[GTER] Time out no domínimo poupatempo.sp.gov.br

Pedro Guizeline pedro at guizeline.com
Thu Feb 23 13:44:27 -03 2023


Olá

Eu mantenho alguns servidores recursivos de DNS, hospedados em VPSs na
Hetzner, respectivamente nos EUA e na Alemanha, utilizando dnsdist +
PowerDNS Recursor, notei que queries para o domínio "poupatempo.sp.gov.br"
sofrem time out, de acordo com o log abaixo:

##
pguizeline at dns:~$ dig +trace @127.0.0.1 -p 5053 poupatempo.sp.gov.br

; <<>> DiG 9.16.37-Debian <<>> +trace @127.0.0.1 -p 5053
poupatempo.sp.gov.br
; (1 server found)
;; global options: +cmd
.                       85003   IN      NS      d.root-servers.net.
.                       85003   IN      NS      b.root-servers.net.
.                       85003   IN      NS      i.root-servers.net.
.                       85003   IN      NS      j.root-servers.net.
.                       85003   IN      NS      c.root-servers.net.
.                       85003   IN      NS      e.root-servers.net.
.                       85003   IN      NS      m.root-servers.net.
.                       85003   IN      NS      k.root-servers.net.
.                       85003   IN      NS      g.root-servers.net.
.                       85003   IN      NS      f.root-servers.net.
.                       85003   IN      NS      l.root-servers.net.
.                       85003   IN      NS      h.root-servers.net.
.                       85003   IN      NS      a.root-servers.net.
.                       85003   IN      RRSIG   NS 8 0 518400
20230308050000 20230223040000 951 .
gYpGnWJim88jzPX9TbTk1x0+bDUWg6FI4Qcbfzl4wO/NeyF7Sbayjm7O
oV2wQzlacKQm8F+8GChw1Tj/mkAbxCcR75zFrD+a7GBLVlj7X2voRvrY
WqxZEUGe37bfcncWvgWjzknfxMw5d3FjV7jr8fpU5kWT6mcMlYpPKz+T
N7B76550Vv0HIN3N8QnpYSy4z9M1WctCWe95XGOW8Oy2NUAN1BjjeJWJ
mjAwZmsePOAOAmpATzIXd1cXJ1Wmb1P1kQP7ewDRpfctA+zFEyofhoAf
eWsV7xTs/7UFFTstKNiLjcYb2l9zEG79JOGMl3bGQ1/Qaq4nFCuOU6Ut 2XyZKg==
;; Received 525 bytes from 127.0.0.1#5053(127.0.0.1) in 4 ms

;; connection timed out; no servers could be reached
##

Executando o mesmo lookup, mas utilizando o Cloudflare/Google/Quad9
resultam em time out também:

##
pguizeline at dns:~$ dig +trace @1.1.1.1 poupatempo.sp.gov.br

; <<>> DiG 9.16.37-Debian <<>> +trace @1.1.1.1 poupatempo.sp.gov.br
; (1 server found)
;; global options: +cmd
.                       516106  IN      NS      a.root-servers.net.
.                       516106  IN      NS      b.root-servers.net.
.                       516106  IN      NS      c.root-servers.net.
.                       516106  IN      NS      d.root-servers.net.
.                       516106  IN      NS      e.root-servers.net.
.                       516106  IN      NS      f.root-servers.net.
.                       516106  IN      NS      g.root-servers.net.
.                       516106  IN      NS      h.root-servers.net.
.                       516106  IN      NS      i.root-servers.net.
.                       516106  IN      NS      j.root-servers.net.
.                       516106  IN      NS      k.root-servers.net.
.                       516106  IN      NS      l.root-servers.net.
.                       516106  IN      NS      m.root-servers.net.
.                       516106  IN      RRSIG   NS 8 0 518400
20230308050000 20230223040000 951 .
gYpGnWJim88jzPX9TbTk1x0+bDUWg6FI4Qcbfzl4wO/NeyF7Sbayjm7O
oV2wQzlacKQm8F+8GChw1Tj/mkAbxCcR75zFrD+a7GBLVlj7X2voRvrY
WqxZEUGe37bfcncWvgWjzknfxMw5d3FjV7jr8fpU5kWT6mcMlYpPKz+T
N7B76550Vv0HIN3N8QnpYSy4z9M1WctCWe95XGOW8Oy2NUAN1BjjeJWJ
mjAwZmsePOAOAmpATzIXd1cXJ1Wmb1P1kQP7ewDRpfctA+zFEyofhoAf
eWsV7xTs/7UFFTstKNiLjcYb2l9zEG79JOGMl3bGQ1/Qaq4nFCuOU6Ut 2XyZKg==
;; Received 1097 bytes from 1.1.1.1#53(1.1.1.1) in 0 ms

