<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi all,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We have been having issues resolving DNS zones that are hosted by Telstra, which appears to be due to their authoritative name servers not responding to requests from multiple subnets we own. For example,
<a href="http://www.afl.com.au">www.afl.com.au</a> can not resolve unless we use a DNS server outside our network, such as 8.8.8.8. Our DNS servers use root hints. Using other service provider connections appears to work ok.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The two DNS servers that appear to be authoritative for the domain are:<o:p></o:p></p>
<p class="MsoNormal">lon-mdn-dns-0.ngcdn.telstra.com<o:p></o:p></p>
<p class="MsoNormal">chw-mdn-dns-0.ngcdn.telstra.com<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Attempting to perform a DNS lookup directly against either of them times out. Wireshark shows the request going out, but no response. We can ping both hosts, and in fact an nmap reveals that they are likely F5 load balancers.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is anyone else experiencing similar issues? Could someone from Telstra contact me off-list to help us identify the cause?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:JA">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="color:#1F497D;mso-fareast-language:JA">Philip Loenneker | Network Engineer</span></b><b><span lang="EN-US" style="color:#ED7D31;mso-fareast-language:JA"> | TasmaNet<o:p></o:p></span></b></p>
</div>
</body>
</html>