Thank you very much for your help. Traceroute from my DNS server is blocked:<br> <br>traceroute <a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a><br>traceroute: Warning: Multiple interfaces found; using 213.4.132.1 @ qfe0<br>
traceroute to <a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a> (192.175.48.6), 30 hops max, 40 byte packets<br> 1 * * *<br> 2 * * *<br> 3 * * *<br> 4 * * *<br> 5 * * *<br> 6 * * *<br> 7 * * *<br> 8 * * *<br>
9 * * *<br>10 * * *<br>11 * * *<br>12 * * *<br>13 * * *<br>14 * * *<br>15 * * *<br>16 * * *<br>17 * * *<br>18 * * *<br>19 * * *<br>20 * * *<br>21 * * *<br>22 * * *<br>23 * * *<br>24 * * *<br>25 * * *<br>
26 * * *<br>27 * * *<br>28 * * *<br>29 * * *<br>30 * * *<br>tdns1d:/# <br> <br> <br>And dig command give me another timeout:<br> <br>dig @<a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a> -x 192.168.1.1<br>
; <<>> DiG 8.4 <<>> @<a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a> -x <br>; (1 server found)<br>;; res options: init recurs defnam dnsrch<br>;; res_nsend: Connection timed out<br>tdns1d:/# dig @<a href="http://blackhole-2.iana.org">blackhole-2.iana.org</a> -x 192.168.1.1<br>
; <<>> DiG 8.4 <<>> @<a href="http://blackhole-2.iana.org">blackhole-2.iana.org</a> -x <br>; (1 server found)<br>;; res options: init recurs defnam dnsrch<br>;; res_nsend: Connection timed out<br> <br>
But i can ping them and ,also, i can open a tcp session.So ip connectivity exists. <br> <br>tdns1d:/# ping <a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a><br><a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a> is alive<br>
tdns1d:/# telnet <a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a> 53<br>Trying 192.175.48.6...<br>Connected to <a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a>.<br> <br>This is a trace from one of our routers to <a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a><br>
<br>Tracing the route to <a href="http://blackhole-1.iana.org">blackhole-1.iana.org</a> (192.175.48.6)<br> 1 22.213.4.128.22 0 msec 0 msec 4 msec<br> 2 <a href="http://234.Red-80-58-81.staticIP.rima-tde.net">234.Red-80-58-81.staticIP.rima-tde.net</a> (80.58.81.234) 0 msec 0 msec 0 msec<br>
3 <a href="http://134.Red-80-58-80.staticIP.rima-tde.net">134.Red-80-58-80.staticIP.rima-tde.net</a> (80.58.80.134) 4 msec 0 msec 4 msec<br> 4 <a href="http://129.Red-80-58-80.staticIP.rima-tde.net">129.Red-80-58-80.staticIP.rima-tde.net</a> (80.58.80.129) 0 msec 0 msec 4 msec<br>
5 <a href="http://98.Red-80-58-86.staticIP.rima-tde.net">98.Red-80-58-86.staticIP.rima-tde.net</a> (80.58.86.98) 0 msec 0 msec 4 msec<br> 6 193.149.1.170 0 msec 0 msec 4 msec<br> 7 <a href="http://ae2-0.mil-cal-score-2-re0.interoute.net">ae2-0.mil-cal-score-2-re0.interoute.net</a> (89.202.161.26) 48 msec 64 msec 48 msec<br>
8 <a href="http://ae0-0.mil-cal-score-1-re0.interoute.net">ae0-0.mil-cal-score-1-re0.interoute.net</a> (89.202.146.85) 56 msec 52 msec 52 msec<br> 9 <a href="http://ae2-0.vie-per-score-2-re1.interoute.net">ae2-0.vie-per-score-2-re1.interoute.net</a> (212.23.43.29) 52 msec 48 msec 52 msec<br>
10 <a href="http://ae1-0.bts-001-score-1-re0.interoute.net">ae1-0.bts-001-score-1-re0.interoute.net</a> (84.233.147.13) 52 msec 52 msec 52 msec<br> 11 <a href="http://ae0-0.bts-001-score-2-re0.interoute.net">ae0-0.bts-001-score-2-re0.interoute.net</a> (84.233.147.2) 52 msec 48 msec 52 msec<br>
12 <a href="http://ae1-0.bud-001-score-2-re0.interoute.net">ae1-0.bud-001-score-2-re0.interoute.net</a> (84.233.147.113) 52 msec 52 msec 64 msec<br> 13 84.233.171.4 52 msec 52 msec 48 msec<br> 14 <a href="http://gi1-0-2.c3750-border-1.atw.hu">gi1-0-2.c3750-border-1.atw.hu</a> (88.151.96.173) 44 msec 44 msec 44 msec<br>
15 <a href="http://gi3-4-2.c6509-core-1.atw.hu">gi3-4-2.c6509-core-1.atw.hu</a> (88.151.96.178) 44 msec 88 msec 40 msec<br> 16 88.151.96.2 44 msec 48 msec 44 msec<br> 17 * * * <br> 18 * * * <br> 19 * * * <br> 20 * * * <br>
21 * * * <br> 22 * * * <br> 23 * * * <br> 24 * * * <br> 25 * * * <br> 26 * * * <br> 27 * * * <br> 28 * * * <br> 29 * * * <br> 30 * * * <br> <br> <br>Again, thank you very much for your help.<br>
<br> <br><br>
<div class="gmail_quote">2010/8/5 Florian Weimer <span dir="ltr"><<a href="mailto:fweimer@bfk.de">fweimer@bfk.de</a>></span><br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">* Alberto García Moyano:<br>
<div class="im"><br>> I am Alberto Garcia, Coms admin in a ISP. I dont really know if you can<br>> answer this question, but IANA has sent me to you... so this is my problem:<br>><br>> we are sending inverse queries to these blackhole servers:<br>
><br>> "<a href="http://blackhole-1.iana.org/" target="_blank">blackhole-1.iana.org</a>" and "<a href="http://blackhole-2.iana.org/" target="_blank">blackhole-2.iana.org</a>",<br><br></div>These servers are in a special netblock announced by AS112 and are<br>
essentially operated as public anycast (that is, anybody can run those<br>servers).<br><br>So you need to provide traceroutes and "show ip bgp" (Quagga, IOS) or<br>"show route" (JUNOS) output, or we can't help you.<br>
<font color="#888888"><br>--<br>Florian Weimer <<a href="mailto:fweimer@bfk.de">fweimer@bfk.de</a>><br>BFK edv-consulting GmbH <a href="http://www.bfk.de/" target="_blank">http://www.bfk.de/</a><br>
Kriegsstraße 100 tel: +49-721-96201-1<br>D-76133 Karlsruhe fax: +49-721-96201-99<br></font></blockquote></div><br>