[bdNOG] NXDOMAIN and associated issue at BDNOG event places in GS, Sreemongal

Wed Nov 11 19:33:55 BDT 2015

Noticed weird NXDOMAIN issue at bdNOG4 event place in Sreemongal.

My system’s DNS servers:

*nameserver 8.8.8.8*
*nameserver 220.247.160.5*
*nameserver 119.18.150.2*

dig asdfadffwedfqwefdweqdf.sdasdasd a

; <<>> DiG 9.8.3-P1 <<>> asdfadffwedfqwefdweqdf.sdasdasd a
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24775
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;asdfadffwedfqwefdweqdf.sdasdasd. IN A

;; ANSWER SECTION:
asdfadffwedfqwefdweqdf.sdasdasd. 60 IN A 218.93.250.18

;; Query time: 147 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Wed Nov 11 19:26:41 2015
;; MSG SIZE  rcvd: 65

218.93.250.18 belongs to AS4134.

Overall it seems like all NXDOMAIN queries are being hijacked no matter
whatever DNS server I send query to.

dig @208.67.222.222 asddwedqwdqwd.qwdqwdqwd

; <<>> DiG 9.8.3-P1 <<>> @208.67.222.222 asddwedqwdqwd.qwdqwdqwd
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60497
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;asddwedqwdqwd.qwdqwdqwd. IN A

;; ANSWER SECTION:
asddwedqwdqwd.qwdqwdqwd. 60 IN A 218.93.250.18

;; Query time: 489 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Wed Nov 11 19:27:54 2015
;; MSG SIZE  rcvd: 57

Thanks.

-- 

Anurag Bhatia
anuragbhatia.com

PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.bdnog.org/pipermail/nog/attachments/20151111/c7f8cc81/attachment.html>