br.                     172800  IN      NS      e.dns.br.
br.                     172800  IN      NS      c.dns.br.
br.                     172800  IN      NS      b.dns.br.
br.                     172800  IN      NS      a.dns.br.
br.                     172800  IN      NS      d.dns.br.
br.                     172800  IN      NS      f.dns.br.
br.                     86400   IN      DS      2471 13 2
5E4F35998B8F909557FA119C4CBFDCA2D660A26F069EF006B403758A 07D1A2E4
br.                     86400   IN      RRSIG   DS 8 1 86400 20230308050000
20230223040000 951 .
mc+pk/dCjgv+oKXRplTSwLIfgIaOWaLOk0r4c18cP46hx1J+kr9KC+oL
LzNIYKKyINkxpyW17Pih734Ev+vGdYwobxtvizZp+oevRG2e+ZnYN4DO
rHdATz5iToWu0DFh7qWqi0sg/IyaRPaPx3BQXiE/NbQYVl/RgiMTqowd
ObzT2ZTjM0OfYQYc086ZoZNb6w3j+eWbptJRbLq2nw8cGD0u0uGB/JmU
OFKawNraDjbiOENAf4FgDkMRPjmuIPGqJn+BscRhNlwhblz7UEWGjWSV
dDWlJ5AXcfKCc1lZNYCKNN/Knhwiz+xPhBnxTLHw5GgEVUuifngwuWV7 dMYmeA==
;; Received 752 bytes from 202.12.27.33#53(m.root-servers.net) in 64 ms

sp.gov.br.              3600    IN      NS      dns3e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns2e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns1e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns4e.sp.gov.br.
sp.gov.br.              900     IN      NSEC    sp-trt.gov.br. NS RRSIG NSEC
sp.gov.br.              900     IN      RRSIG   NSEC 13 3 900
20230309120517 20230223110517 52092 gov.br.
zME/zTJ7jcAqSn/es9WWRQQ3pkA7BrZZeGatkxXTPX5g8cR7rI5LmNCM
GzzaMBCJMdi/MaKbIfGt//R9YMSECw==
;; Received 358 bytes from 2001:12f8:2::10#53(e.dns.br) in 92 ms

;; connection timed out; no servers could be reached

pguizeline at dns:~$ dig +trace @8.8.8.8 poupatempo.sp.gov.br

; <<>> DiG 9.16.37-Debian <<>> +trace @8.8.8.8 poupatempo.sp.gov.br
; (1 server found)
;; global options: +cmd
.                       19710   IN      NS      a.root-servers.net.
.                       19710   IN      NS      b.root-servers.net.
.                       19710   IN      NS      c.root-servers.net.
.                       19710   IN      NS      d.root-servers.net.
.                       19710   IN      NS      e.root-servers.net.
.                       19710   IN      NS      f.root-servers.net.
.                       19710   IN      NS      g.root-servers.net.
.                       19710   IN      NS      h.root-servers.net.
.                       19710   IN      NS      i.root-servers.net.
.                       19710   IN      NS      j.root-servers.net.
.                       19710   IN      NS      k.root-servers.net.
.                       19710   IN      NS      l.root-servers.net.
.                       19710   IN      NS      m.root-servers.net.
.                       19710   IN      RRSIG   NS 8 0 518400
20230307170000 20230222160000 951 .
WPAo8m21x+zlmtCSbV6JH3t703Ub6TcGpMZ25PlM4tWQ4CY0HbIpS3FB
md93466B9SPrxh6CojxoqzGXwH3Ajdo7C41ef2fnDF4pb0e/BgRgsO4X
6vf81sRzta2fR4/OKLXaRw96dw5kqhk+84DTdP+rR9M6z5b0WncFp6wG
tyoZGPWx/AuxI4K2JYxvM9qPFfFgXN/loxp7a2+UVBP7FBivCrRXxYFt
V2RRPFllJRhot1ulSE2NITTWpRAeIOxaPcOH/6p3SSuEWqsFEI7yKQbg
yPNZDiytpc5cdS/eECm/whwLRzU0eksDJCiM6hi7tiImDrAczov60okp Q7WeGg==
;; Received 525 bytes from 8.8.8.8#53(8.8.8.8) in 4 ms

