Menu
What's new
By:
Filters Better Search

Server not found

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

R

Ramz

Regular Contributor
Hello my wife is working from home now. When she tries to connect to work she cant keeps getting server not found. Using Asus u86 with Merlin and DNS google 1.1.1.1 8.8.8.8. Funny thing is when I connect via ethernet, I can get to her work server but Via Wifi I cant. I checked the error and get "possible DNS-rebind attack detected" any ideas?? I dont want to run a wire to her computer if possible as she wants to work from anywhere in the house.
 
Turn off "Enable DNS Rebind protection" on the WAN page, then test again. If it works, you can look to "allow" the blocked domain via a custom config file, but it may be easier to just leave DNS rebind disabled for now.
 
dave14305 said:
Turn off "Enable DNS Rebind protection" on the WAN page, then test again. If it works, you can look to "allow" the blocked domain via a custom config file, but it may be easier to just leave DNS rebind disabled for now.
Click to expand...
Ok what else to I need to disable if that dose not work? That did not work just tried.
 
Ramz said:
Ok what else to I need to disable if that dose not work?
Click to expand...
Is she connecting to a "normal" WiFi network or a "guest" WiFi network on your router? Is she using a VPN client or is her work server accessible over the public internet? Do the rebind messages you saw include the domain name of her employer's server?
 
dave14305 said:
Is she connecting to a "normal" WiFi network or a "guest" WiFi network on your router? Is she using a VPN client or is her work server accessible over the public internet? Do the rebind messages you saw include the domain name of her employer's server?
Click to expand...
Normal wifi and no VPN yes it does include her employers server.
 
Ramz said:
... as she wants to work from anywhere in the house.
Click to expand...
So it sounds like this is a laptop? If so temporarily move the laptop near enough to the router so that you can connect to it by cable instead of WiFi (remember to disable the WiFi). Then try again. If the problem persists you know that it's an issue with the laptop and nothing to do with WiFi.
 
Do you have any custom DNS servers defined in the DHCP page, or DNSFilter page? I'm not sure why the difference in WiFi versus Ethernet unless you're assigning different DNS servers per MAC address, and MAC addresses would be different between a WiFi adapter and an Ethernet adapter.

No point guessing though until she tests with Rebind protection disabled.
 
dave14305 said:
Do you have any custom DNS servers defined in the DHCP page, or DNSFilter page? I'm not sure why the difference in WiFi versus Ethernet unless you're assigning different DNS servers per MAC address, and MAC addresses would be different between a WiFi adapter and an Ethernet adapter.

No point guessing though until she tests with Rebind protection disabled.
Click to expand...
No I do not have custom DNS. just google DNS
 
Here are a few ideas from my experiences.

Lets see what your wife's PC is using for DNS when connected to your WIFI:
With your wife's PC connected to your WIFI do the following:
press WIN + R
type cmd in the run box
type ipconfig /all in the dos window

tell us what it says in the Wireless LAN adapter values under DNS Servers

Then type nslookup wifes.workaddress.com 1.1.1.1

You should see something like:
Code: 
C:\Users\blabla>nslookup hello.com 1.1.1.1
Server:  one.one.one.one
Address:  1.1.1.1

Non-authoritative answer:
Name:    hello.com
Addresses:  2001:4860:4802:38::15
          2001:4860:4802:34::15
          2001:4860:4802:32::15
          2001:4860:4802:36::15
          216.239.38.21
          216.239.34.21
          216.239.36.21
          216.239.32.21

Then run the same thing without the 1.1.1.1
Hopefully you will see the same results:
Code: 
C:\Users\blabla>nslookup hello.com
Server:  router.blessthishouse.home
Address:  192.168.1.1

Non-authoritative answer:
Name:    hello.com
Addresses:  2001:4860:4802:36::15
          2001:4860:4802:32::15
          2001:4860:4802:34::15
          2001:4860:4802:38::15
          216.239.32.21
          216.239.36.21
          216.239.34.21
          216.239.38.21


nslookup domain.to.find dns.dserver.to.use

The first test was bypassing your DNS config and asking the specified DNS server directly for the address

The second test asked your PC to use its defined DNS servers from the DNS Servers listed under ipconfig /all


Let us know what you get...
 
peepsnet said:
Here are a few ideas from my experiences.

