Dev1 Galaxy Forum / dns error on certain webpages

Re: dns error on certain webpages

dummy@example.com (amc252) — Tue, 08 Nov 2022 18:17:17 +0000

It seems odd that two separate browsers all of a sudden would present the same error (without having been upgraded). Of course, they are both based on Qtwebengine, so that might be a clue.
Yet, if both Qutebrowser and Falkon had problems displaying a page like Distrowatch, I'd think someone would have already noticed.
I'm, still inclined to think I messed something up somehow.

Re: dns error on certain webpages

dummy@example.com (xinomilo) — Tue, 08 Nov 2022 11:03:19 +0000

so dns looks fine now and it's just a browser problem. better send a bug report in those browser projects.

Re: dns error on certain webpages

dummy@example.com (amc252) — Tue, 08 Nov 2022 01:18:35 +0000

Hi,
thanks for the feedback.

I spoke to my my internet provider who made a reconfiguration of my modem.
Now I can access lists.alpinelinux.org, but I still get an error on distrowatch. (Bad Request
Your browser sent a request that this server could not understand.) on Qutebrowser and Falkon, but it works fine on Waterfox.

$ ping distrowatch.com
PING distrowatch.com(2a00:9080:1:58a::1) 56 data bytes
64 bytes from 2a00:9080:1:58a::1: icmp_seq=1 ttl=48 time=175 ms

$ dig distrowatch.com @8.8.8.8

; <<>> DiG 9.18.4-2~bpo11+1-Debian <<>> distrowatch.com @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53423
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;distrowatch.com.		IN	A

;; ANSWER SECTION:
distrowatch.com.	10144	IN	A	82.103.129.71

;; Query time: 11 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Mon Nov 07 17:09:34 PST 2022
;; MSG SIZE  rcvd: 60

This is my default nameserver

$ dig distrowatch.com @192.168.1.254

; <<>> DiG 9.18.4-2~bpo11+1-Debian <<>> distrowatch.com @192.168.1.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28168
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;distrowatch.com.		IN	A

;; ANSWER SECTION:
distrowatch.com.	9457	IN	A	82.103.129.71

;; Query time: 8 msec
;; SERVER: 192.168.1.254#53(192.168.1.254) (UDP)
;; WHEN: Mon Nov 07 17:14:17 PST 2022
;; MSG SIZE  rcvd: 49

$ delv https://distrowatch.com/
;;   validating ./SOA: got insecure response; parent indicates it should be secure
;;   validating ./SOA: got insecure response; parent indicates it should be secure
;; no valid RRSIG resolving 'com//DS/IN': 192.168.1.254#53
;; broken trust chain resolving 'https://distrowatch.com//A/IN': 192.168.1.254#53
;; resolution failed: broken trust chain

Re: dns error on certain webpages

dummy@example.com (Head_on_a_Stick) — Mon, 07 Nov 2022 15:13:21 +0000

amc252 wrote:

On Devuan dhclient is already there, so I tried to append the 'prepend domain-name-servers 8.8.8.8, 8.8.4.4;' line but to no effect.

What does "no effect" mean, exactly? Are you sure Devuan is using dhclient? Did you try disabling it and populating /etc/resolv.conf manually instead?

If accessing Google's DNS directly fixes your problem then the problem probably lies with the router or ISP, as xinomilo notes.

Re: dns error on certain webpages

dummy@example.com (xinomilo) — Mon, 07 Nov 2022 11:04:44 +0000

dig and ping only work for domain names, not HTTP urls...

so try :
dig lists.alpinelinux.org
ping lists.alpinelinux.org
dig distrowatch.com
ping distrowatch.com
etc...

you can also try
dig distrowatch.com @8.8.8.8
and post output here...

nothing seems wrong above.. curl which works with urls seems to work just fine. an "output a mile wrong" probably seems correct...
your `curl https://lists.alpinelinux.org` shows 404 (works fine here), which mean it resolves succesfully, but didn't find the resource..

in general i would say you're experiencing network issues. or clock is failing, or something was manually changed in /etc/hosts or local resolver or router or isp or....

dns error on certain webpages

dummy@example.com (amc252) — Sun, 06 Nov 2022 22:17:24 +0000

Hi,

today I got a strange issue on my Devuan Chimaera box which I had encountered and solved on Alpine a few weeks ago.

