NextDNS is breaking zoom!

Hey Thanks for the reply. Yes, it working right now (Sat March 5th 2022 @ 8:30AM).

I didn’t see any blocked queries, but I only logs for 1 hour (and I’d rather keep the logs off). 

I checked all the setting you mentioned:

• NRD is off 
• I can’t find any settings that block domains and the Block Page is disabled (Denylist is empty, Block lists has nothing, and I re-checked every setting)
• I have DNS rebinding turned off (though that feature looks pretty cool and I might start using)
• Bypass methods are turned off too (under Parental Controls)

All of the above settings were turned off when I last experienced the problem. I do have Anonymized EDNS Client subnet turned on though.

Next time I see the problem I will jump into the Logs and Analytics to see what’s going on (if I can). 

Hey It’s hit or miss still. A few mins after I posted my reply, it didn’t work.

Before, I said NextDNS responded with a blank “A” message but that’s not right. I should have said there was a SERVFAIL. Here is the output (changed for privacy):

> dig <MY-ORG>.zoom.us
; <<>> DiG 9.9.7-P3 <<>> <MY-ORG>.zoom.us
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: *****
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1  ;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;<MY-ORG>.zoom.us.             IN      A  ;; Query time: 297 msec
;; SERVER: 192.168.*.*#53(192.168.*.*)
;; WHEN: Sat Mar 05 08:55:36 PST 2022
;; MSG SIZE  rcvd: 46

Hey I still get the issue when EDNS is disabled. Here’s the output from NS lookup (changed for privacy):

> nslookup <MY-ORG>.zoom.us
Server:         192.168.*.*
Address:        192.168.*.*#53

** server can't find <MY-ORG>.zoom.us: SERVFAIL

One minute it will work and the next it won’t.   

NextDNS Thanks for the replying in this thread. pfsense (my router) is running at that IP address (I replaced two of the octets with * for privacy). My pfsense router uses DNS resolver and all the computers in my home use it as their DNS server.

pfsense (DNS resolver) was configured using the documentation provided under the “Setup” tab. I set the custom options field with a value that starts with:

server:
  forward-zone:
    name: "."
    forward-tls-upstream: yes

Overall, DNS has been working well (except zoom). All my queries use TLS and the logs show that next dns has been providing DNS records. Even when zoom.us doesn’t work, all other dns lookups seem to work.