NextDNS Returning Invalid DNS Results?
I'm having an issue accessing Airtable today, and it appears NextDNS is returning an IP address that is not owned by Airtable.
If I make a DNS request for airtable.com, I get the following results:
nslookup airtable.com 45.90.28.180
Server: 45.90.28.180
Address: 45.90.28.180#53
Non-authoritative answer:
Name: airtable.com
Address: 34.199.122.104
Name: airtable.com
Address: 34.230.107.180
Name: airtable.com
Address: 3.211.236.168
Name: airtable.com
Address: 50.16.153.225
The 3.211.236.168 IP address is the problem. If I curl that IP, I get the following result:
curl -v "https://3.211.236.168"
* Trying 3.211.236.168:443...
* Connected to 3.211.236.168 (3.211.236.168) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
* CAfile: /etc/ssl/cert.pem
* CApath: none
* (304) (OUT), TLS handshake, Client hello (1):
* (304) (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN: server accepted h2
* Server certificate:
* subject: CN=quickdrivingdirections.com
* start date: Mar 18 00:00:00 2022 GMT
* expire date: Apr 16 23:59:59 2023 GMT
* subjectAltName does not match 3.211.236.168
* SSL: no alternative certificate subject name matches target host name '3.211.236.168'
* Closing connection 0
* TLSv1.2 (OUT), TLS alert, close notify (256):
curl: (60) SSL: no alternative certificate subject name matches target host name '3.211.236.168'
More details here: https://curl.se/docs/sslcerts.html
You'll see the CN is for quickdrivingdirections.com and not Airtable.
I know this can entirely be on Airtable's end, but I am seeing zero reports online of anyone having an issue with Airtable. If I query Airtable's hostname on other DNS services, I do not receive the IP not owned by Airtable. For example, on Google:
nslookup airtable.com 8.8.8.8
Server: 8.8.8.8
Address: 8.8.8.8#53
Non-authoritative answer:
Name: airtable.com
Address: 50.16.153.225
Name: airtable.com
Address: 34.199.122.104
Name: airtable.com
Address: 34.230.107.180
Name: airtable.com
Address: 34.206.165.74
I am also seeing this issues when querying other configuration profiles on my account using the IPv6 address. What's going on here?
2 replies
-
Can't reproduce:
dig airtable.com @45.90.28.0 +short
34.230.107.180
34.206.165.74
50.16.153.225
34.199.122.104What do you get for https://test.nextdns.io ?
Content aside
- 1 yr agoLast active
- 2Replies
- 86Views
-
2
Following