cancel
Showing results for 
Search instead for 
Did you mean: 
groupboard
Aspiring Contributor
708 Views
Message 1 of 9

BT DNS not working for certain sites

Go to solution

We've had quite a few users tell us that our groupworld.net site isn't accessible via BT for the past few days. There's no problem with the domain's DNS as far as I can tell, and it works fine when the users switch do different DNS.

 

0 Ratings
Reply
8 REPLIES 8
Guru
Guru
699 Views
Message 2 of 9

Re: BT DNS not working for certain sites

Go to solution

Fine here with DNS server: 81.139.56.100; 81.139.57.100

 

~ $ dig ANY groupworld.net
;; Truncated, retrying in TCP mode.
 
; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> ANY groupworld.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59501
;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 4
 
;; QUESTION SECTION:
;groupworld.net.                        IN      ANY
 
;; ANSWER SECTION:
groupworld.net.         600     IN      TXT     "v=spf1 a:weteachscience.org  ip4:167.114.119.109 ip6:2607:5300:60:6e6d::/64 mx -all"
groupworld.net.         600     IN      NS      ns10.domaincontrol.com.
groupworld.net.         600     IN      NS      ns09.domaincontrol.com.
groupworld.net.         600     IN      SOA     ns09.domaincontrol.com. dns.jomax.net. 2017051101 28800 7200 604800 600
groupworld.net.         600     IN      A       167.114.119.109
groupworld.net.         600     IN      MX      10 dev.groupboard.com.
groupworld.net.         600     IN      MX      15 hosting.groupboard.com.
 
;; ADDITIONAL SECTION:
ns09.domaincontrol.com. 142     IN      A       216.69.185.5
ns09.domaincontrol.com. 600     IN      AAAA    2607:f208:206::5
ns10.domaincontrol.com. 391     IN      A       208.109.255.5
ns10.domaincontrol.com. 600     IN      AAAA    2607:f208:302::5
 
;; Query time: 213 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Fri May 12 20:22:10 2017
;; MSG SIZE  rcvd: 388
 
~ $ curl -I www.groupworld.net
HTTP/1.1 200 OK
Date: Fri, 12 May 2017 20:27:11 GMT
Server: Apache
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html

jac_95 | BT.com Help Site | BT Service Status
Someone Solved Your Question?
Please let other members know by clicking on ’Mark as Accepted Solution’
Try a Search
See if someone in the community had the same problem and how they got it resolved.
0 Ratings
Reply
groupboard
Aspiring Contributor
688 Views
Message 3 of 9

Re: BT DNS not working for certain sites

Go to solution
Thanks, I'll check what DNS servers they're using. It's still a problem for them, but only when using their BT connection. It works fine on mobile data.
0 Ratings
Reply
groupboard
Aspiring Contributor
493 Views
Message 4 of 9

Re: BT DNS not working for certain sites

Go to solution

The problem seems to be happening again for many of our BT customers...they can't access www.groupworld.net in their browser. Previously it was due to Talos incorrecting flagging our site with a poor reputation, but now it is still back at Neutral:

 

https://talosintelligence.com/reputation_center/lookup?search=groupworld.net

 

(this was fixed by Talos in Dec 2017).

Can someone test using the default BT DNS to see what happens? 

0 Ratings
Reply
488 Views
Message 5 of 9

Re: BT DNS not working for certain sites

Go to solution

@groupboardwrote:

The problem seems to be happening again for many of our BT customers...they can't access www.groupworld.net in their browser. Previously it was due to Talos incorrecting flagging our site with a poor reputation, but now it is still back at Neutral:

 

https://talosintelligence.com/reputation_center/lookup?search=groupworld.net

 

(this was fixed by Talos in Dec 2017).

Can someone test using the default BT DNS to see what happens? 


Hi @groupboard  I'm still with TalkTalk waiting for my go live date on BT. www.groupworld.net = Hmmm... cannot reach this page. So not just BT.

0 Ratings
Reply
groupboard
Aspiring Contributor
479 Views
Message 6 of 9

Re: BT DNS not working for certain sites

Go to solution

What DNS servers? Can you try with dig?

 

dig -t ns groupworld.net

dig @ns10.domaincontrol.com -t ns groupworld.net

dig +trace -t ns groupworld.net

0 Ratings
Reply
groupboard
Aspiring Contributor
411 Views
Message 7 of 9

Re: BT DNS not working for certain sites

Go to solution

The problem is now resolved. The issue was that our website was incorrectly flagged by an automated process as "malicious outbound data" by Fortinet and Symantec, presumably due to the WebSocket connection to our server. After requesting a reclassification by Fortinet and Symantec, it was updated within an hour on Symantec and Fortinet's systems, but the block remained on TalkTalk and BT. However after 24-48 hours the site is now working fine with both BT and TalkTalk (it takes some time for the updates to propogate to the Symantec web filter software running on BT's DNS server/firewall).

It would be more useful if BT could redirect users to a page explaining the reason for the block, rather than a generic "web site cannot be found" page.

0 Ratings
Reply
groupboard
Aspiring Contributor
268 Views
Message 8 of 9

Re: BT DNS not working for certain sites

Go to solution

The problem seems to be happening again for our BT customers....groupworld.net is not accessible to them, but other sites hosted on the same server are working, and it's working when they use a different ISP (or non-BT mobile data on the same computer). According to blocked.org.uk it's showing "dns error" for the site, which is what was happening last time. Having trouble getting any info out of BT...their customer support rep told the customer that the site was definitely on a blacklist, but wouldn't/couldn't provide more info. Previously the issue was with fortinet, but for the past 6 months the site has been classed as online meeting, and is not currently blocked there (or anywhere else that I can see).

0 Ratings
Reply
groupboard
Aspiring Contributor
200 Views
Message 9 of 9

Re: BT DNS not working for certain sites

Go to solution
0 Ratings
Reply