[AusNOG] Telstra authoritative DNS issue

[Michael J. Carmody]

I honestly think Russell’s extraordinary efforts on this list is my last vestige of good service credibility I have for the entire Telstra Enterprise….

From this keyhole perspective you seem to be able to solve any problem anywhere in the corporate infrastructure promptly, and lurk on AusNOG often enough to be nearly always timely.

You are either an actual legend, or an entire team of engineers doing a really good job presenting one personality.

-Michael

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Philip Loenneker
Sent: Monday, 27 February 2017 2:52 PM
To: Russell Langton <russell3901 at gmail.com>
Cc: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] Telstra authoritative DNS issue

Thanks Russell for your help with this – I believe it’s all sorted ☺

Regards,
Philip Loenneker | Network Engineer | TasmaNet

From: Russell Langton [mailto:russell3901 at gmail.com]
Sent: Friday, 24 February 2017 3:52 PM
To: Philip Loenneker <Philip.Loenneker at tasmanet.com.au<mailto:Philip.Loenneker at tasmanet.com.au>>
Cc: ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>
Subject: Re: [AusNOG] Telstra authoritative DNS issue

Hi Philip,
I've sent you an email so we can sort out this Friday special ;)

On Fri, Feb 24, 2017 at 3:11 PM, Philip Loenneker <Philip.Loenneker at tasmanet.com.au<mailto:Philip.Loenneker at tasmanet.com.au>> wrote:
Hi all,

We have been having issues resolving DNS zones that are hosted by Telstra, which appears to be due to their authoritative name servers not responding to requests from multiple subnets we own. For example, www.afl.com.au<http://www.afl.com.au> can not resolve unless we use a DNS server outside our network, such as 8.8.8.8. Our DNS servers use root hints. Using other service provider connections appears to work ok.

The two DNS servers that appear to be authoritative for the domain are:
lon-mdn-dns-0.ngcdn.telstra.com<http://lon-mdn-dns-0.ngcdn.telstra.com>
chw-mdn-dns-0.ngcdn.telstra.com<http://chw-mdn-dns-0.ngcdn.telstra.com>

Attempting to perform a DNS lookup directly against either of them times out. Wireshark shows the request going out, but no response. We can ping both hosts, and in fact an nmap reveals that they are likely F5 load balancers.

Is anyone else experiencing similar issues? Could someone from Telstra contact me off-list to help us identify the cause?

Regards,
Philip Loenneker | Network Engineer | TasmaNet

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20170227/5ab83a4f/attachment.html>