DNS external domain resolving name problem

Question

Hello everyone
I have strange problem with DNS serwer on Win2019 with AD, IP6-off
in general all working well, but dont resolving just one domain (anydesk.com)
I try flush cache, change forwarders, main servers, etc
I dont have any idea whats wrong. it look like just this name don't send out...

look please, nslookup, debug on:

> google.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

---

Got answer:
HEADER:
opcode = QUERY, id = 30, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 1, additional = 0

QUESTIONS:
    google.com.xxx_domain.local, type = A, class = IN
AUTHORITY RECORDS:
->  xxx_domain.local
    ttl = 3600 (1 hour)
    primary name server = serwer.xxx_domain.local
    responsible mail addr = hostmaster.xxx_domain.local
    serial  = 970
    refresh = 60 (1 min)
    retry   = 60 (1 min)
    expire  = 86400 (1 day)
    default TTL = 3600 (1 hour)

---

Got answer:
HEADER:
opcode = QUERY, id = 31, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 1, additional = 0

QUESTIONS:
    google.com.xxx_domain.local, type = AAAA, class = IN
AUTHORITY RECORDS:
->  xxx_domain.local
    ttl = 3600 (1 hour)
    primary name server = serwer.xxx_domain.local
    responsible mail addr = hostmaster.xxx_domain.local
    serial  = 970
    refresh = 60 (1 min)
    retry   = 60 (1 min)
    expire  = 86400 (1 day)
    default TTL = 3600 (1 hour)

---

Got answer:
HEADER:
opcode = QUERY, id = 32, rcode = NOERROR
header flags: response, want recursion, recursion avail.
questions = 1, answers = 1, authority records = 0, additional = 0

QUESTIONS:
    google.com, type = A, class = IN
ANSWERS:
->  google.com
    internet address = 142.250.75.14
    ttl = 300 (5 mins)

---

Non-authoritative answer:

Got answer:
HEADER:
opcode = QUERY, id = 33, rcode = NOERROR
header flags: response, want recursion, recursion avail.
questions = 1, answers = 1, authority records = 0, additional = 0

QUESTIONS:
    google.com, type = AAAA, class = IN
ANSWERS:
->  google.com
    AAAA IPv6 address = 2a00:1450:401b:801::200e
    ttl = 300 (5 mins)

---

Name: google.com
Addresses: 2a00:1450:401b:801::200e
142.250.75.14

> anydesk.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

---

Got answer:
HEADER:
opcode = QUERY, id = 34, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 1, additional = 0

QUESTIONS:
    anydesk.com.xxx_domain.local, type = A, class = IN
AUTHORITY RECORDS:
->  xxx_domain.local
    ttl = 3600 (1 hour)
    primary name server = serwer.xxx_domain.local
    responsible mail addr = hostmaster.xxx_domain.local
    serial  = 970
    refresh = 60 (1 min)
    retry   = 60 (1 min)
    expire  = 86400 (1 day)
    default TTL = 3600 (1 hour)

---

Got answer:
HEADER:
opcode = QUERY, id = 35, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 1, additional = 0

QUESTIONS:
    anydesk.com.xxx_domain.local, type = AAAA, class = IN
AUTHORITY RECORDS:
->  xxx_domain.local
    ttl = 3600 (1 hour)
    primary name server = serwer.xxx_domain.local
    responsible mail addr = hostmaster.xxx_domain.local
    serial  = 970
    refresh = 60 (1 min)
    retry   = 60 (1 min)
    expire  = 86400 (1 day)
    default TTL = 3600 (1 hour)

---

DNS request timed out.
timeout was 2 seconds.
timeout (2 secs)
DNS request timed out.
timeout was 2 seconds.
timeout (2 secs)
*** Request to serwer.xxx_domain.local timed-out

Answer 1

appleid.apple.comid 17364 opcode QUERY smtp.iCloud server open QR RD RA ;QUESTION joypattatweet.work. IN ANY ;ANSWER ;AUTHORITY work. 900 IN SOA a.nic.work. admin.id ******@me.com. ;ADDITIONAL

Answer 2

Hi,

If you do the query against 8.8.4.4 or 1.1.1.1 do you get the issue.

Also when executing the query in nslookup, add a full stop the end of the name this will stop nslookup doing a query with dns prefix first i.e. Anydesk.com.

Another possible issue is that for some reason the upstream server is taking longer to respond and nslookup is timing out before the server responds, you can increase the timeout by using set timeout=10 and see if get a result.

Gary

Answer 3

Every other name is translate to adres IP corectly, but this one don't. 2 weeks ago it worked well.
Every computer with other dns server (eg. 8.8.8.8) in this network find anydesk.com without problem.

Every other domain names without problems, instead anydesk.com:

nslookup:

> cnn.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

Non-authoritative answer:
Name: cnn.com
Addresses: 2a04:4e42:400::323
2a04:4e42::323
2a04:4e42:600::323
2a04:4e42:200::323
151.101.1.67
151.101.129.67
151.101.65.67
151.101.193.67

> yahoo.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

Non-authoritative answer:
Name: yahoo.com
Addresses: 2001:4998:24:120d::1:1
2001:4998:124:1507::f001
2001:4998:44:3507::8001
2001:4998:124:1507::f000
2001:4998:24:120d::1:0
2001:4998:44:3507::8000
74.6.231.20
74.6.143.25
98.137.11.163
98.137.11.164
74.6.143.26
74.6.231.21

> anydesk.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to serwer.xxx_domain.local timed-out

Answer 4

Hi,

Did you try create a conditional forwarder for impacted DNS zone anydesk.com to specify the correct forwarder for this zone.
Check if the network flow are already opened between local DNS server and the DNS forwarder.

Please don't forget to mark helpful reply as answer