Closed mahdi-ln closed 3 years ago
It is possible that a resolver has a policy that selectively answers questions most likely depending on the client IP address or origin ASN. It might also be possible that the DNS is intercepted to return a SERVFAIL if you are not using encrypted transport but that seems unlikely for this query....
Do you see the same behaviour if dig to the server directly i..e you do something like:
dig @
example.com dig @8.8.8.8 example.com
As far as I know Google Public DNS (8.8.8.8) should answer from everywhere.
I'm reviewing old issues and am closing this now as there was no follow up to the response. Please re-open if needed.
When I directly connect to the internet:
But when I connect through an encrypted tunnel (which also change IP country):
Does an ISP can provide such situation or the DNS server doesn't cooperate with users from certain countries (In stubby.yml I only enabled a server with tls_pubkey_pinset)