br.                     172800  IN      NS      a.dns.br.
br.                     172800  IN      NS      b.dns.br.
br.                     172800  IN      NS      c.dns.br.
br.                     172800  IN      NS      d.dns.br.
br.                     172800  IN      NS      e.dns.br.
br.                     172800  IN      NS      f.dns.br.
br.                     86400   IN      DS      2471 13 2
5E4F35998B8F909557FA119C4CBFDCA2D660A26F069EF006B403758A 07D1A2E4
br.                     86400   IN      RRSIG   DS 8 1 86400 20230308050000
20230223040000 951 .
mc+pk/dCjgv+oKXRplTSwLIfgIaOWaLOk0r4c18cP46hx1J+kr9KC+oL
LzNIYKKyINkxpyW17Pih734Ev+vGdYwobxtvizZp+oevRG2e+ZnYN4DO
rHdATz5iToWu0DFh7qWqi0sg/IyaRPaPx3BQXiE/NbQYVl/RgiMTqowd
ObzT2ZTjM0OfYQYc086ZoZNb6w3j+eWbptJRbLq2nw8cGD0u0uGB/JmU
OFKawNraDjbiOENAf4FgDkMRPjmuIPGqJn+BscRhNlwhblz7UEWGjWSV
dDWlJ5AXcfKCc1lZNYCKNN/Knhwiz+xPhBnxTLHw5GgEVUuifngwuWV7 dMYmeA==
;; Received 776 bytes from 2001:500:200::b#53(b.root-servers.net) in 0 ms

sp.gov.br.              3600    IN      NS      dns3e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns1e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns2e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns4e.sp.gov.br.
sp.gov.br.              900     IN      NSEC    sp-trt.gov.br. NS RRSIG NSEC
sp.gov.br.              900     IN      RRSIG   NSEC 13 3 900
20230309120517 20230223110517 52092 gov.br.
zME/zTJ7jcAqSn/es9WWRQQ3pkA7BrZZeGatkxXTPX5g8cR7rI5LmNCM
GzzaMBCJMdi/MaKbIfGt//R9YMSECw==
;; Received 358 bytes from 2001:12f8:c::10#53(f.dns.br) in 184 ms

;; connection timed out; no servers could be reached

pguizeline at dns:~$ dig +trace @9.9.9.9 poupatempo.sp.gov.br

; <<>> DiG 9.16.37-Debian <<>> +trace @9.9.9.9 poupatempo.sp.gov.br
; (1 server found)
;; global options: +cmd
.                       42528   IN      NS      c.root-servers.net.
.                       42528   IN      NS      j.root-servers.net.
.                       42528   IN      NS      a.root-servers.net.
.                       42528   IN      NS      f.root-servers.net.
.                       42528   IN      NS      d.root-servers.net.
.                       42528   IN      NS      k.root-servers.net.
.                       42528   IN      NS      h.root-servers.net.
.                       42528   IN      NS      b.root-servers.net.
.                       42528   IN      NS      i.root-servers.net.
.                       42528   IN      NS      e.root-servers.net.
.                       42528   IN      NS      l.root-servers.net.
.                       42528   IN      NS      g.root-servers.net.
.                       42528   IN      NS      m.root-servers.net.
.                       42528   IN      RRSIG   NS 8 0 518400
20230308050000 20230223040000 951 .
gYpGnWJim88jzPX9TbTk1x0+bDUWg6FI4Qcbfzl4wO/NeyF7Sbayjm7O
oV2wQzlacKQm8F+8GChw1Tj/mkAbxCcR75zFrD+a7GBLVlj7X2voRvrY
WqxZEUGe37bfcncWvgWjzknfxMw5d3FjV7jr8fpU5kWT6mcMlYpPKz+T
N7B76550Vv0HIN3N8QnpYSy4z9M1WctCWe95XGOW8Oy2NUAN1BjjeJWJ
mjAwZmsePOAOAmpATzIXd1cXJ1Wmb1P1kQP7ewDRpfctA+zFEyofhoAf
eWsV7xTs/7UFFTstKNiLjcYb2l9zEG79JOGMl3bGQ1/Qaq4nFCuOU6Ut 2XyZKg==
;; Received 525 bytes from 9.9.9.9#53(9.9.9.9) in 28 ms

