what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

[Ondřej Surý]

Again - it’s your configured forwarders at fault. There’s no Google Hidden Internet.

Just stop using the forwarders, named is capable to resolve the names on its own.

Ondřej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

> On 8. 1. 2022, at 19:10, Jason Vas Dias <jason.vas.dias at gmail.com> wrote:
> 
> Thank You Stephane, and to all others who responded.
> 
> Yes, it appears other users in Ireland have problems accessing this
> domain name, not just me - one, who emailed me but not the list,
> reports:
> 
>> It looks to me like there is indeed something wrong with the setup for
>> covid19booster.healthservice.ie - I get differing results from
>> ann.indigo.ie and una.indigo.ie:
>> 
>> $ mu nslook covid19booster.healthservice.ie ann.indigo.ie.
>> Server:  ann.indigo.ie
>> Address:  194.125.133.10
>> 
>> *** ann.indigo.ie can't find COVID19BOOSTER.HEALTHSERVICE.IE: > Non-existent host/domain
>> $ mu nslook covid19booster.healthservice.ie una.indigo.ie.
>> Server:  una.indigo.ie
>> Address:  194.125.133.11
> 
>> Non-authoritative answer:
>> Name:    hse-self-referral.swiftqueue.com
>> Addresses:  52.214.178.78, 52.50.21.250
>> Aliases:  COVID19BOOSTER.healthservice.ie
> 
>> My suspicion is that some of the four topsec nameservers
>> have are not fully updated with the details of this domain name.
>> However, I cannot query them to find out.
> 
> 
> What are "RIPE Atlas Probes" ?
> 
> Could I perhaps use these to improve my BIND DNS server so it
> can query the Google Hidden Internet too ?
> 
> I have raised complaints with eir.ie about their dismal DNS service.
> And with the HSE.IE about putting their covid appointment
> booking service on a Google Hidden Internet URL - however,
> I do not expect anything to come of these - no web complaint
> form I have ever filled in has yielded a response, so I expect no
> difference here - in my experience, only threats of legal action
> (if you can get through to them) elicits a response from such
> organizations.
> 
> But I still do not understand:
> o what is different about your RIPE Atlas Probes and the Google
>   DNS servers, that they can query this domain name, but the
>   BIND servers cannot ?
> 
> o How can I avoid this problem in the future - ie. is there any
>   extension to BIND that can query the Google Hidden Internet
>   without accessing Google DNS servers ?
> 
> o Is there any public DNS server that can query the Google DNS
>   servers / Hidden Internet on my behalf, without my IP Address
>   and Identity being made available to Google for financial exploitation ?
> 
> Thanks & Best Regards,
> Jason
> 
> 
>> On 08/01/2022, Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote:
>> On Sat, Jan 08, 2022 at 04:55:24PM +0100,
>> Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote
>> a message of 52 lines which said:
>> 
>>> This domain name seems OK for me but I notice that a fair number of
>>> RIPE Atlas probes in Ireland return a fake NXDOMAIN for this name:
>> 
>> On Twitter, an Irish DNS expert said that it happened
>> before. Apparently, many ISP use a blacklist without thinking and this
>> blacklist include legitimate domain names.
>> 
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users