Dig error for debian.org and only for debian.org

Hi,

Just bought and installed a turris omnia a couple of weeks ago. It’s connected to my ISP modem and plays the role of a DHCP serveur for my wired network as well for my wifi network.

Things works (more or less) ok. But, I have two debian machine (one wired and the other one wifi) that cannot ‘apt-get update’. If I recall correctly, it did work just after the first installation of the omnia. But no and I fail to find why. It seems that’s it’s a DNS problem. Following commands were issued from the omnia.

turris# dig linux.org

; <<>> DiG 9.16.27 <<>> linux dot org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34378
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;linux dot org. IN A

;; ANSWER SECTION:
linux dot org. 294 IN A 188.114.96.22
linux dot org. 294 IN A 188.114.97.22

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue May 03 16:23:25 CEST 2022
;; MSG SIZE rcvd: 70

Ok. But:

turris# dig debian.org

; <<>> DiG 9.16.27 <<>> debian dot org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 44413
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;debian dot org. IN A

;; ANSWER SECTION:
debian dot org. 300 IN A 128.31.0.62
debian dot org. 300 IN A 130.89.148.77
debian dot org. 300 IN A 149.20.4.15

;; Query time: 2270 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue May 03 16:25:30 CEST 2022
;; MSG SIZE rcvd: 87

If I try to ping:

turris# ping debian dot org
ping: unknown host debian dot org

turris# ping linux dot org
PING linux dot org (188.114.97.22) 56(84) bytes of data.
64 bytes from 188.114.97.22 (188.114.97.22): icmp_req=1 ttl=55 time=8.52 ms
64 bytes from 188.114.97.22 (188.114.97.22): icmp_req=2 ttl=55 time=8.75 ms
^C64 bytes from 188.114.97.22 (188.114.97.22): icmp_req=3 ttl=55 time=7.98 ms

— linux dot org ping statistics —
3 packets transmitted, 3 received, 0% packet loss, time 10028ms
rtt min/avg/max/mdev = 7.984/8.420/8.754/0.339 ms

Trying to access www.debian dot org with a browser fails with DNS_PROBE_FINISHED_NXDOMAIN.

I can access the rest of the www without problem.

I’ve been fiddling around for a long while now and just cannot figure it out.

Network topology is as follows:

internet – public IP (ISP modem) 192.168.1.2 ----- 192.168.1.5 (Omnia) 192.168.2.1, thus home network is 192.168.2.0/24. There is a static route function on the ISP modem, which I tried to configure to point to 192.168.2.0/24 network, but it didn’t help.

I can give more information if required, but I first need some help to start somewhere.

Thanks for any help!

s.

PS: had to replace some . by dot in the above commands since new users can only put 2 links in the messages.

Digging into details would probably be relatively tedious.

From this description I’d expect that your DNS in (re)Foris is configured to forward to ISP’s servers and it will probably be best in your case to not use forwarding or choose a different target. That’s really trivial to try out.

1 Like

That is correct.

Which I tried and everything came back to normal! Thanks.

Having said that, it would be nice to understand the issue. Because it’s pretty strange that only one domain name was having this problem no?

Anyway thank you for the answer and solution.

Have a nice day

Well, feel free to obtain log from the failure (as linked) and send it to me.