[dns-operations] most of root NS and com's NS fail from here

[David Conrad]

Ken,

On Apr 28, 2014, at 7:43 PM, Ken Peng <kpeng at terra.com> wrote:
> Recent days I found most of the root nameservers, and com/net's
> nameservers can't work from here. When accessing to them I always got
> timeout.

If you're querying from inside China, probably the first thing you should check is to see if the root server IP addresses you're querying match the following list (a-m):

a.root-servers.net. - 198.41.0.4
b.root-servers.net. - 192.228.79.201
c.root-servers.net. - 192.33.4.12
d.root-servers.net. - 199.7.91.13
e.root-servers.net. - 192.203.230.10
f.root-servers.net. - 192.5.5.241
g.root-servers.net. - 192.112.36.4
h.root-servers.net. - 128.63.2.53
i.root-servers.net. - 192.36.148.17
j.root-servers.net. - 192.58.128.30
k.root-servers.net. - 193.0.14.129
l.root-servers.net. - 199.7.83.42
m.root-servers.net. - 202.12.27.33

and

a.root-servers.net. - 2001:503:ba3e::2:30
b.root-servers.net. - 
c.root-servers.net. - 2001:500:2::c
d.root-servers.net. - 2001:500:2d::d
e.root-servers.net. - 
f.root-servers.net. - 2001:500:2f::f
g.root-servers.net. - 
h.root-servers.net. - 2001:500:1::803f:235
i.root-servers.net. - 2001:7fe::53
j.root-servers.net. - 2001:503:c27::2:30
k.root-servers.net. - 2001:7fd::1
l.root-servers.net. - 2001:500:3::42
m.root-servers.net. - 2001:dc3::35

You then might want to do a traceroute to those IP addresses and see if it looks like they're going towards the right places (a little complicated given anycast routing, but if they all stay within China, you might be a bit suspicious).  You then might want to try pinging those IP addresses to see the loss/latency stats.

> I am from China, ISP telecom.
> Can you tell what happens?

Probably not definitively without more information...

Regards,
-drc

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20140428/0f66bb82/attachment.sig>