<div dir="ltr"><div dir="ltr">Hi,<div><br></div><div>In summary ... the problem was with a lowercase domain name rewrite rule</div><div>and F5 CGNAT boxes doing case-randomised DNS queries.</div><div><br></div><div>Fixed with help from John Alexander, Russell Langton, Jahanzeb and team at Belong.</div><div><br></div><div>Thanks,</div><div> John</div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, 28 Nov 2018 at 15:59, John Mann <<a href="mailto:john@mannfamily.org">john@mannfamily.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr">Joseph,<div><br></div><div>If it was DNS propagation, then wouldn't the users be getting the old addresses, rather than NXDOMAIN.</div><div><br></div><div>There is a chain of CNAMES ...</div><div>---</div><div><div>$ host <a href="http://sync.deakin.edu.au" target="_blank">sync.deakin.edu.au</a></div><div><a href="http://sync.deakin.edu.au" target="_blank">sync.deakin.edu.au</a> is an alias for <a href="http://sync.global.deakin.edu.au" target="_blank">sync.global.deakin.edu.au</a>.</div><div><a href="http://sync.global.deakin.edu.au" target="_blank">sync.global.deakin.edu.au</a> is an alias for <a href="http://sync.deakin.edu.au.edgekey.net" target="_blank">sync.deakin.edu.au.edgekey.net</a>.</div><div><a href="http://sync.deakin.edu.au.edgekey.net" target="_blank">sync.deakin.edu.au.edgekey.net</a> is an alias for <a href="http://e7158.dsca.akamaiedge.net" target="_blank">e7158.dsca.akamaiedge.net</a>.</div><div><a href="http://e7158.dsca.akamaiedge.net" target="_blank">e7158.dsca.akamaiedge.net</a> has address 23.53.136.100</div><div><a href="http://e7158.dsca.akamaiedge.net" target="_blank">e7158.dsca.akamaiedge.net</a> has IPv6 address 2001:8006:3510:1297::1bf6</div><div><a href="http://e7158.dsca.akamaiedge.net" target="_blank">e7158.dsca.akamaiedge.net</a> has IPv6 address 2001:8006:3510:12a9::1bf6</div></div><div>---</div><div>but it's not longer than </div><div>---</div><div><div>$ host <a href="http://www.deakin.edu.au" target="_blank">www.deakin.edu.au</a></div><div><a href="http://www.deakin.edu.au" target="_blank">www.deakin.edu.au</a> is an alias for <a href="http://www.global.deakin.edu.au" target="_blank">www.global.deakin.edu.au</a>.</div><div><a href="http://www.global.deakin.edu.au" target="_blank">www.global.deakin.edu.au</a> is an alias for <a href="http://deakin.edu.au.edgekey.net" target="_blank">deakin.edu.au.edgekey.net</a>.</div><div><a href="http://deakin.edu.au.edgekey.net" target="_blank">deakin.edu.au.edgekey.net</a> is an alias for <a href="http://e7158.a.akamaiedge.net" target="_blank">e7158.a.akamaiedge.net</a>.</div><div><a href="http://e7158.a.akamaiedge.net" target="_blank">e7158.a.akamaiedge.net</a> has address 23.53.136.100</div></div><div>---</div><div><br></div><div>One Aussie Broadband user reported that when they were opted out from CGNAT, things started working for them.</div><div><br></div><div>Thanks,</div><div> John</div></div></div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, 28 Nov 2018 at 15:52, Saxton, Joseph (SYD-FED) <<a href="mailto:Joseph.Saxton@interpublic.com" target="_blank">Joseph.Saxton@interpublic.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-AU" link="blue" vlink="purple">
<div class="m_1045551530920263156m_4980381247462991286WordSection1">
<p class="MsoNormal">If it’s only changed recently then I’d say DNS propagation<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">AusNOG <<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>> on behalf of John Mann <<a href="mailto:john@mannfamily.org" target="_blank">john@mannfamily.org</a>><br>
<b>Date: </b>Wednesday, 28 November 2018 at 3:44 pm<br>
<b>To: </b>"<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a>" <<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a>><br>