br.                     172800  IN      NS      a.dns.br.
br.                     172800  IN      NS      b.dns.br.
br.                     172800  IN      NS      c.dns.br.
br.                     172800  IN      NS      d.dns.br.
br.                     172800  IN      NS      e.dns.br.
br.                     172800  IN      NS      f.dns.br.
br.                     86400   IN      DS      2471 13 2
5E4F35998B8F909557FA119C4CBFDCA2D660A26F069EF006B403758A 07D1A2E4
br.                     86400   IN      RRSIG   DS 8 1 86400 20230308050000
20230223040000 951 .
mc+pk/dCjgv+oKXRplTSwLIfgIaOWaLOk0r4c18cP46hx1J+kr9KC+oL
LzNIYKKyINkxpyW17Pih734Ev+vGdYwobxtvizZp+oevRG2e+ZnYN4DO
rHdATz5iToWu0DFh7qWqi0sg/IyaRPaPx3BQXiE/NbQYVl/RgiMTqowd
ObzT2ZTjM0OfYQYc086ZoZNb6w3j+eWbptJRbLq2nw8cGD0u0uGB/JmU
OFKawNraDjbiOENAf4FgDkMRPjmuIPGqJn+BscRhNlwhblz7UEWGjWSV
dDWlJ5AXcfKCc1lZNYCKNN/Knhwiz+xPhBnxTLHw5GgEVUuifngwuWV7 dMYmeA==
;; Received 748 bytes from 198.41.0.4#53(a.root-servers.net) in 28 ms

sp.gov.br.              3600    IN      NS      dns1e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns3e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns4e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns2e.sp.gov.br.
sp.gov.br.              900     IN      NSEC    sp-trt.gov.br. NS RRSIG NSEC
sp.gov.br.              900     IN      RRSIG   NSEC 13 3 900
20230309120517 20230223110517 52092 gov.br.
zME/zTJ7jcAqSn/es9WWRQQ3pkA7BrZZeGatkxXTPX5g8cR7rI5LmNCM
GzzaMBCJMdi/MaKbIfGt//R9YMSECw==
;; Received 358 bytes from 200.219.154.10#53(d.dns.br) in 64 ms

;; connection timed out; no servers could be reached
##

Agora, tentando do meu roteador em minha residência, eu obtenho resultados
diferentes:

##
pguizeline at ssdd:~$ dig +trace @1.1.1.1 poupatempo.sp.gov.br

; <<>> DiG 9.16.37-Debian <<>> +trace @1.1.1.1 poupatempo.sp.gov.br
; (1 server found)
;; global options: +cmd
.                       510913  IN      NS      a.root-servers.net.
.                       510913  IN      NS      b.root-servers.net.
.                       510913  IN      NS      c.root-servers.net.
.                       510913  IN      NS      d.root-servers.net.
.                       510913  IN      NS      e.root-servers.net.
.                       510913  IN      NS      f.root-servers.net.
.                       510913  IN      NS      g.root-servers.net.
.                       510913  IN      NS      h.root-servers.net.
.                       510913  IN      NS      i.root-servers.net.
.                       510913  IN      NS      j.root-servers.net.
.                       510913  IN      NS      k.root-servers.net.
.                       510913  IN      NS      l.root-servers.net.
.                       510913  IN      NS      m.root-servers.net.
.                       510913  IN      RRSIG   NS 8 0 518400
20230308050000 20230223040000 951 .
gYpGnWJim88jzPX9TbTk1x0+bDUWg6FI4Qcbfzl4wO/NeyF7Sbayjm7O
oV2wQzlacKQm8F+8GChw1Tj/mkAbxCcR75zFrD+a7GBLVlj7X2voRvrY
WqxZEUGe37bfcncWvgWjzknfxMw5d3FjV7jr8fpU5kWT6mcMlYpPKz+T
N7B76550Vv0HIN3N8QnpYSy4z9M1WctCWe95XGOW8Oy2NUAN1BjjeJWJ
mjAwZmsePOAOAmpATzIXd1cXJ1Wmb1P1kQP7ewDRpfctA+zFEyofhoAf
eWsV7xTs/7UFFTstKNiLjcYb2l9zEG79JOGMl3bGQ1/Qaq4nFCuOU6Ut 2XyZKg==
;; Received 1097 bytes from 1.1.1.1#53(1.1.1.1) in 8 ms

