<html><head></head><body><div style="color:#000; background-color:#fff; font-family:garamond, new york, times, serif;font-size:13px"><div id="yui_3_16_0_1_1451197184446_13416"><span id="yui_3_16_0_1_1451197184446_16099">Dear Philip,</span></div><div id="yui_3_16_0_1_1451197184446_13416"><span><br></span></div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr"><span id="yui_3_16_0_1_1451197184446_13607">That worked like magic ! We rerouted the traffc via  TATA [AS6453] and everyone can resolve our DNS now.  </span></div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr"><a href="https://www.whatsmydns.net/#A/btraccl.net" id="yui_3_16_0_1_1451197184446_13604">https://www.whatsmydns.net/#A/btraccl.net</a></div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr"><br></div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr">Apparently Bahrati Airtel [AS
          9498] was filtering our DNS traffic. We are currently pursuing answer from Bharti. I will let you know if I get anything. Hopefully this would be a reference point , if your DNS is being resolve only in partial globe and your traffic pass via Bharti you can point finger to Bharti. </div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr"><br></div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr">Thank you guys a lot ( Philip, Brian, Anurag, Shuman and all others) to help to save our adrenaline.</div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr"><br></div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr">Thanks to bdNOG  providing such wonderful platform. </div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr"><br></div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr">Regards,</div><div id="yui_3_16_0_1_1451197184446_13416" dir="ltr">jasim</div> <div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: garamond, new york, times, serif; font-size: 13px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"><font size="2" face="Arial"> On Saturday, December 26, 2015 4:44 PM, Philip Smith <philip@nsrc.org> wrote:<br></font></div>  <br><br> <div class="y_msg_container">Hi Jasim,<br clear="none"><br clear="none">I've seen this exact symptom before, in region.<br clear="none"><br clear="none">I've checked in a few places around the Internet. Where the paths to you<br clear="none">run through Airtel I cannot get any name resolution for btraccl.net.<br clear="none">Where the paths do not run through Airtel, DNS works just fine.<br clear="none"><br clear="none">Non-airtel path:<br clear="none"><br clear="none"> 7  103-16-152-25-noc.bsccl.com (103.16.152.25)  128.800 ms  130.064 ms<br clear="none"> 130.056 ms<br clear="none"> 8  103-16-152-33-noc.bsccl.com (103.16.152.33)  133.250 ms  133.094 ms<br clear="none"> 133.268 ms<br clear="none"> 9  103-16-155-26-noc.bsccl.com (103.16.155.26)  154.001 ms  154.018 ms<br clear="none"> 153.998 ms<br clear="none">10  po1-ar1-bn1-dh.equitel.com.bd (103.9.186.66)  133.732 ms  133.706 ms<br clear="none"> 133.751 ms<br clear="none">11  103.9.186.130 (103.9.186.130)  134.851 ms  134.988 ms  135.118 ms<br clear="none">12  cp1.btraccl.net (103.9.185.227)  155.304 ms  155.304 ms  155.294 ms<br clear="none"><br clear="none">$ dig btraccl.net a<br clear="none"><br clear="none">; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.el5_11.4 <<>> btraccl.net a<br clear="none">;; global options:  printcmd<br clear="none">;; Got answer:<br clear="none"><br clear="none">btraccl.net.        14400    IN    A    103.9.185.227<br clear="none"><br clear="none"><br clear="none">Airtel path:<br clear="none"><br clear="none"> 7  9498.hkg.equinix.com (119.27.63.26)  153.907 ms  151.835 ms  152.576 ms<br clear="none"> 8  182.79.234.238 (182.79.234.238)  217.081 ms 182.79.234.201<br clear="none">(182.79.234.201)  218.547 ms 182.79.247.178 (182.79.247.178)  218.766 ms<br clear="none"> 9  aes-static-190.137.144.59.airtel.in (59.144.137.190)  270.817 ms<br clear="none">265.320 ms  264.935 ms<br clear="none">10  103.7.249.110 (103.7.249.110)  249.120 ms  248.193 ms  247.767 ms<br clear="none">11  103.9.186.66 (103.9.186.66)  267.391 ms  265.746 ms  265.328 ms<br clear="none">12  103.9.186.130 (103.9.186.130)  273.015 ms  271.443 ms  271.502 ms<br clear="none">13  103.9.185.229 (103.9.185.229)  264.746 ms  263.285 ms  263.443 ms<br clear="none"><br clear="none">$ dig btraccl.net a<br clear="none"><br clear="none">; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.5 <<>> btraccl.net a<br clear="none">;; global options: +cmd<br clear="none">;; connection timed out; no servers could be reached<br clear="none"><br clear="none">This is going to be hard for you to sort directly though - you'll need<br clear="none">to ask your upstream (Equitel Communication Ltd) to talk to <a shape="rect" ymailto="mailto:Fiber@Home" href="mailto:Fiber@Home">Fiber@Home</a><br clear="none">who get transit from Airtel.<br clear="none"><br clear="none">The way to check this is to ask Equitel to shutdown their link to<br clear="none"><a shape="rect" ymailto="mailto:Fiber@Home" href="mailto:Fiber@Home">Fiber@Home</a> for a short period, let BGP reroute you exclusively onto the<br clear="none">BSCCL link (Equitel's other upstream), and then check your DNS from<br clear="none">various spots around the globe again.<br clear="none"><br clear="none"><br clear="none">Note, I could be wrong, but this symptom was exactly what I saw a few<br clear="none">months back, and it took the operator concerned almost 2 months of<br clear="none">frustration to sort. Turns out Airtel were filtering DNS on their link -<br clear="none">it took quite a bit of escalation to sort, and no reasoning was offered<br clear="none">by Airtel either. (Maybe someone from Airtel is on the list here and can<br clear="none">help?)<br clear="none"><br clear="none">philip<br clear="none">--<br clear="none"><br clear="none">Jasim Alam wrote on 23/12/2015 08:53 :<br clear="none">> Hi,<br clear="none">> <br clear="none">> From  last couple of day mail sent from yahoo mail to my domain<br clear="none">> (btraccl.net) are being bounced back, please see the forwarded mail.<br clear="none">> Yahoo saying they can't find my A or MX record. But mxtoolbox and google<br clear="none">> tool saying there is nothing wrong with my dns configuration<br clear="none">> <br clear="none">> <a shape="rect" href="http://mxtoolbox.com/domain/btraccl.net/" target="_blank">http://mxtoolbox.com/domain/btraccl.net/</a><br clear="none">> <a shape="rect" href="https://toolbox.googleapps.com/apps/dig/#A/btraccl.net" target="_blank">https://toolbox.googleapps.com/apps/dig/#A/btraccl.net</a><br clear="none">> <a shape="rect" href="https://toolbox.googleapps.com/apps/dig/#MX/btraccl.net" target="_blank">https://toolbox.googleapps.com/apps/dig/#MX/btraccl.net</a><br clear="none">> <br clear="none">> After further digging , I found that from some location my dns is<br clear="none">> resolved from some location from some not. <br clear="none">> <br clear="none">> <a shape="rect" href="https://www.whatsmydns.net/#A/btraccl.net" target="_blank">https://www.whatsmydns.net/#A/btraccl.net</a><br clear="none">> <a shape="rect" href="https://dnschecker.org/#A/btraccl.net" target="_blank">https://dnschecker.org/#A/btraccl.net</a><br clear="none">> <a shape="rect" href="https://www.nexcess.net/resources/tools/global-dns-checker/?h=btraccl.net&t=A" target="_blank">https://www.nexcess.net/resources/tools/global-dns-checker/?h=btraccl.net&t=A</a><br clear="none">> <br clear="none">> <br clear="none">> Same for online port scanners, some online port scanner can open my dns<br clear="none">> server's port 53 some can't. <br clear="none">> <br clear="none">> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br clear="none">>                                                                        <br clear="none">>                              [Port Scan]<br clear="none">> <br clear="none">> # from local network<br clear="none">> <br clear="none">> nmap 103.9.185.229<br clear="none">> <br clear="none">> Starting Nmap 6.47 ( <a shape="rect" href="http://nmap.org/" target="_blank">http://nmap.org </a>) at 2015-12-22 12:02 BDT<br clear="none">> Nmap scan report for 103.9.185.229<br clear="none">> Host is up (0.0054s latency).