<b>Subject: </b>[EXTERNAL] [AusNOG] DNS problems resolving <a href="http://sync.deakin.edu.au" target="_blank">sync.deakin.edu.au</a><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Hi, <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Deakin University recently dual-stacked their Akamai cache for
<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__sync.deakin.edu.au&d=DwMFaQ&c=Ftw_YSVcGmqQBvrGwAZugGylNRkk-uER0-5bY94tjsc&r=srheiojgNn4Jg0keeQ9hj6cyp8zgHx0m-eTRLdD3nnw&m=aVUTlDm-TpQmLPh8GYduaIdrwFkUij4wtBrv-X9yJz4&s=oyHoAo4mklGmb_jm-rzKYPvvofKEu68LWO4doCFkURg&e=" target="_blank">
sync.deakin.edu.au</a> .<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Since them, some students using a couple of ISPs can't resolve the DNS name.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">For example:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">---<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">> nslookup <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__sync.deakin.edu.au&d=DwMFaQ&c=Ftw_YSVcGmqQBvrGwAZugGylNRkk-uER0-5bY94tjsc&r=srheiojgNn4Jg0keeQ9hj6cyp8zgHx0m-eTRLdD3nnw&m=aVUTlDm-TpQmLPh8GYduaIdrwFkUij4wtBrv-X9yJz4&s=oyHoAo4mklGmb_jm-rzKYPvvofKEu68LWO4doCFkURg&e=" target="_blank">
sync.deakin.edu.au</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Server: belong.gateway<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Address: 10.0.0.138<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">*** belong.gateway can't find <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__sync.deakin.edu.au&d=DwMFaQ&c=Ftw_YSVcGmqQBvrGwAZugGylNRkk-uER0-5bY94tjsc&r=srheiojgNn4Jg0keeQ9hj6cyp8zgHx0m-eTRLdD3nnw&m=aVUTlDm-TpQmLPh8GYduaIdrwFkUij4wtBrv-X9yJz4&s=oyHoAo4mklGmb_jm-rzKYPvvofKEu68LWO4doCFkURg&e=" target="_blank">
sync.deakin.edu.au</a>: Non-existent domain<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">---<u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal">"<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__blogs.deakin.edu.au&d=DwMFaQ&c=Ftw_YSVcGmqQBvrGwAZugGylNRkk-uER0-5bY94tjsc&r=srheiojgNn4Jg0keeQ9hj6cyp8zgHx0m-eTRLdD3nnw&m=aVUTlDm-TpQmLPh8GYduaIdrwFkUij4wtBrv-X9yJz4&s=yFkD80CkEe2Z-d4Pp3L8fWNbGaFEpnm7FGr0j6Jy6bc&e=" target="_blank">blogs.deakin.edu.au</a>"
is setup similarly to "<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__sync.deakin.edu.au&d=DwMFaQ&c=Ftw_YSVcGmqQBvrGwAZugGylNRkk-uER0-5bY94tjsc&r=srheiojgNn4Jg0keeQ9hj6cyp8zgHx0m-eTRLdD3nnw&m=aVUTlDm-TpQmLPh8GYduaIdrwFkUij4wtBrv-X9yJz4&s=oyHoAo4mklGmb_jm-rzKYPvvofKEu68LWO4doCFkURg&e=" target="_blank">sync.deakin.edu.au</a>"
but that does work.<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">If the user changes their DNS server to 8.8.8.8 or 1.1.1.1 then they do get through.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Problematic ISPs include:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> Belong<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> Aussie Broadband<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> ...<u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal">I've tried the frontline technical support numbers, but didn't make much headway.<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Does anyone know how/why this DNS problems would be happening?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Can some technical support people from ABB and Belong please contact me?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> John Mann<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> 0419 568 470<u></u><u></u></p>
</div>
</div>
</div>
<div>
This message contains information which may be confidential and privileged. Unless you are the intended recipient (or authorized to receive this message for the intended recipient), you may not use, copy, disseminate or disclose to anyone the message or any information contained in the message. If you have received the message in error, please advise the sender by reply e-mail, and delete the message. Thank you very much.<br>
</div></div>
</blockquote></div>
</blockquote></div></div>