br.                     172800  IN      NS      a.dns.br.
br.                     172800  IN      NS      b.dns.br.
br.                     172800  IN      NS      c.dns.br.
br.                     172800  IN      NS      d.dns.br.
br.                     172800  IN      NS      e.dns.br.
br.                     172800  IN      NS      f.dns.br.
br.                     86400   IN      DS      2471 13 2
5E4F35998B8F909557FA119C4CBFDCA2D660A26F069EF006B403758A 07D1A2E4
br.                     86400   IN      RRSIG   DS 8 1 86400 20230308050000
20230223040000 951 .
mc+pk/dCjgv+oKXRplTSwLIfgIaOWaLOk0r4c18cP46hx1J+kr9KC+oL
LzNIYKKyINkxpyW17Pih734Ev+vGdYwobxtvizZp+oevRG2e+ZnYN4DO
rHdATz5iToWu0DFh7qWqi0sg/IyaRPaPx3BQXiE/NbQYVl/RgiMTqowd
ObzT2ZTjM0OfYQYc086ZoZNb6w3j+eWbptJRbLq2nw8cGD0u0uGB/JmU
OFKawNraDjbiOENAf4FgDkMRPjmuIPGqJn+BscRhNlwhblz7UEWGjWSV
dDWlJ5AXcfKCc1lZNYCKNN/Knhwiz+xPhBnxTLHw5GgEVUuifngwuWV7 dMYmeA==
;; Received 748 bytes from 198.97.190.53#53(h.root-servers.net) in 132 ms

sp.gov.br.              3600    IN      NS      dns1e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns3e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns4e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns2e.sp.gov.br.
sp.gov.br.              900     IN      NSEC    sp-trt.gov.br. NS RRSIG NSEC
sp.gov.br.              900     IN      RRSIG   NSEC 13 3 900
20230309120517 20230223110517 52092 gov.br.
zME/zTJ7jcAqSn/es9WWRQQ3pkA7BrZZeGatkxXTPX5g8cR7rI5LmNCM
GzzaMBCJMdi/MaKbIfGt//R9YMSECw==
;; Received 358 bytes from 200.192.233.10#53(c.dns.br) in 52 ms

poupatempo.sp.gov.br.   300     IN      A       201.55.8.230
poupatempo.sp.gov.br.   86400   IN      NS      dns1e.sp.gov.br.
poupatempo.sp.gov.br.   86400   IN      NS      dns3e.sp.gov.br.
poupatempo.sp.gov.br.   86400   IN      NS      dns2e.sp.gov.br.
poupatempo.sp.gov.br.   86400   IN      NS      dns4e.sp.gov.br.
;; Received 173 bytes from 201.55.16.39#53(dns2e.sp.gov.br) in 4 ms

pguizeline at ssdd:~$ dig +trace @8.8.8.8 poupatempo.sp.gov.br

; <<>> DiG 9.16.37-Debian <<>> +trace @8.8.8.8 poupatempo.sp.gov.br
; (1 server found)
;; global options: +cmd
.                       8877    IN      NS      a.root-servers.net.
.                       8877    IN      NS      b.root-servers.net.
.                       8877    IN      NS      c.root-servers.net.
.                       8877    IN      NS      d.root-servers.net.
.                       8877    IN      NS      e.root-servers.net.
.                       8877    IN      NS      f.root-servers.net.
.                       8877    IN      NS      g.root-servers.net.
.                       8877    IN      NS      h.root-servers.net.
.                       8877    IN      NS      i.root-servers.net.
.                       8877    IN      NS      j.root-servers.net.
.                       8877    IN      NS      k.root-servers.net.
.                       8877    IN      NS      l.root-servers.net.
.                       8877    IN      NS      m.root-servers.net.
.                       8877    IN      RRSIG   NS 8 0 518400
20230307050000 20230222040000 951 .
o+jrlBL05KF3XXhkX9QUpkxrCj05TMEp/hFUbfurvpq+F53mv+4yMkAX
RlIKUFpdUlRe/iY6/qfy5Mq7t5RAWNY2c5KhNhEzGblahFHLHrvuBpf2
KtQPZp9Xz3H+AsE3mhoDUL7sniVobdsyit64yFC4SicrVirTi0+nWCdQ
AfXL/pPd1i+5roDRaQDZayS6i8QqOMdWj5TCZ4b85/5bQwiZ5PQbMkhd
ISpSWVZHpwdF7dEsDtgAR7PFtKqgRrOCHXyPfnKkb2Kh++3I5bV+ppC1
rCSg72kV7nXjMOtOzexz9WX03QNrKDbdaVb8Akiioc8q4s/yOumktgRE vwSRCw==
;; Received 525 bytes from 8.8.8.8#53(8.8.8.8) in 4 ms