<br clear="none">> Not shown: 993 closed ports<br clear="none">> PORT STATE SERVICE<br clear="none">> 22/tcp open ssh<br clear="none">> 25/tcp open smtp<br clear="none">> 53/tcp open domain<br clear="none">> 80/tcp open http<br clear="none">> 465/tcp open smtps<br clear="none">> 587/tcp open submission<br clear="none">> 3306/tcp open mysql<br clear="none">> <br clear="none">> Nmap done: 1 IP address (1 host up) scanned in 1.66 seconds<br clear="none">> <br clear="none">> <br clear="none">> #<br clear="none">> <a shape="rect" href="https://pentest-tools.com/network-vulnerability-scanning/tcp-port-scanner-online-nmap" target="_blank">https://pentest-tools.com/network-vulnerability-scanning/tcp-port-scanner-online-nmap</a><br clear="none">> <br clear="none">> Starting Nmap 6.00 ( <a shape="rect" href="http://nmap.org/" target="_blank">http://nmap.org </a>) at 2015-12-22 08:14 EET<br clear="none">> Initiating Ping Scan at 08:14<br clear="none">> Scanning 103.9.185.229 [4 ports]<br clear="none">> Completed Ping Scan at 08:14, 0.26s elapsed (1 total hosts)<br clear="none">> Initiating SYN Stealth Scan at 08:14<br clear="none">> Scanning 103.9.185.229 [100 ports]<br clear="none">> Discovered open port 3306/tcp on 103.9.185.229<br clear="none">> Discovered open port 53/tcp on 103.9.185.229<br clear="none">> Discovered open port 465/tcp on 103.9.185.229<br clear="none">> Discovered open port 25/tcp on 103.9.185.229<br clear="none">> Discovered open port 587/tcp on 103.9.185.229<br clear="none">> Discovered open port 22/tcp on 103.9.185.229<br clear="none">> Completed SYN Stealth Scan at 08:14, 1.66s elapsed (100 total ports)<br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <a shape="rect" href="http://www.ipfingerprints.com/portscan.php" target="_blank">http://www.ipfingerprints.com/portscan.php</a><br clear="none">> <br clear="none">> 103.9.185.229 53/tcp open   domain<br clear="none">> 103.9.185.230 53/tcp open   domain<br clear="none">> <br clear="none">> <br clear="none">> <a shape="rect" href="http://ports.my-addr.com/check-all-open-ports-online.php" target="_blank">http://ports.my-addr.com/check-all-open-ports-online.php</a><br clear="none">> <br clear="none">> 103.9.185.229:53 = success<br clear="none">> 103.9.185.230:53 = success<br clear="none">> <br clear="none">> <br clear="none">> <a shape="rect" href="http://mxtoolbox.com/SuperTool.aspx?action=scan%3a103.9.185.229&run=toolpage" target="_blank">http://mxtoolbox.com/SuperTool.aspx?action=scan%3a103.9.185.229&run=toolpage</a><br clear="none">> 53dnsOpen266<br clear="none">> <br clear="none">> <a shape="rect" href="http://mxtoolbox.com/SuperTool.aspx?action=scan%3a103.9.185.230&run=toolpage" target="_blank">http://mxtoolbox.com/SuperTool.aspx?action=scan%3a103.9.185.230&run=toolpage</a><br clear="none">> 53dnsOpen281<br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <a shape="rect" href="http://ping.eu/port-chk/" target="_blank">http://ping.eu/port-chk/</a><br clear="none">> <br clear="none">> 103.9.185.229:53 port is closed<br clear="none">> 103.9.185.230:53 port is closed<br clear="none">> 103.9.185.229:465 port is open<br clear="none">> 103.9.185.229:25 port is open<br clear="none">> 103.9.185.229:587 port is open<br clear="none">> 103.9.185.229:3306 port is open<br clear="none">> <br clear="none">> ...............................................