I am facing a weird DNS issue. I am connecting via PPPoE to my ISP and instead of using their DNS I am using opendns (attached). However, the DNS proxy seems to be trying to resolve via other dns servers
2013:08:21-00:17:23 ****** named[974]: error (unexpected RCODE REFUSED) resolving '67.10.203.183.in-addr.arpa/PTR/IN': 211.136.20.201#53
2013:08:21-00:17:23 ****** named[974]: error (unexpected RCODE REFUSED) resolving '67.10.203.183.in-addr.arpa/PTR/IN': 211.136.17.105#53
2013:08:21-00:32:19 ****** named[974]: error (unexpected RCODE REFUSED) resolving '67.10.203.183.in-addr.arpa/PTR/IN': 211.136.20.201#53
2013:08:21-00:32:19 ****** named[974]: error (unexpected RCODE REFUSED) resolving '67.10.203.183.in-addr.arpa/PTR/IN': 211.136.17.105#53
2013:08:21-00:47:27 ****** named[974]: error (unexpected RCODE REFUSED) resolving '67.10.203.183.in-addr.arpa/PTR/IN': 211.136.17.105#53
2013:08:21-00:47:28 ****** named[974]: error (unexpected RCODE REFUSED) resolving '67.10.203.183.in-addr.arpa/PTR/IN': 211.136.20.201#53
2013:08:21-01:02:31 ****** named[974]: error (unexpected RCODE REFUSED) resolving '67.10.203.183.in-addr.arpa/PTR/IN': 211.136.17.105#53
2013:08:21-01:02:31 ****** named[974]: error (unexpected RCODE REFUSED) resolving '67.10.203.183.in-addr.arpa/PTR/IN': 211.136.20.201#53
DNS above are:
ns.cnmobile.net (211.136.17.105)
ns2.cnmobile.net (211.136.20.201)
Also I can't find host "183.203.10.67" defined anywhere on my UTM (183.203.10.67 is in china -db-ip.com/183.203.10.67)
I am also getting the relevant messages in the System log which I guess is because of the errors above
2013:08:21-00:18:22 ****** dns-resolver[4234]: DNS server failed to contact!
2013:08:21-00:19:03 ****** dns-resolver[4234]: DNS server failed to contact!
performing a iftop I can't see any strange DNS request to port 53 (internally they all go to my UTM as they should have).
filter I am using is: iftop -i ethx -n -P -f "dst port 53 || src port 53"
This thread was automatically locked due to age.