ER605 Blocking Direct Queries to Root Zone? (DNS)

ER605 Blocking Direct Queries to Root Zone? (DNS)

ER605 Blocking Direct Queries to Root Zone? (DNS)
ER605 Blocking Direct Queries to Root Zone? (DNS)
Yesterday
Tags: #DNS
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.2.6

Hello,

 

I have noticed that my ER605 v2 router might be blocking or interfering with direct DNS queries for the Root Zone (.), as I consistently receive timeout responses, regardless of the client I use or the DNS server query.

 

yes Regular domain queries (e.g. google.com) work fine.

no Queries for the Root Zone ( . ) always time out.

 

I´d like to ask if anybody else is experiencing the same issue. You can reproduce it by running the following command in CMD/Powershell on a Windows client:
nslookup -type=NS . 1.1.1.1

 

Expected behavior: The DNS resolver should return the 13 authoritative root name servers.

 

Here´s my result:

nslookup

 

When querying a domain like google.com, everything works as expected::

nslookup google.com

 

This problem is especially frustrating when running an own Unbound resolver, since it relies on direct queries to the root name servers to function properly.

 

Has anyone else encountered this issue? Is this a known limitation or maybe a bug?

 

Thanks!

  0      
  0      
#1
Options
1 Reply
Re:ER605 Blocking Direct Queries to Root Zone? (DNS)
12 hours ago

Hi @knallex 

Thanks for posting in our business forum.

I tested one of the models available for me. ER7206 V2 with the latest pre-release firmware.

I also tried one ER605 V1. I can resolve the root servers as well.

Have you tried different computers?

 

(ER7206 V2)

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#2
Options