[dns-operations] Issue with www.bing.com resolution in Time Warner

Ashley Flavel ashleyfl at microsoft.com
Mon Nov 18 16:54:40 UTC 2013


Hi,

I've had reports that users in TWC are getting incorrect IPs back from their local resolvers.  Both of the IPs below are proxy servers and sometimes redirect the user to dnsrsearch.com instead of bing.com.

This might be a misconfig of a system that catches NXDOMAINs and provides "typo assistance".  Another interesting this in the TTL on the responses is huge.

Anyone seen something similar or have a contact in TWC that can help?

Thanks!
Ashley

c:\src\ap>nslookup -debug -q=A www.bing.com<http://www.bing.com>.
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 1, rcode = NOERROR
        header flags:  response, auth. answer, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        1.1.168.192.in-addr.arpa, type = PTR, class = IN
    ANSWERS:
    ->  1.1.168.192.in-addr.arpa
        name = router.asus.com
        ttl = 0 (0 secs)

------------
Server:  router.asus.com
Address:  192.168.1.1

------------
Got answer:
    HEADER:
        opcode = QUERY, id = 2, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 2,  authority records = 0,  additional = 0

    QUESTIONS:
        www.bing.com<http://www.bing.com>, type = A, class = IN
    ANSWERS:
    ->  www.bing.com<http://www.bing.com>
        internet address = 76.79.152.20
        ttl = 42126785 (487 days 13 hours 53 mins 5 secs)
    ->  www.bing.com<http://www.bing.com>
        internet address = 198.105.241.134
        ttl = 42126785 (487 days 13 hours 53 mins 5 secs)

------------
Non-authoritative answer:
Name:    www.bing.com<http://www.bing.com>
Addresses:  76.79.152.20
          198.105.241.134

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131118/7f6b6c03/attachment.html>


More information about the dns-operations mailing list