br.                     172800  IN      NS      a.dns.br.
br.                     172800  IN      NS      b.dns.br.
br.                     172800  IN      NS      c.dns.br.
br.                     172800  IN      NS      d.dns.br.
br.                     172800  IN      NS      e.dns.br.
br.                     172800  IN      NS      f.dns.br.
br.                     86400   IN      DS      2471 13 2
5E4F35998B8F909557FA119C4CBFDCA2D660A26F069EF006B403758A 07D1A2E4
br.                     86400   IN      RRSIG   DS 8 1 86400 20230308050000
20230223040000 951 .
mc+pk/dCjgv+oKXRplTSwLIfgIaOWaLOk0r4c18cP46hx1J+kr9KC+oL
LzNIYKKyINkxpyW17Pih734Ev+vGdYwobxtvizZp+oevRG2e+ZnYN4DO
rHdATz5iToWu0DFh7qWqi0sg/IyaRPaPx3BQXiE/NbQYVl/RgiMTqowd
ObzT2ZTjM0OfYQYc086ZoZNb6w3j+eWbptJRbLq2nw8cGD0u0uGB/JmU
OFKawNraDjbiOENAf4FgDkMRPjmuIPGqJn+BscRhNlwhblz7UEWGjWSV
dDWlJ5AXcfKCc1lZNYCKNN/Knhwiz+xPhBnxTLHw5GgEVUuifngwuWV7 dMYmeA==
;; Received 776 bytes from 199.9.14.201#53(b.root-servers.net) in 128 ms

sp.gov.br.              3600    IN      NS      dns1e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns3e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns4e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns2e.sp.gov.br.
sp.gov.br.              900     IN      NSEC    sp-trt.gov.br. NS RRSIG NSEC
sp.gov.br.              900     IN      RRSIG   NSEC 13 3 900
20230309120517 20230223110517 52092 gov.br.
zME/zTJ7jcAqSn/es9WWRQQ3pkA7BrZZeGatkxXTPX5g8cR7rI5LmNCM
GzzaMBCJMdi/MaKbIfGt//R9YMSECw==
;; Received 358 bytes from 200.219.154.10#53(d.dns.br) in 208 ms

poupatempo.sp.gov.br.   300     IN      A       201.55.8.230
poupatempo.sp.gov.br.   86400   IN      NS      dns2e.sp.gov.br.
poupatempo.sp.gov.br.   86400   IN      NS      dns4e.sp.gov.br.
poupatempo.sp.gov.br.   86400   IN      NS      dns1e.sp.gov.br.
poupatempo.sp.gov.br.   86400   IN      NS      dns3e.sp.gov.br.
;; Received 173 bytes from 200.144.6.92#53(dns3e.sp.gov.br) in 4 ms