On qutebrowser and Falkon, when I go the the page https://lists.alpinelinux.org/ I get a '404 Not Found nginx' error.
I also get an error on https://distrowatch.com/ 'Bad Request Your browser sent a request that this server could not understand.'
On waterfox, distrowatch works fine but lists.alpinelinux.org doesn't.
On Dillo, both lists.alpinelinux.org and distrowatch.com work fine.

Now, on Alpine, I solved the problem by installing dhclient and creating the file /etc/dhcp/dhclient.conf with the code:

option rfc3442-classless-static-routes code 121 = array of unsigned integer 8;

send host-name = gethostname();
request subnet-mask, broadcast-address, time-offset, routers,
	domain-name, domain-name-servers, domain-search, host-name,
	dhcp6.name-servers, dhcp6.domain-search, dhcp6.fqdn, dhcp6.sntp-servers,
	netbios-name-servers, netbios-scope, interface-mtu,
	rfc3442-classless-static-routes, ntp-servers;
	
prepend domain-name-servers 8.8.8.8, 8.8.4.4;

On Devuan dhclient is already there, so I tried to append the 'prepend domain-name-servers 8.8.8.8, 8.8.4.4;' line but to no effect.
Note that at the time, on Devuan the pages giving me errors worked fine. Except for an update/upgrade, I didn't change anything.

So, here what I have tried so far:

I tried on another Chimaera fresh install on my laptop = same error
I tried from Daedalus live cd with Firefox = same error
I tried from Slitaz frugal with tazweb = pages work fine

Here some more output:

alpine linux list page

dig https://lists.alpinelinux.org/lists

; <<>> DiG 9.18.4-2~bpo11+1-Debian <<>> https://lists.alpinelinux.org/lists
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3831
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;https://lists.alpinelinux.org/lists. IN	A

;; AUTHORITY SECTION:
.			86398	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022110601 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Sun Nov 06 13:18:37 PST 2022
;; MSG SIZE  rcvd: 139

$ delv https://lists.alpinelinux.org/
;; validating ./DNSKEY: got insecure response; parent indicates it should be secure
;; insecurity proof failed resolving './DNSKEY/IN': 192.168.1.254#53
;; resolution failed: ncache nxdomain
; negative response, fully validated
; https://lists.alpinelinux.org/.	10800 IN \-ANY	;-$NXDOMAIN
; . SOA a.root-servers.net. nstld.verisign-grs.com. 2022110601 1800 900 604800 86400
; . RRSIG SOA ...
; . RRSIG NSEC ...
; . NSEC aaa. NS SOA RRSIG NSEC DNSKEY
; org. RRSIG NSEC ...
; org. NSEC organic. NS DS RRSIG NSEC

$ delv https://lists.alpinelinux.org/
;;   validating ./SOA: got insecure response; parent indicates it should be secure
;;   validating ./SOA: got insecure response; parent indicates it should be secure
;; no valid RRSIG resolving 'org//DS/IN': 192.168.1.254#53
;; broken trust chain resolving 'https://lists.alpinelinux.org//A/IN': 192.168.1.254#53
;; resolution failed: broken trust chain

$ curl https://lists.alpinelinux.org/

404 Not Found

404 Not Found
nginx

$ ping https://lists.alpinelinux.org/
ping: https://lists.alpinelinux.org/: Name or service not known

alpine linux website

$ ping alpinelinux.org
PING alpinelinux.org(2604:1380:2002:4001::4 (2604:1380:2002:4001::4)) 56 data bytes
64 bytes from 2604:1380:2002:4001::4 (2604:1380:2002:4001::4): icmp_seq=1 ttl=47 time=170 ms

