search

mullvad / dns-blocklists

Lists and configuration for our DNS blocking service
1.12k stars 47 forks source link

Question about blocking of www.lyrical-nonsense.com #112

Closed NDavies-02 closed 1 year ago

NDavies-02 commented 1 year ago

Currently using Mullvad DNS using Windows 11 encrypted DNS and also on Android via Private DNS.

I notice that the site www.lyrical-nonsense.com does not resolve when using it. (ERR_NAME_NOT_RESOLVED error on Windows/Edge; DNS cannot be resolved error on Android browser)

This is even true for the non-blocking dns.mullvad.net, though I generally use base.dns.mullvad.net.

I am able to access the website again upon switching to any other non-Mullvad DNS provider.

Is this an issue, or a deliberate decision? Apologies if this is not the correct way to report this issue.

oskaralmlov commented 1 year ago

Unfortunately I'm unable to reproduce your issue (under Linux, I don't have a window machine).

However I can say this; the only domains that our service blocks are those that are listed in the below repository and only when the user chooses to enable the specific "blocking categories": https://github.com/mullvad/dns-blocklists

9/10 times when something like this happens it's because the dns servers that are authoritative (responsible) for that domain are blocking our servers from resolving that domain. It's an unfortunate side-effect of our servers IP addresses being public - some people block them.

An FYI here is that our encrypted dns service is anycasted. Meaning that multiple servers are configured with the same IP and your traffic will be routed to the one that is closest to you. So if that closest server ends up being blocked from resolving $DOMAIN the other servers might still be able to resolve it. Whenever this happens you could try and switch to using a specific server directly rather than dns.mullvad.net(note that configuring these hostnames as your resolver is equivalent of dns.mullvad.net and that there is no adblocking/base/extended versions) :

de-fra-dns-001.mullvad.net
gb-lon-dns-001.mullvad.net
gb-lon-dns-301.mullvad.net
se-got-dns-001.mullvad.net
se-mma-dns-001.mullvad.net
se-sto-dns-001.mullvad.net
sg-sin-dns-101.mullvad.net
us-lax-dns-401.mullvad.net
us-nyc-dns-601.mullvad.net
NDavies-02 commented 1 year ago

Thank you for this information. I did test using all of those servers, and the page loaded fine most (though not all) attempts, and still was hit and miss for a while after that regardless of server selection.

As of writing (a couple of days after previous tests), I'm also able to access the site consistently (using base.dns.mullvad.net) and am unable to reproduce my previous issue again on either my Windows or two Android devices, so I'll close this issue.