My son ran a network test from http://netalyzr.icsi.berkeley.edu/index.html . It said I had a serious error. Tried to find the option on the OpenDNS Dashboard that they refer but could not find this particular option. I would like to see what OpenDNS has to say about the complaints they list. 1:Unable to access IPv6 only sites and 2: issues with resolving unresolvable domains and transient failures.
The DNS resolver you are using deliberately manipulates results. This can prove problematic, as you will be unable to contact an IPv6-only site: the DNS resolver is giving incorrect results for a system which has only an IPv6 address. We expected the client to only receive cafe:babe:66:0:0:0:0:1 (an IPv6 address), instead it received the following addresses: 220.127.116.11, cafe:babe:66:0:0:0:0:1.
Your DNS resolver is on Google's IPv6 "whitelist", which means that Google enables IPv6 access to their services for you.
You appear to be using OpenDNS. OpenDNS, by default, deliberately returns addresses even for domain names which should not resolve. Instead of an error, the DNS server returns an address of 18.104.22.168, which resolves to hit-nxdomain.opendns.com. You can inspect the resulting HTML content here.
This is central to OpenDNS's business model. In order to support an otherwise free service, OpenDNS presents the users with advertisements whenever they make a typo in their web browser. You can disable this behavior through the OpenDNS Dashboard.
The big problem with this behavior is that it can potentially break any network application which relies on DNS properly returning an error when a name does not exist.
The following lists your DNS server's behavior in more detail.
Another problem with the DNS server is its response to a server failure. Instead of properly returning an error when it cannot contact the DNS authority, the DNS server returns an address of 22.214.171.124. Since transient failures are quite common this can be significantly disruptive, turning a transient failure into a wrong answer without any notification to the application doing the name lookup.
Please sign in to leave a comment.