DNS IPv4 on port 53 not available in EU? about blocklist HOT 13 CLOSED

@PeterDaveHello, based on coutry prefix. Will you be able to test again?
Let me know if the failed rate still high.
Thanks!

from blocklist.

Better now, now about 40% tests will fail, with all due respect, it's still relevant high, compared to the other public DNS services, but that's totally up to you, if there are attacks or abuses may impact the service, maybe that's the thing needs to be done.

from blocklist.

Should we stop using it, In India DNS IPv4 on port 53 not available

from blocklist.

I just came back from a trip.

The issue should resolved now, filter was applied automatically to drop packet when there are too many tcp request to port 53/5003 to protect the system and only allow from SEA countries.

it doesn't affect other services such as DoT/DoH/DoQ etc.

sorry for the inconvenience.

from blocklist.

@pengelana yes, if I randomly pick a few hundreds of location to run the test, the fail rate is about 83%, which means a lot of locations are blocked? Not sure if the threshold should be raised, or it might be an availability or reliability issue of a public DNS 🤔

from blocklist.

There is a mechanism to prevent abuse to the port 53/5003 (Do53), so it can gives more resources to DoH/DoH3/DoT/DoQ. I increased the threshold, can you help to test again? thank you.

from blocklist.

@PeterDaveHello, I increased the threshold again, can you help to test?

from blocklist.

Success rate about 80%~90% now 👍 BTW, maybe you can find that kind of information from iptables log?

from blocklist.

Same problem in India with isp provider BSNL and Railtel "DNS IPv4 on port 53 not available" but via port 5003 costume unbound text we able to get dns service

from blocklist.

I can verified that the issue exists not only in EU, but many other places also have the connectivity issue, used hundreds of public and private hosts from different locations, the failed ratio high significant high. Just EU failed 100%.

Is there anything we can help here?

from blocklist.

@pengelana thanks for the update! Just curious do you need to manually unblock those IP addresses? Still notice that the failed rate pretty high compared to any other public resolvers listed here: https://github.com/PeterDaveHello/chkdomain

from blocklist.

@PeterDaveHello I don't have/keep logs and I don't use iptables. It is the smallest droplet serving thousand of connection/queries every second.

from blocklist.

If the loading is acceptable, maybe the threshold can be increased still, BTW, DNS using TCP seems to failed much much higher than UDP here, just FYI.

from blocklist.