On Fri, Dec 6, 2013 at 12:07 PM, Giancarlo Razzolini <grazzol...@gmail.com> wrote: > I do not know if it is the case, but many isp's today use dns > transparent proxying. > > You can try using the site www.dnsleaktest.com to see if it is your > case.
The lwtitle.com mx and lwtitle.com txt queries both fail for me here and I run unbound as a resolver on my firewall and I pass the DNS leak test. The one network of the 4 that I do get a proper answer on has an older version of OpenBSD on its firewall (4.9) while all the ones that are failing for me run a fairly current (or even -current) version. And if my ISP, and a couple of the others, were doing dns proxy and that was messing up the results it would surely mess them up for all of the DNS caches I tested. ===================================================== dig @216.146.35.35 lwtitle.com mx +noall +answer ; <<>> DiG 9.4.2-P2 <<>> @216.146.35.35 lwtitle.com mx +noall +answer ; (1 server found) ;; global options: printcmd ===================================================== dig @8.8.8.8 lwtitle.com mx +noall +answer ; <<>> DiG 9.4.2-P2 <<>> @8.8.8.8 lwtitle.com mx +noall +answer ; (1 server found) ;; global options: printcmd lwtitle.com. 3600 IN MX 0 lwtitle-com.mail.protection.outlook.com. ===================================================== dig @209.244.0.3 lwtitle.com mx +noall +answer ; <<>> DiG 9.4.2-P2 <<>> @209.244.0.3 lwtitle.com mx +noall +answer ; (1 server found) ;; global options: printcmd lwtitle.com. 3600 IN MX 0 lwtitle-com.mail.protection.outlook.com. ===================================================== dig @198.153.192.40 lwtitle.com mx +noall +answer ; <<>> DiG 9.4.2-P2 <<>> @198.153.192.40 lwtitle.com mx +noall +answer ; (1 server found) ;; global options: printcmd lwtitle.com. 3600 IN MX 0 lwtitle-com.mail.protection.outlook.com. ===================================================== etc. Only those specific queries from some places to dyn's internet guide fail. >From the network running 4.9: ===================================================== dig @216.146.35.35 lwtitle.com mx +noall +answer ; <<>> DiG 9.4.2-P2 <<>> @216.146.35.35 lwtitle.com mx +noall +answer ; (1 server found) ;; global options: printcmd lwtitle.com. 2181 IN MX 0 lwtitle-com.mail.protection.outlook.com. ===================================================== -- Chris