ;s DNS in
> my country.
>
> When I do diagnostics from cerowrt, it shows 46.28.x.y.
>
> Thanks in advance for having a go with the test!
>
> Best regards,
> Maciej Soltysiak
>
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@l= ists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
>



--
Dave T=C3=A4ht
SKYPE: davetaht
http://ronsr= avings.blogspot.com/

--f46d0442822cb7247c04c2731bf3--