search

TechnitiumSoftware / DnsServer

Technitium DNS Server
https://technitium.com/dns/
GNU General Public License v3.0
4.08k stars 408 forks source link

Not resolved some websites #967

Open Alex-cmd1 opened 1 month ago

Alex-cmd1 commented 1 month ago

First I want to thank you for your wonderful product, I love it so much

I have a problem that I can't solve. I installed Technitium DNS and all my settings are default as they were right after installation, I didn't change anything. Everything is working fine, but there is a problem that two sites https://www.dns-shop.ru/ and https://www.citilink.ru/ are not opening. When I check these sites through DNS Client they are resolved normally and there are no errors in the logs, but in fact they do not open in any browser and the browser gives errors NS_BINDING_ABORTED or NS_ERROR_NET_INTERRUPT, screenshots are attached

It is quite possible that there are many more such sites, but so far I've only come across two

I'm using Technitium DNS for Linux

https://www.dns-shop.ru/ T001

https://www.citilink.ru/ T002

ShreyasZare commented 1 month ago

Thanks for the post. If you can see that these domain names are resolving using the DNS Client tool in the admin panel then DNS is working well. These issues seem to be something else and not related to DNS.

Try changing your web browser and see if that works since a few references on the Internet claim that there is bug in Firefox that can cause this errors if the website has HTTP/3 enabled.

Alex-cmd1 commented 1 month ago

Thanks for the post. If you can see that these domain names are resolving using the DNS Client tool in the admin panel then DNS is working well. These issues seem to be something else and not related to DNS.

Try changing your web browser and see if that works since a few references on the Internet claim that there is bug in Firefox that can cause this errors if the website has HTTP/3 enabled.

Unfortunately it is not browser dependent, the same thing happens in Chrome but with a different ERR_CONNECTION_CLOSED error, moreover, the mobile app that https://www.dns-shop.ru/ and https://www.citilink.ru/ have is also partially loaded. The problem is solved when I enable Forwarders on Cloudflare's DoH

Chrome T003

ShreyasZare commented 1 month ago

Unfortunately it is not browser dependent, the same thing happens in Chrome but with a different ERR_CONNECTION_CLOSED error, moreover, the mobile app that https://www.dns-shop.ru/ and https://www.citilink.ru/ have is also partially loaded. The problem is solved when I enable Forwarders on Cloudflare's DoH

Thanks for the details. It looks like some kind of transient network issue. Probably Cloudflare is returning out different IP address which may be why its working.

Alex-cmd1 commented 1 month ago

Unfortunately it is not browser dependent, the same thing happens in Chrome but with a different ERR_CONNECTION_CLOSED error, moreover, the mobile app that https://www.dns-shop.ru/ and https://www.citilink.ru/ have is also partially loaded. The problem is solved when I enable Forwarders on Cloudflare's DoH

Thanks for the details. It looks like some kind of transient network issue. Probably Cloudflare is returning out different IP address which may be why its working.

I noticed one pattern that when I click Flush Cache in Technitium DNS, the problem with loading these sites disappears and they load normally. But after some time the problem repeats and these sites do not load again. Is it possible that this is somehow connected with the cache?

UPDATE That doesn't work either

ShreyasZare commented 1 month ago

It seems that there is DNS hijacking being deployed by your ISP.

Try to run nslookup google.com. 1.2.3.4 in CMD and see if you get a response. If there is a response then there is DNS hijack setup. If no response then it does not rule out other types of hijack techniques.

You can also try the DNS Client tool on the DNS admin panel and select Recursive Query {recursive-resolver} as the Server and run query for any domain name. Inspect the response to see which name server is answering it. If you see root servers answering directly then that is also a hijack.

In any case, if using encrypted DNS forwarders makes things work then use them instead of running recursive resolver.