pguizeline at ssdd:~$ dig +trace @9.9.9.9 poupatempo.sp.gov.br

; <<>> DiG 9.16.37-Debian <<>> +trace @9.9.9.9 poupatempo.sp.gov.br
; (1 server found)
;; global options: +cmd
.                       42636   IN      NS      h.root-servers.net.
.                       42636   IN      NS      m.root-servers.net.
.                       42636   IN      NS      i.root-servers.net.
.                       42636   IN      NS      c.root-servers.net.
.                       42636   IN      NS      b.root-servers.net.
.                       42636   IN      NS      d.root-servers.net.
.                       42636   IN      NS      l.root-servers.net.
.                       42636   IN      NS      g.root-servers.net.
.                       42636   IN      NS      k.root-servers.net.
.                       42636   IN      NS      f.root-servers.net.
.                       42636   IN      NS      e.root-servers.net.
.                       42636   IN      NS      j.root-servers.net.
.                       42636   IN      NS      a.root-servers.net.
.                       42636   IN      RRSIG   NS 8 0 518400
20230308050000 20230223040000 951 .
gYpGnWJim88jzPX9TbTk1x0+bDUWg6FI4Qcbfzl4wO/NeyF7Sbayjm7O
oV2wQzlacKQm8F+8GChw1Tj/mkAbxCcR75zFrD+a7GBLVlj7X2voRvrY
WqxZEUGe37bfcncWvgWjzknfxMw5d3FjV7jr8fpU5kWT6mcMlYpPKz+T
N7B76550Vv0HIN3N8QnpYSy4z9M1WctCWe95XGOW8Oy2NUAN1BjjeJWJ
mjAwZmsePOAOAmpATzIXd1cXJ1Wmb1P1kQP7ewDRpfctA+zFEyofhoAf
eWsV7xTs/7UFFTstKNiLjcYb2l9zEG79JOGMl3bGQ1/Qaq4nFCuOU6Ut 2XyZKg==
;; Received 525 bytes from 9.9.9.9#53(9.9.9.9) in 8 ms

br.                     172800  IN      NS      a.dns.br.
br.                     172800  IN      NS      b.dns.br.
br.                     172800  IN      NS      c.dns.br.
br.                     172800  IN      NS      d.dns.br.
br.                     172800  IN      NS      e.dns.br.
br.                     172800  IN      NS      f.dns.br.
br.                     86400   IN      DS      2471 13 2
5E4F35998B8F909557FA119C4CBFDCA2D660A26F069EF006B403758A 07D1A2E4
br.                     86400   IN      RRSIG   DS 8 1 86400 20230308050000
20230223040000 951 .
mc+pk/dCjgv+oKXRplTSwLIfgIaOWaLOk0r4c18cP46hx1J+kr9KC+oL
LzNIYKKyINkxpyW17Pih734Ev+vGdYwobxtvizZp+oevRG2e+ZnYN4DO
rHdATz5iToWu0DFh7qWqi0sg/IyaRPaPx3BQXiE/NbQYVl/RgiMTqowd
ObzT2ZTjM0OfYQYc086ZoZNb6w3j+eWbptJRbLq2nw8cGD0u0uGB/JmU
OFKawNraDjbiOENAf4FgDkMRPjmuIPGqJn+BscRhNlwhblz7UEWGjWSV
dDWlJ5AXcfKCc1lZNYCKNN/Knhwiz+xPhBnxTLHw5GgEVUuifngwuWV7 dMYmeA==
;; Received 748 bytes from 198.97.190.53#53(h.root-servers.net) in 116 ms

sp.gov.br.              3600    IN      NS      dns3e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns1e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns2e.sp.gov.br.
sp.gov.br.              3600    IN      NS      dns4e.sp.gov.br.
sp.gov.br.              900     IN      NSEC    sp-trt.gov.br. NS RRSIG NSEC
sp.gov.br.              900     IN      RRSIG   NSEC 13 3 900
20230309120517 20230223110517 52092 gov.br.
zME/zTJ7jcAqSn/es9WWRQQ3pkA7BrZZeGatkxXTPX5g8cR7rI5LmNCM
GzzaMBCJMdi/MaKbIfGt//R9YMSECw==
;; Received 358 bytes from 200.189.41.10#53(b.dns.br) in 48 ms

poupatempo.sp.gov.br.   300     IN      A       201.55.8.230
poupatempo.sp.gov.br.   86400   IN      NS      dns4e.sp.gov.br.
poupatempo.sp.gov.br.   86400   IN      NS      dns3e.sp.gov.br.
poupatempo.sp.gov.br.   86400   IN      NS      dns1e.sp.gov.br.
poupatempo.sp.gov.br.   86400   IN      NS      dns2e.sp.gov.br.
;; Received 173 bytes from 201.55.16.39#53(dns2e.sp.gov.br) in 4 ms
##

A minha suspeita é que os Nameservers estejam executando algum tipo de
geofencing ou blocklist por regiões. Alguém consegue por favor replicar os
resultados? Talvez alguém possa me encaminhar um contato na PRODESP?

Testes utilizando o https://www.globaltraceroute.com/, e o
https://dnschecker.org/ também retornam time out.

Muito obrigado por qualquer ajuda, e me desculpem pela quantidade de logs!

Atenciosamente,

Pedro Guizeline


More information about the gter mailing list