topic Re: DNSSEC www.dnssec-tools.org with 8.8.8.8 in Discussions & Feedback

DNSSEC www.dnssec-tools.org with 8.8.8.8

Anonymous — Sat, 23 Jul 2016 14:57:52 GMT

Well I can't make heads or tails of this Community layout in where the boards are so here goes.

So I've got a 4G Dongle this it mostly a backup connection to my ISP virgin media I've been trying to work out a problem with dnssec and the test at www.dnssec-tools.org and think its down to your HTTP proxy so to test I use just 8.8.8.8 which supports dnssec set on the NIC so it must use that for DNS over 4G. Now when a test on virgin media with 8.8.8.8 for www.dnssec-tools.org it passes but on O2 4G it fails. At this point you might be thinking dnssec is not supported over 4G with O2? Wrong because it does at another dnssec site at dnssec.vs.uni-due.de and both pass.

So I'm very sure its down to the HTTP proxy you put on the O2 4G connection thats messing the DNS SEC test up for www.dnssec-tools.org

Anyone else seeing this?

thanks

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Cleoriff — Sat, 23 Jul 2016 15:06:20 GMT

I am sure @adamtemp64 uses a 4G dongle...as does @viridis I have tagged them into this post @Anonymous

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

adamtemp64 — Sat, 23 Jul 2016 15:11:30 GMT

I have lent my dongle out so unable to test this issue .

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Cleoriff — Sat, 23 Jul 2016 15:13:48 GMT

And I have just remembered that @viridis doesn't use one.....:smileysad:

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

adamtemp64 — Sat, 23 Jul 2016 15:48:45 GMT

Can you explain the exact issue with the test and when I get mine back Monday I can have a look .

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Beenherebefore — Sat, 23 Jul 2016 16:17:19 GMT

@Anonymous wrote:
I've been trying to work out a problem

What is the problem ?

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Anonymous — Sat, 23 Jul 2016 16:27:35 GMT

@Beenherebefore wrote:

@Anonymous wrote:
I've been trying to work out a problem

What is the problem ?

Its all in the 1st post?

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

MI5 — Sat, 23 Jul 2016 16:31:59 GMT

Maybe it's a problem with http://www.dnssec-tools.org/ if the other site passes it?
Or is the dongle not doing something that you think it should be doing?

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Beenherebefore — Sat, 23 Jul 2016 17:00:04 GMT

@Anonymous wrote:

@Beenherebefore wrote:

@Anonymous wrote:
I've been trying to work out a problem

What is the problem ?

Its all in the 1st post?

No it's not, you've just said there's a problem.....as @adamtemp64 asked, what issues are you experiencing to require the use of the dnssec utility ?

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Anonymous — Sat, 23 Jul 2016 17:51:02 GMT

@MI5 wrote:
Maybe it's a problem with http://www.dnssec-tools.org/ if the other site passes it?

But then why does it work on my virgin media connection?

O2 routers for 4G have a HTTP proxy so as I go to the site www.dnssec-tools.org it changes the source code of the site that I get causing the test to fail because of a bug in the HTTP proxy that add tracking or something.

Sorry if I'm really making this easy for you but thats what it is.

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Martin-O2 — Mon, 01 Aug 2016 14:01:47 GMT

Hey @Anonymous did you have any luck getting to the bottom of this?

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

MI5 — Mon, 01 Aug 2016 15:24:27 GMT

@Martin-O2 wrote:

Hey @Anonymous did you have any luck getting to the bottom of this?

Nicely worded

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Anonymous — Mon, 01 Aug 2016 15:44:06 GMT

Thiers sod all I can do about if your router this o2 4G Dongle connects to over 4G as in not my end your router doing 4G end that screws up the HTTP source code of the site when I receive it.

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Beenherebefore — Mon, 01 Aug 2016 19:47:28 GMT

@MI5 wrote:

@Martin-O2 wrote:

Hey @Anonymous did you have any luck getting to the bottom of this?

Nicely worded

Knowing what we know ....I was tempted to comment but thought better of it........then you come along

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

MI5 — Mon, 01 Aug 2016 19:50:55 GMT

Subtle enough?

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Beenherebefore — Mon, 01 Aug 2016 19:52:57 GMT

As expected......up to your usual standard !

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

MI5 — Mon, 01 Aug 2016 19:58:02 GMT

That's OK then

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Beenherebefore — Mon, 01 Aug 2016 20:06:36 GMT

At some point we you may have to explain

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

MI5 — Mon, 01 Aug 2016 20:28:35 GMT

Keep 'em guessing

Re: DNSSEC www.dnssec-tools.org with 8.8.8.8

Anonymous — Mon, 01 Aug 2016 20:56:29 GMT

Even Netalyzr shows:

And no I do not have a proxy set in my browser the proxy is the O2 router at the 4G not this is end.

tracetcp www.dnssec-tools.org

Tracing route to 192.94.214.6 [www.dnssec-tools.org] on port 80

Over a maximum of 30 hops.

1 3 ms 3 ms 3 ms 192.168.255.203

2 2 ms 2 ms 2 ms 192.168.3.1

3 * * * Request timed out.

4 117 ms 53 ms 153 ms 172.16.212.1

5 92 ms 151 ms 88 ms 172.16.212.10

6 130 ms 112 ms 49 ms 192.168.31.136

7 97 ms 123 ms 52 ms 172.25.40.1

8 Destination Reached in 123 ms. Connection established to 192.94.214.6

Trace Complete.

Content-based HTTP proxy detection (?): Warning
–

Changes to headers or contents sent between the client and our HTTP server show the presence of an otherwise unadvertised HTTP proxy.

The following headers had their capitalization modified by the proxy:

Content-Type: text/html
Last-Modified: Mon
01 Aug 2016 16:09:25 GMT
Set-Cookie: netAlizEd=BaR; path=/; domain=netalyzr.icsi.berkeley.edu
Content-Length: 466

The following headers were added by the proxy to HTTP responses:

Vary: User-Agent
Content-Encoding: gzip
Proxy-Connection: Keep-Alive
Expires: Mon, 01 Aug 2016 16:14:19 GMT

The detected proxy reordered the headers sent from the server.

The detected HTTP proxy changed images that were sent from our server.

The detected HTTP proxy changed either the headers the client sent or the HTTP response from the server. We have captured the changes for further analysis.

Filetype-based filtering (?): Note
–
Files of type exe are modified by the network.
This appears due to a proxy which is performing compression, as a Content-Encoding: gzip header was added.

Sensitive proxy-introduced HTTP headers (?): 3 HTTP headers found
–

Our analysis indicates that an HTTP proxy injects headers into your web traffic that you should know about:

x-gateway = wap.london.02.net
Identifies the network GSM gateway and/or its location.
x-forwarded-for = 10.68.9.35
Reports your local IP address.
o2gw-id = 0A
Identifies uniquely the GSM gateway of the device.