Forum Discussion

adrian878787's avatar
adrian878787
Tuning in
5 months ago

DNS resolution for private subdomain failing

Hub5. No parental controls

I have an Microsoft Azure-managed domain.  I've added a new subdomain, an A-record with local IP 192.168.0.100.  The subdomain is blocked by virgin media DNS.
 
Its been > 72 hours. I can see that the DNS name is available across the globe,  e.g. https://www.nslookup.io/domains/mysubdomainname/dns-propagation/a/.   And when I'm connected to EE I can nslookup it
 
From inside the hub5 zone I get dns timeout. I've tried overriding virgin media DNS and that doesn't work.  

What is strange that I can happily access another of my subdomains via the via home broadband network (a CNAME pointing at an Azure service)
 
I'm going to be creating a few of these a-records with internal IP.

Is there an article that explains how the DNS works and how I can easily unblock these. I tried emailing websafefeedback@virginmedia.co.uk without reply.
 
Kind regards,
Adrian
  • Client62's avatar
    Client62
    Alessandro Volta

    DNS Timeout has been attributed to the Hub 5 in Router mode before. As has DNS interception.

    Try with the Connect app, is it possible to disable VM Smart Security i.e. to turn off the DNS redirection that is baked into the Hub 5 in Router mode ?   Does that help ?

    Failing this the previous posts on this topic reported that Hub 5 in Modem mode does not perform DNS Redirection and that use of a Public DNS and DoT / DoH worked OK.

    • adrian878787's avatar
      adrian878787
      Tuning in

      Thanks for the feedback. Smart security is disabled. Was trying to avoid modem mode, the hub5 has been great for us, better than my spare router

  • Tudor's avatar
    Tudor
    Very Insightful Person

    It has been known for addresses to take up to 72 hours to be propagated on VM. 

      • Gareth_L's avatar
        Gareth_L
        Forum Team

        Hello adrian878787.

        Thanks for your post and welcome to our community.

        Sorry to hear about the issues you're having with your subdomain.

        Would it be okay to ask if the fault has rectified itself now?

        Gareth_L

         

  • legacy1's avatar
    legacy1
    Alessandro Volta

    I run BIND and it blocks RFC 1918 answers unless I make a zone or ACL to allow it

    this likely has to do with Smart Security