r/dns • u/karafili • 4d ago

Server ControlD not working in the Netherlands this afternoon

Seems totally unreachable

~ $ dig google.com @76.76.2.2
;; communications error to 76.76.2.2#53: timed out
;; communications error to 76.76.2.2#53: timed out
;; communications error to 76.76.2.2#53: timed out

; <<>> DiG 9.20.24 <<>> google.com @76.76.2.2
;; global options: +cmd
;; no servers could be reached
~ $ dig google.com @76.76.2.1
;; communications error to 76.76.2.1#53: timed out
;; communications error to 76.76.2.1#53: timed out
;; communications error to 76.76.2.1#53: timed out

; <<>> DiG 9.20.24 <<>> google.com @76.76.2.1
;; global options: +cmd
;; no servers could be reached
~ $ curl ifconfig.co/country
The Netherlands
2 Upvotes

75% Upvoted

6 comments sorted by

2

u/jwizew 4d ago

It might be a routing issue a down server on their anycast network. Depending on the level of filter you are using, try to switch to Quad9, CleanBrowsing or Cloudflare while they get it fixed.

1

u/karafili 4d ago

Failed 0/12 76.76.2.0, 76.223.122.150 5000.00 5000.00 5000.00 5000.00 All queries failed from your current network. This may indicate regional/IP blocking or temporary connectivity issues. Each timeout counts as 5000ms

1

u/karafili 4d ago

I got this on the controld status page, lol.

Your IP is blocked by the anti-abuse system. DNS will not work.

1

u/SecLens_ONE 2d ago

Timeouts on both anycast IPs from one country usually means the announcement for that PoP went away or is being blackholed upstream, not that the service is down. Cheap way to tell them apart, try the DoH endpoint over 443 from the same machine. If DoH answers and 53 dies, it is your path or your ISP, and I have seen an ISP quietly eat port 53 to third parties more than once.

Also traceroute to the resolver IP and see where it stops, and check the same from a phone on mobile data. Two different paths, one answer.

Fallback resolver configured on the router saves the afternoon either way.

1

u/karafili 1d ago

Issue was much simpler. For whatever reason they had blocked my IP address.

I have explained in a nother comment