Rick
asked on
dig (dns MX lookup) on internet domain in China
Hi,
i'm trying to do a dns MX lookup on our branch office in China. when i do the same on our main office it replies with 2 answers.
but now -> NONE
how can that be? is it because the chinese filtering regime (because there is!, i have documents that prove that..)
all emails do come in at the branch office and the mail server works perfect, but this seems very strange to me!!
anyone?
$ dig MX hollandmechanics.com.cn
; <<>> DiG 9.2.1 <<>> MX hollandmechanics.com.cn
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4773
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;hollandmechanics.com.cn. IN MX
;; AUTHORITY SECTION:
hollandmechanics.com.cn. 20944 IN SOA dns1.hichina.com. hostmaster.hichina.com. 2005122203 21600 3600 1728000 21600
;; Query time: 1 msec
;; SERVER: 145.92.33.2#53(145.92.33.2 )
;; WHEN: Sat Dec 31 01:21:26 2005
;; MSG SIZE rcvd: 104
i'm trying to do a dns MX lookup on our branch office in China. when i do the same on our main office it replies with 2 answers.
but now -> NONE
how can that be? is it because the chinese filtering regime (because there is!, i have documents that prove that..)
all emails do come in at the branch office and the mail server works perfect, but this seems very strange to me!!
anyone?
$ dig MX hollandmechanics.com.cn
; <<>> DiG 9.2.1 <<>> MX hollandmechanics.com.cn
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4773
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;hollandmechanics.com.cn. IN MX
;; AUTHORITY SECTION:
hollandmechanics.com.cn. 20944 IN SOA dns1.hichina.com. hostmaster.hichina.com. 2005122203 21600 3600 1728000 21600
;; Query time: 1 msec
;; SERVER: 145.92.33.2#53(145.92.33.2
;; WHEN: Sat Dec 31 01:21:26 2005
;; MSG SIZE rcvd: 104
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
be aware, when i log in from distance at the branch office ICMP also isn't allowed on the internet in china.
when i trace the packages that arrive on the outside interface of our firewall, ICMP can't be received in any way.
also pinging other hosts doesn't work. the goverement has many tricks up its sleeve.
i want be sure that this isn't a chinese goverment policy, so that they can check the emal or so...
or would they do that in a other way. just recentrly our chinese ISP there (goverement) blocked one ip in our ip range without any reason.
after calling they wouldn't give us a reason. (the mail server and webserver where active on that ip)
http://www.opennetinitiative.net/studies/china/