[AusNOG] Telstra authoritative DNS issue

[Philip Loenneker]

Thanks Russell for your help with this – I believe it’s all sorted ☺

Regards,
Philip Loenneker | Network Engineer | TasmaNet

From: Russell Langton [mailto:russell3901 at gmail.com]
Sent: Friday, 24 February 2017 3:52 PM
To: Philip Loenneker <Philip.Loenneker at tasmanet.com.au>
Cc: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] Telstra authoritative DNS issue

Hi Philip,
I've sent you an email so we can sort out this Friday special ;)

On Fri, Feb 24, 2017 at 3:11 PM, Philip Loenneker <Philip.Loenneker at tasmanet.com.au<mailto:Philip.Loenneker at tasmanet.com.au>> wrote:
Hi all,

We have been having issues resolving DNS zones that are hosted by Telstra, which appears to be due to their authoritative name servers not responding to requests from multiple subnets we own. For example, www.afl.com.au<http://www.afl.com.au> can not resolve unless we use a DNS server outside our network, such as 8.8.8.8. Our DNS servers use root hints. Using other service provider connections appears to work ok.

The two DNS servers that appear to be authoritative for the domain are:
lon-mdn-dns-0.ngcdn.telstra.com<http://lon-mdn-dns-0.ngcdn.telstra.com>
chw-mdn-dns-0.ngcdn.telstra.com<http://chw-mdn-dns-0.ngcdn.telstra.com>

Attempting to perform a DNS lookup directly against either of them times out. Wireshark shows the request going out, but no response. We can ping both hosts, and in fact an nmap reveals that they are likely F5 load balancers.

Is anyone else experiencing similar issues? Could someone from Telstra contact me off-list to help us identify the cause?

Regards,
Philip Loenneker | Network Engineer | TasmaNet

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20170227/43b1318e/attachment.html>