[dns-operations] Issue with www.bing.com resolution in Time Warner

[Ashley Flavel]

Hi,

I've had reports that users in TWC are getting incorrect IPs back from their local resolvers.  Both of the IPs below are proxy servers and sometimes redirect the user to dnsrsearch.com instead of bing.com.

This might be a misconfig of a system that catches NXDOMAINs and provides "typo assistance".  Another interesting this in the TTL on the responses is huge.

Anyone seen something similar or have a contact in TWC that can help?

Thanks!
Ashley

c:\src\ap>nslookup -debug -q=A www.bing.com<http://www.bing.com>.
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 1, rcode = NOERROR
        header flags:  response, auth. answer, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        1.1.168.192.in-addr.arpa, type = PTR, class = IN
    ANSWERS:
    ->  1.1.168.192.in-addr.arpa
        name = router.asus.com
        ttl = 0 (0 secs)

------------
Server:  router.asus.com
Address:  192.168.1.1

------------
Got answer:
    HEADER:
        opcode = QUERY, id = 2, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 2,  authority records = 0,  additional = 0

    QUESTIONS:
        www.bing.com<http://www.bing.com>, type = A, class = IN
    ANSWERS:
    ->  www.bing.com<http://www.bing.com>
        internet address = 76.79.152.20
        ttl = 42126785 (487 days 13 hours 53 mins 5 secs)
    ->  www.bing.com<http://www.bing.com>
        internet address = 198.105.241.134
        ttl = 42126785 (487 days 13 hours 53 mins 5 secs)

------------
Non-authoritative answer:
Name:    www.bing.com<http://www.bing.com>
Addresses:  76.79.152.20
          198.105.241.134

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131118/7f6b6c03/attachment.html>