<br clear="none">> <br clear="none">> all else port seems open<br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <a shape="rect" href="http://www.t1shopper.com/tools/port-scan/" target="_blank">http://www.t1shopper.com/tools/port-scan/</a><br clear="none">> <br clear="none">> 103.9.185.229 isn't responding on port 53 (domain).<br clear="none">> 103.9.185.230 isn't responding on port 53 (domain).<br clear="none">> 103.9.185.229 is responding on port 25 (smtp).<br clear="none">> ............................................................<br clear="none">> same here <br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <a shape="rect" href="http://www.yougetsignal.com/tools/open-ports/" target="_blank">http://www.yougetsignal.com/tools/open-ports/</a><br clear="none">> <br clear="none">> Port 53 is closed on 103.9.185.229.<br clear="none">> Port 53 is closed on 103.9.185.230.<br clear="none">> Port 25 is open on 103.9.185.229.<br clear="none">> ----------------------------------<br clear="none">> same here <br clear="none">> <br clear="none">> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br clear="none">> <br clear="none">> <br clear="none">> This put me in nowhere as there are no host/network acl to filter the<br clear="none">> dns traffic. ISP/IIG/ITC telling me the same. <br clear="none">> <br clear="none">> Is this is any global routing issue ? Have anyone experienced  such<br clear="none">> scenarios ? Please suggest me any solution of this. <br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> Regards,<br clear="none">> Jasim<br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br clear="none">> <br clear="none">> On Monday, December 21, 2015 10:17 AM, "<a shape="rect" ymailto="mailto:MAILER-DAEMON@yahoo.com" href="mailto:MAILER-DAEMON@yahoo.com">MAILER-DAEMON@yahoo.com</a>"<br clear="none">> <<a shape="rect" ymailto="mailto:MAILER-DAEMON@yahoo.com" href="mailto:MAILER-DAEMON@yahoo.com">MAILER-DAEMON@yahoo.com</a>> wrote:<br clear="none">> <br clear="none">> <br clear="none">> Sorry, we were unable to deliver your message to the following address.<br clear="none">> <br clear="none">> <<a shape="rect" ymailto="mailto:jasim.alam@btraccl.net" href="mailto:jasim.alam@btraccl.net">jasim.alam@btraccl.net</a> <mailto:<a shape="rect" ymailto="mailto:jasim.alam@btraccl.net" href="mailto:jasim.alam@btraccl.net">jasim.alam@btraccl.net</a>>>:<br clear="none">> No MX or A records for btraccl.net<br clear="none">> <br clear="none">> --- Below this line is a copy of the message.<br clear="none">> <br clear="none">> Received: from [66.196.81.174] by nm26.bullet.mail.bf1.yahoo.com with<br clear="none">> NNFMP; 21 Dec 2015 03:53:35 -0000<br clear="none">> Received: from [98.139.212.217] by tm20.bullet.mail.bf1.yahoo.com with<br clear="none">> NNFMP; 21 Dec 2015 03:53:35 -0000<br clear="none">> Received: from [127.0.0.1] by omp1026.mail.bf1.yahoo.com with NNFMP; 21<br clear="none">> Dec 2015 03:53:35 -0000<br clear="none">> X-Yahoo-Newman-Property: ymail-3<br clear="none">> X-Yahoo-Newman-Id: <a shape="rect" ymailto="mailto:458777.42486.bm@omp1026.mail.bf1.yahoo.com" href="mailto:458777.42486.bm@omp1026.mail.bf1.yahoo.com">458777.42486.bm@omp1026.mail.bf1.yahoo.com</a><br clear="none">> <mailto:<a shape="rect" ymailto="mailto:458777.42486.bm@omp1026.mail.bf1.yahoo.com" href="mailto:458777.42486.bm@omp1026.mail.bf1.yahoo.com">458777.42486.bm@omp1026.mail.bf1.yahoo.com</a>><br clear="none">> X-YMail-OSG: eRLkhAUVM1m0iGywFxEWTqIClC9kpx9qep2H3h87A5pXx7u2nChv7ojlOA3fPfM<br clear="none">> roCPBlSiUKcgA3RcgQ2Sb1reTx.PrLKmpH02eJy73Zct1QKep.znfHg.M.fuVcGtxASr_UG41vkF<br clear="none">> TePG24o6oWYfOzaDxvKbrj6gZ8X7_2892LrZbcwH7vWLaLewvUoweKlWtHw7T5vldvDwwosWu33Q<br clear="none">> iX0k0PBAKx._HtbJMxEiPRsl7dRjhRI54UbfnzIx5xSx0xtWyzVDVMKtTXOIA1Czwu2JqRyIvEUJ<br clear="none">> Yjd_FnOcPsHQsrTsZUvQk89pYEBgilMhVoMTnsbwm4g4MYjK7vMAOH0XJnxvkNuFnhUWAjKVb80F<br