Can't ping OpenDNS with my ISP Numericable

Follow

ppodns

July 11, 2020 11:25

Hi,

 

My ISP is Numericable in France, and the modem model is Sagemcom F@ S T 3284DC

I use factory setting, I do not make any change to the modem configuration.

On windows 10 latest version, I get a ping error on 208.67.222.222 and 208.67.220.220

However I am able to ping other DNS services, like FDN DNS 80.67.169.12

Does it mean that my ISP specifically blocks OpenDNS?

I can give you my IP address if that helps for you to do forensicks.

 

0

• 

  rotblitz July 11, 2020 11:54 (Edited July 13, 2020 09:19)

  Why would you use ping? It is almost good for nothing, at least for what you want to achieve, to check for OpenDNS. Unlike DNS which uses UDP and TCP and port 53, ping uses ICMP and is portless.

  You better test like this:
  nslookup -type=txt debug.opendns.com. 208.67.222.222

  0

  Comment actions Permalink
• 

  ppodns July 13, 2020 06:12

  Hi, thanks for the tip. I also do get an error

   

  nslookup -type=txt debug.opendns.com. 208.67.222.222

  DNS request timed out.
  timeout was 2 seconds.
  Serveur : UnKnown
  Address: 208.67.222.222

  DNS request timed out.
  timeout was 2 seconds.
  *** Le délai de la requête sur UnKnown est dépassé.

   

  Assuming there was one space too many in your command, this is what I get:

  nslookup -type=txt debug.opendns.com.208.67.222.222

   

  Serveur : ns1.numericable.net
  Address: 89.2.0.1

  Réponse ne faisant pas autorité :
  debug.opendns.com.208.67.222.222.numericable.fr canonical name = nc-ass-vip.sdv.fr

  sdv.fr
  primary name server = dns1.sdv.fr
  responsible mail addr = hostmaster.sdv.fr
  serial = 2020071305
  refresh = 21600 (6 hours)
  retry = 3600 (1 hour)
  expire = 3600000 (41 days 16 hours)
  default TTL = 172800 (2 days)

  0

  Comment actions Permalink
• 

  rotblitz July 13, 2020 09:16 (Edited July 13, 2020 09:23)

  The DNS traffic connection (port 53) to OpenDNS is being blocked, most likely by your ISP.  Call them to opt out from this restriction.

  Alternatively, you can install the DNSCrypt proxy (https://dnscrypt.info/ or https://www.dnscrypt.org/) which can work on alternative ports like 443 or 5353.

  And no, I did not mistype the command, the space had to be there.  So your second output does not give useful information, just that you're using your ISP's DNS service (Serveur : ns1.numericable.net, Address: 89.2.0.1) and that you have a DNS suffix (numericable.fr) configured.  Things which also could be seen from a "ipconfig /all".

  0

  Comment actions Permalink
• 

  ppodns July 13, 2020 15:37

  Hi it looks like the ISP fixed on its side.

   

  nslookup -type=txt debug.opendns.com. 208.67.222.222
  Serveur : resolver1.opendns.com
  Address: 208.67.222.222

  Réponse ne faisant pas autorité :
  debug.opendns.com text =

  "server r7.cdg1"
  debug.opendns.com text =

  "flags 40020 0 50 180000000000000000003B50000000000000000"
  debug.opendns.com text =

  "originid 436168886"
  debug.opendns.com text =

  "actype 2"
  debug.opendns.com text =

  "bundle 12771476"
  debug.opendns.com text =

  "source [my ip address]:57812"

  0

  Comment actions Permalink
• 

  rotblitz July 13, 2020 15:54

  Correct, they have fixed it.  Enjoy!

  0

  Comment actions Permalink

Please sign in to leave a comment.