Lets see what your wife's PC is using for DNS when connected to your WIFI:
With your wife's PC connected to your WIFI do the following:
press WIN + R
type cmd in the run box
type ipconfig /all in the dos window

tell us what it says in the Wireless LAN adapter values under DNS Servers

Then type nslookup wifes.workaddress.com 1.1.1.1

You should see something like:
Code: 
C:\Users\blabla>nslookup hello.com 1.1.1.1
Server:  one.one.one.one
Address:  1.1.1.1

Non-authoritative answer:
Name:    hello.com
Addresses:  2001:4860:4802:38::15
          2001:4860:4802:34::15
          2001:4860:4802:32::15
          2001:4860:4802:36::15
          216.239.38.21
          216.239.34.21
          216.239.36.21
          216.239.32.21

Then run the same thing without the 1.1.1.1
Hopefully you will see the same results:
Code: 
C:\Users\blabla>nslookup hello.com
Server:  router.blessthishouse.home
Address:  192.168.1.1

Non-authoritative answer:
Name:    hello.com
Addresses:  2001:4860:4802:36::15
          2001:4860:4802:32::15
          2001:4860:4802:34::15
          2001:4860:4802:38::15
          216.239.32.21
          216.239.36.21
          216.239.34.21
          216.239.38.21


nslookup domain.to.find dns.dserver.to.use

The first test was bypassing your DNS config and asking the specified DNS server directly for the address

The second test asked your PC to use its defined DNS servers from the DNS Servers listed under ipconfig /all


Let us know what you get...
Click to expand...
I got 192.168.50.1 both times on DNS server.
 
ok in a command prompt type: nslookup the.domain-in-question.com 1.1.1.1
and copy and paste the results below:

it should look like:
Code: 
C:\Users\blabla>nslookup hello.com 1.1.1.1
Server:  one.one.one.one
Address:  1.1.1.1

Non-authoritative answer:
Name:    hello.com
Addresses:  2001:4860:4802:38::15
         2001:4860:4802:34::15
         2001:4860:4802:32::15
         2001:4860:4802:36::15
         216.239.38.21
         216.239.34.21
         216.239.36.21
         216.239.32.21
we are interested in the lower response

Then run the next: nslookup the.domain-in-question.com
and paste it
it should look like:

Code: 
C:\Users\blabla>nslookup hello.com
Server:  router.blessthishouse.home
Address:  192.168.1.1

Non-authoritative answer:
Name:    hello.com
Addresses:  2001:4860:4802:38::15
         2001:4860:4802:34::15
         2001:4860:4802:32::15
         2001:4860:4802:36::15
         216.239.38.21
         216.239.34.21
         216.239.36.21
         216.239.32.21

if you specify the 1.1.1.1 in the first example the top should not say 192.168.50.1
 
peepsnet said:
ok in a command prompt type: nslookup the.domain-in-question.com 1.1.1.1
and copy and paste the results below:

it should look like:
Code: 
C:\Users\blabla>nslookup hello.com 1.1.1.1
Server:  one.one.one.one
Address:  1.1.1.1

Non-authoritative answer:
Name:    hello.com
Addresses:  2001:4860:4802:38::15
         2001:4860:4802:34::15
         2001:4860:4802:32::15
         2001:4860:4802:36::15
         216.239.38.21
         216.239.34.21
         216.239.36.21
         216.239.32.21
we are interested in the lower response

Then run the next: nslookup the.domain-in-question.com
and paste it
it should look like:

Code: 
C:\Users\blabla>nslookup hello.com
Server:  router.blessthishouse.home
Address:  192.168.1.1

Non-authoritative answer:
Name:    hello.com
Addresses:  2001:4860:4802:38::15
         2001:4860:4802:34::15
         2001:4860:4802:32::15
         2001:4860:4802:36::15
         216.239.38.21
         216.239.34.21
         216.239.36.21
         216.239.32.21

if you specify the 1.1.1.1 in the first example the top should not say 192.168.50.1
Click to expand...

