Server not found

[Ramz]

So what changed between these two statements?

I meant i got this when I ran nslookup again sorry for that
I got this now
nslookup starmetrolandmedia.my.salesforce.com 9.9.9.9
Server: dns9.quad9.net
Address: 9.9.9.9

Non-authoritative answer:
Name: na110-ia2.ia2.r.my.salesforce.com
Addresses: 13.110.33.205
13.110.34.205
13.110.34.77
Aliases: starmetrolandmedia.my.salesforce.com
na110.my.salesforce.com
na110-ia2.my.salesforce.com

 

[john9527]

384.15....so not what I originally thought.

If you want to try and isolate further...you can try enabling/disabling DNSSEC. At least one of the alias domains is not configured correctly for dnssec and may be causing a problem.

 

[ColinTaylor]

I still don't understand why changing the router DNS settings are having an effect when your nslookup commands should be bypassing it.

Check the DNS Filtering page again and make absolutely sure it isn't enabled.

Found it. Thanks.

just rebooted router and same result.

You didn't explicitly answer my question. So for the avoidance of doubt: Is the DNSFilter disabled?

 

[Ramz]

384.15....so not what I originally thought.

If you want to try and isolate further...you can try enabling/disabling DNSSEC. At least one of the alias domains is not configured correctly for dnssec and may be causing a problem.

ok let me try that

 

[Ramz]

384.15....so not what I originally thought.

If you want to try and isolate further...you can try enabling/disabling DNSSEC. At least one of the alias domains is not configured correctly for dnssec and may be causing a problem.

Wow wow It work that did it its working thank you very very much.

 

[Ramz]

I still don't understand why changing the router DNS settings are having an effect when your nslookup commands should be bypassing it.



You didn't explicitly answer my question. So for the avoidance of doubt: Is the DNSFilter disabled?

I got it working thank you for your patience.

 

[ColinTaylor]

I got it working thank you for your patience.

So you still haven't answered the question.

 

[Ramz]

So you still haven't answered the question.

No it did not work DNS filter. I had to disable DNSSEC for it to work

 

[ColinTaylor]

No it did not work DNS filter.

I did not ask you whether "it worked". I asked you whether DNSFilter was "enabled". It's a simple question, the answer is either yes or no.

 

[joe scian]

maybe?

 

[Ramz]

I did not ask you whether "it worked". I asked you whether DNSFilter was "enabled". It's a simple question, the answer is either yes or no.

yes it was enabled I turned it off and still did not work. But once I turned off DNSSEC it worked.

 

[martinr]

I did not ask you whether "it worked". I asked you whether DNSFilter was "enabled". It's a simple question, the answer is either yes or no.

Colin, do you remember Tony Hancock’s episode of The Radio Ham (1961)? This exchange reminds me of it, a little.

 

[peepsnet]

I meant i got this when I ran nslookup again sorry for that
I got this now
nslookup starmetrolandmedia.my.salesforce.com 9.9.9.9
Server: dns9.quad9.net
Address: 9.9.9.9

Non-authoritative answer:
Name: na110-ia2.ia2.r.my.salesforce.com
Addresses: 13.110.33.205
13.110.34.205
13.110.34.77
Aliases: starmetrolandmedia.my.salesforce.com
na110.my.salesforce.com
na110-ia2.my.salesforce.com

Now run it without the 9.9.9.9
This will ask your PC to use whatever DNS server it is assigned!!

This was we can see if it is a DNS server issue or router config issue


I know this is beating a dead horse but... it might help future users. and I am curious!

Colin, do you remember Tony Hancock’s episode of The Radio Ham (1961)? This exchange reminds me of it, a little.

 

[Ramz]

Now run it without the 9.9.9.9
This will ask your PC to use whatever DNS server it is assigned!!

This was we can see if it is a DNS server issue or router config issue


I know this is beating a dead horse but... it might help future users. and I am curious!

[

Here you go without 9.9.9.9

C:\Users\Teen>nslookup starmetromedia.my.saleforce.com
Server: RT-AC86U-2868
Address: 192.168.50.1

Non-authoritative answer:
Name: starmetromedia.my.saleforce.com
Address: 72.52.10.14

 

[john9527]

Checking the site with the Verisign dnssec analysis tool, shows one of the site aliases to have a slight dnssec configuration problem. If dnssec won't verify the response will be SERVFAIL. There have been several sites identified in this forum with a similar problem. (I admit I don't know what specific dnssec config problems are maybe considered OK and which will cause a fail).

So, if you have a single site that you can't access, it's usually one of two things.....
(1) if you have dnssec enabled, the site isn't configured correctly for dnssec
(2) if you don't have a static address from your ISP, someone may previously have done bad things with the address handed out by your ISP and got the address blacklisted.

 

[cvx01]

Checking the site with the Verisign dnssec analysis tool, shows one of the site aliases to have a slight dnssec configuration problem. If dnssec won't verify the response will be SERVFAIL. There have been several sites identified in this forum with a similar problem. (I admit I don't know what specific dnssec config problems are maybe considered OK and which will cause a fail).

So, if you have a single site that you can't access, it's usually one of two things.....
(1) if you have dnssec enabled, the site isn't configured correctly for dnssec
(2) if you don't have a static address from your ISP, someone may previously have done bad things with the address handed out by your ISP and got the address blacklisted.

Welcome back John! Glad to have you back! Still on your fork (3.0.0.4.374.43_41E9j9527) and it's working great.

This SERVFAIL issue has come and gone for me across all builds for meand it's not site specific. Some previous threads had pointed toward DoT timing out and and similar. Adjusting the stubby file seemed to fix it for a while, and now it's back. FWIW, I'm NOT using DNSSEC, only DoT on CloudFlare ordered.

All instances of SERVFAIL (Over 1200 since this morning) basically look like this in dnsmasaq log.

Mar 30 19:23:40 dnsmasq[2932]: 233239 192.168.1.27/39614 query[A] www.youtube.com from 192.168.1.27
Mar 30 19:23:40 dnsmasq[2932]: 233239 192.168.1.27/39614 cached www.youtube.com is <CNAME>
Mar 30 19:23:40 dnsmasq[2932]: 233239 192.168.1.27/39614 forwarded www.youtube.com to 127.0.0.1
Mar 30 19:23:40 dnsmasq[2932]: 233230 192.168.1.120/28480 reply error is SERVFAIL
Mar 30 19:23:40 dnsmasq[2932]: 233232 192.168.1.27/53106 reply error is SERVFAIL
Mar 30 19:23:40 dnsmasq[2932]: 233231 192.168.1.160/2434 reply error is SERVFAIL
Mar 30 19:23:40 dnsmasq[2932]: 233233 192.168.1.125/32430 reply error is SERVFAIL

 

[L&LD]

@cvx01 time to update to 42E7, I think.