$ curl https://alpinelinux.org/


    
        
        
        
        index | Alpine Linux

        
        
        
        
        
    
    
        
            
                
                    
                        
                    
                
                
                
                
                    
                        
                            About
                            Downloads
                            Releases
                            Community
                            Sponsors
                        
                    
                    
                        
                            docs
                            wiki
                            git
                            issues
                            packages
                            mirrors
                            security
                        
                    
                
            
            
                
                    Small. Simple. Secure.
                    Alpine Linux is a security-oriented, lightweight Linux distribution based on musl libc and busybox.
                
            
            
                
                    
                
                
   
    
        
            
                
                Alpine News
            
            
                2022-08-09  Alpine 3.13.12, 3.14.8, 3.15.6 and 3.16.2 released
                2022-07-19  Alpine 3.13.11, 3.14.7 and 3.15.5 released
                2022-07-18  Alpine 3.16.1 released
                2022-07-14  Alpine Linux edge signing keys rotated
                2022-05-23  Alpine 3.16.0 released
                2022-04-04  Alpine 3.12.12, 3.13.10, 3.14.6 and 3.15.4 released
                2022-03-28  Alpine 3.12.11, 3.13.9, 3.14.5 and 3.15.3 released
                2022-03-23  Alpine 3.15.2 released
                2022-03-17  Alpine 3.12.10, 3.13.8 and 3.14.4 released
                2022-03-16  Alpine 3.15.1 released
            
            Read more
        

    

    
        
            
                
                    
                
                Latest development
            
            
                2022-11-06  testing/php7-pecl-igbinary: upgrade to 3.2.11
                2022-11-06  testing/php8-pecl-igbinary: upgrade to 3.2.11
                2022-11-06  testing/php82-pecl-igbinary: upgrade to 3.2.11
                2022-11-06  community/php81-pecl-igbinary: upgrade to 3.2.11
                2022-11-06  community/php81-pecl-igbinary: upgrade to 3.2.10
                2022-11-06  testing/php82-pecl-igbinary: upgrade to 3.2.10
                2022-11-06  testing/php8-pecl-igbinary: upgrade to 3.2.10
                2022-11-06  testing/php7-pecl-igbinary: upgrade to 3.2.10
                2022-11-06  community/zabbix: upgrade to 6.2.4
                2022-11-06  community/py3-platformdirs: upgrade to 2.5.3
            
            Read more
        
    

 

            
 
            © Copyright 2022 Alpine Linux Development Team all rights reserved | Privacy Policy

distrowatch

$ dig https://distrowatch.com/

; <<>> DiG 9.18.4-2~bpo11+1-Debian <<>> https://distrowatch.com/
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29820
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;https://distrowatch.com/.	IN	A

;; AUTHORITY SECTION:
.			86383	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022110601 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Sun Nov 06 14:29:46 PST 2022
;; MSG SIZE  rcvd: 128

$ delv https://distrowatch.com/
;;   validating ./SOA: got insecure response; parent indicates it should be secure
;; insecurity proof failed resolving 'https://distrowatch.com//A/IN': 192.168.1.254#53
;; resolution failed: ncache nxdomain
; negative response, fully validated
; https://distrowatch.com/. 10800	IN	\-ANY	;-$NXDOMAIN
; . SOA a.root-servers.net. nstld.verisign-grs.com. 2022110601 1800 900 604800 86400
; . RRSIG SOA ...
; . RRSIG NSEC ...
; . NSEC aaa. NS SOA RRSIG NSEC DNSKEY
; com. RRSIG NSEC ...
; com. NSEC comcast. NS DS RRSIG NSEC

curl gave me an output a mile long.

$ ping https://distrowatch.com/
ping: https://distrowatch.com/: Name or service not known

Any suggestions as to what I could do?