clear="none">> UF.jXDoD.E5oO0XsZorFAu9MCtya54XZP0cE4TypHxan7xEpUmVkoTJaY8gUFjoHeOknqjWdwQbw<br clear="none">> 4Xs2d2I0FAIwlU72IygsYzTRrW39ZI8KOmcIGD7I28pI3A.LlPqTuFsfePx1nCFr4xH70qljrBW6<br clear="none">> g7bA0fpB7t3eafXRVCtsc7h5b<br clear="none">> Received: by 66.196.80.121; Mon, 21 Dec 2015 03:53:35 +0000<br clear="none">> Date: Mon, 21 Dec 2015 03:53:34 +0000 (UTC)<br clear="none">> From: Jasim Alam <<a shape="rect" ymailto="mailto:jasim21@ymail.com" href="mailto:jasim21@ymail.com">jasim21@ymail.com</a> <mailto:<a shape="rect" ymailto="mailto:jasim21@ymail.com" href="mailto:jasim21@ymail.com">jasim21@ymail.com</a>>><br clear="none">> Reply-To: Jasim Alam <<a shape="rect" ymailto="mailto:jasim21@ymail.com" href="mailto:jasim21@ymail.com">jasim21@ymail.com</a> <mailto:<a shape="rect" ymailto="mailto:jasim21@ymail.com" href="mailto:jasim21@ymail.com">jasim21@ymail.com</a>>><br clear="none">> To: Jasim Alam <<a shape="rect" ymailto="mailto:jasim.alam@btraccl.net" href="mailto:jasim.alam@btraccl.net">jasim.alam@btraccl.net</a> <mailto:<a shape="rect" ymailto="mailto:jasim.alam@btraccl.net" href="mailto:jasim.alam@btraccl.net">jasim.alam@btraccl.net</a>>><br clear="none">> Message-ID:<br clear="none">> <<a shape="rect" ymailto="mailto:1702908944.1561022.1450670014437.JavaMail.yahoo@mail.yahoo.com" href="mailto:1702908944.1561022.1450670014437.JavaMail.yahoo@mail.yahoo.com">1702908944.1561022.1450670014437.JavaMail.yahoo@mail.yahoo.com</a><br clear="none">> <mailto:<a shape="rect" ymailto="mailto:1702908944.1561022.1450670014437.JavaMail.yahoo@mail.yahoo.com" href="mailto:1702908944.1561022.1450670014437.JavaMail.yahoo@mail.yahoo.com">1702908944.1561022.1450670014437.JavaMail.yahoo@mail.yahoo.com</a>>><br clear="none">> Subject: test mail<br clear="none">> MIME-Version: 1.0<br clear="none">> Content-Type: multipart/alternative;<br clear="none">>     boundary="----=_Part_1561021_133957058.1450670014436"<br clear="none">> References:<br clear="none">> <<a shape="rect" ymailto="mailto:1702908944.1561022.1450670014437.JavaMail.yahoo.ref@mail.yahoo.com" href="mailto:1702908944.1561022.1450670014437.JavaMail.yahoo.ref@mail.yahoo.com">1702908944.1561022.1450670014437.JavaMail.yahoo.ref@mail.yahoo.com</a><div class="yqt7683229457" id="yqtfd76225"><br clear="none">> <mailto:<a shape="rect" ymailto="mailto:1702908944.1561022.1450670014437.JavaMail.yahoo.ref@mail.yahoo.com" href="mailto:1702908944.1561022.1450670014437.JavaMail.yahoo.ref@mail.yahoo.com">1702908944.1561022.1450670014437.JavaMail.yahoo.ref@mail.yahoo.com</a>>><br clear="none">> Content-Length: 513<br clear="none">> <br clear="none">> ------=_Part_1561021_133957058.1450670014436<br clear="none">> Content-Type: text/plain; charset=UTF-8<br clear="none">> Content-Transfer-Encoding: 7bit<br clear="none">> <br clear="none">> test mail<br clear="none">> ------=_Part_1561021_133957058.1450670014436<br clear="none">> Content-Type: text/html; charset=UTF-8<br clear="none">> Content-Transfer-Encoding: 7bit<br clear="none">> <br clear="none">> <html><head></head><body><div style="color:#000; background-color:#fff;<br clear="none">> font-family:garamond, new york, times, serif;font-size:13px"><div<br clear="none">> id="yui_3_16_0_1_1450669984207_2646" dir="ltr">test<br clear="none">> mail</div></div></body></html><br clear="none">> ------=_Part_1561021_133957058.1450670014436--</div><br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> _______________________________________________<br clear="none">> nog mailing list<br clear="none">> <a shape="rect" ymailto="mailto:nog@bdnog.org" href="mailto:nog@bdnog.org">nog@bdnog.org</a><br clear="none">> <a shape="rect" href="http://mailman.bdnog.org/mailman/listinfo/nog" target="_blank">http://mailman.bdnog.org/mailman/listinfo/nog</a><div class="yqt7683229457" id="yqtfd63072"><br clear="none">> <br clear="none"></div><br><br></div>  </div> </div>  </div></div></body></html>