I got this time 127.0.0.1 if that helps.
 
ColinTaylor said:
Just post the complete output of the commands as requested. Cryptic one line replies without any of the surrounding information is not helpful.
Click to expand...
Ok will do once i am back home
 
ColinTaylor said:
Just post the complete output of the commands as requested. Cryptic one line replies without any of the surrounding information is not helpful.
Click to expand...
C:\Users\Teen>nslookup starmetrolandmedia.my.salesforce.com 9.9.9.9

I did two this is what I get one with Quad9 then chenged to cloudfare
Server: dns9.quad9.net
Address: 9.9.9.9

*** dns9.quad9.net can't find starmetrolandmedia.my.salesforce.com: Server failed

C:\Users\Teen>nslookup starmetrolandmedia.my.salesforce.com 9.9.9.9
Server: dns9.quad9.net
Address: 9.9.9.9

*** dns9.quad9.net can't find starmetrolandmedia.my.salesforce.com: Server failed

C:\Users\Teen>nslookup starmetrolandmedia.my.salesforce.com 1.1.1.1
Server: one.one.one.one
Address: 1.1.1.1

*** one.one.one.one can't find starmetrolandmedia.my.salesforce.com: Server
 
Who's PC is this, yours or your wife's?

On the same PC post the output of this command:
Code: 
ipconfig /all
 
What level of Merlin? If you have DoT enabled (DNS Privacy) try disabling it.
 
ColinTaylor said:
Who's PC is this, yours or your wife's?

On the same PC post the output of this command:
Code: 
ipconfig /all
Click to expand...

Hi its mine as I cant get to her web site either so both laptops have the same server not found

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) Centrino(R) Wireless-N 1030
Physical Address. . . . . . . . . : BC-77-37-76-F4-8F
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::c0c1:335a:4d76:e2d4%7(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.50.248(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Saturday, March 28, 2020 5:58:15 PM
Lease Expires . . . . . . . . . . : Sunday, March 29, 2020 6:13:46 PM
Default Gateway . . . . . . . . . : 192.168.50.1
DHCP Server . . . . . . . . . . . : 192.168.50.1
DHCPv6 IAID . . . . . . . . . . . : 264009527
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-15-71-71-38-18-03-73-54-07-A3
DNS Servers . . . . . . . . . . . : 192.168.50.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
Physical Address. . . . . . . . . : BC-77-37-76-F4-93
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
 
You must log in or register to reply here.

Similar threads

Preskitt.man
setup ac68U as bridge to eero network for vpn support
Replies
18
Views
1K
heysoundude
heysoundude
H
Solved DNS Rebind Attack Message For Only Two Domains
Replies
4
Views
660
Viktor Jaep
Viktor Jaep
TanyaC
Possible DNS-Rebind attack detected and unresponsive router plus one more
Replies
3
Views
679
TanyaC
TanyaC
url004
NXDOMAIN on server but the router can resolve queries
Replies
1
Views
157
url004
url004
G
Firewall configuration for "www" and e-mail only
Replies
17
Views
1K
Greeno
G
Similar threads
Thread starter Title Forum Replies Date
JA93 Easiest setup for remote log server Asuswrt-Merlin 0
Don Draper DDNS Status: Server Error/Inactive Asuswrt-Merlin 11
url004 NXDOMAIN on server but the router can resolve queries Asuswrt-Merlin 1
V DNS server vs DNS-over TLS server list Asuswrt-Merlin 3
L When I access the System Log --> IPv6 tab the web server crashes Asuswrt-Merlin 0
A Solved Inadyn Fails to verify server certs after update to 388.6 Asuswrt-Merlin 3
W OpenVPN Server set to LAN only allows browsing Asuswrt-Merlin 14
C How can I do this.. Router VPN Client to Server 2 Asuswrt-Merlin 3
G VPN Client with Public IP, split tunnel web server over VPN and other traffic not on the VPN Asuswrt-Merlin 4
A Cheapest device to run VPN server Asuswrt-Merlin 6

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Members online

Total: 759 (members: 24, guests: 735)
Top