[dns-operations] NXDomain response in Brazil network

[Davey Song]

The problem is resolved.

It turned out that aliyuncs.com was blocked due to a court order requested
by a  local Telecommunications Agency.
The known reason behind this is that one of the users uploaded some illegal
content (via OSS) and the
second-level domain of OSS link was blocked brutally, affecting more
services in Alibaba Cloud.

As part of Internet governance today, it is not rare for a domain or IP
address of DNS to be identified as illegal
simply because it is associated with illegal content or malware. If these
domains or IPs were blocked without
a double-check, a larger group of innocent content and services would be
affected. This would be a catastrophe
for critical internet services.

-Davey

On Tue, Feb 11, 2025 at 9:29 PM Davey Song <songlinjian at gmail.com> wrote:

> Hi folks,
>
> Anyone here has ISP contacts in Brazil like Vivo or Claro? An important
> domain *.aliyuncs.com receiving NXDomain response in the Brazil network.
>
> WHEN I DIG @177.159.101.225 (AS18881 TELEFÔNICA BRASIL S.A)  :
>
>
> root at localhost:~# dig @177.159.101.225 aliyuncs.com
>
> <>> DiG 9.18.30-0ubuntu0.24.04.1-Ubuntu <>> @177.159.101.225 aliyuncs.com
>
> ; (1 server found)
>
> i; global options: +cmd ;; Got answer:
>
> ;; →>HEADER<<- opcode: QUERY, status: NDOMAIN, id: 54887
>
> i; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
>
> ; EDNS: version: 0, flags:; udp: 512
>
> ;; QUESTION SECTION:
>
> ;aliyuncs.com.
>
> IN
>
> ;; Query time: 39 msec
>
> ;; SERVER: 177.159.101.225#53(177.159.101.225) (UDP)
>
> ;; WHEN: Tue Feb 11 13:23:26 UTC 2025
>
> ;; MSG SIZE rcvd: 41
>
>
>
> No error found when I dig + trace. It seems resolvers in Brazil block this
> name.
>
>
> -Davey
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20250213/c5e91339/attachment.html>