• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4697
  • Last Modified:

Images not displaying on Amazon website

Hi,

For some weeks now, we have had problems getting the images on the Amazon website to display. The problem seems to be that the servers where the images are stored (ecx.images-amazon.com and similar) cannot be resolved by our internal DNS correctly. Apparently Amazon now host their product images on Akamai servers which are aliased to the above address. I have tried to create a manual zone on our W2k3 DNS servers to circumvent this problem without success.

No other websites we access have this problem.

Can anyone suggest a method by which we can circumvent this problem. Our library people use Amazon a lot.

thanks

Paul
0
pemyers
Asked:
pemyers
  • 3
  • 2
1 Solution
 
Chris DentPowerShell DeveloperCommented:

On your DNS Server could you do:

nslookup
set type=ns
images-amazon.com

It should come up with a fairly big pile of them on Ultradns.

If that fails, how do you handle Public Name Resolution? Forwarders or Root Hints? If you use Forwarders could you try removing them and re-testing (so we can see if it's your server, or a server upstream from yours)?

It should work really if it's Root Hints. There's one issue that springs to mind, but to know if that could be it: What do you use as a Firewall on your network?

Chris
0
 
pemyersAuthor Commented:
Our DNS is set up with two zonal servers forwarding non-internal requests to a non-zonal server which uses root hints to resolve names. As I said this works for every other website we use. I tried your suggestions for nslookup and I do get results for both images-amazon.com and ecx.images-amazon.com. When I try for A or CNAME records I get the Server Failed message in nslookup.

We are using a multi-tech RouteFinder 600vpn as a firewall.

I hace since found other people in various forums with the same problem, but unfortunately no resolution.
0
 
Chris DentPowerShell DeveloperCommented:

Interesting...

ecx.images-amazon.com has both NS and CNAME bound to it. That's just blatantly illegal syntax and should have stopped the zone from loading on an RFC complaint Name Server.

See:


> set type=ns
> ecx.images-amazon.com
Server:  <Mine>
Address:  <Mine>

Non-authoritative answer:
ecx.images-amazon.com   nameserver = ns-921.amazon.com
ecx.images-amazon.com   nameserver = ns-912.amazon.com
ecx.images-amazon.com   nameserver = ns-911.amazon.com
ecx.images-amazon.com   nameserver = ns-923.amazon.com

ns-921.amazon.com       internet address = 72.21.192.209
ns-912.amazon.com       internet address = 207.171.191.123
ns-911.amazon.com       internet address = 207.171.178.13
ns-923.amazon.com       internet address = 72.21.204.208
> set type=cname
> ecx.images-amazon.com
Server:  <Mine>
Address:  <Mine>

Non-authoritative answer:
ecx.images-amazon.com   canonical name = ecx.images-amazon.com.edgesuite.net
>

Is this the only thing that fails for you?

Chris
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
pemyersAuthor Commented:
Yes. As I said before, I haven't experienced this problem with any other website.

Thanks

Paul
0
 
pemyersAuthor Commented:
Not really a solution but pointed me in the right direction. I switched from using Root-Hints to using Forwarders and I was able to resolve the Amazon image servers.

Thanks
0
 
RoanSolutionsIncCommented:
I was getting the same problem at one of my clients' sites. I resolved it by creating forwarders in the Windows 2003 DNS Manager and specifying the client's ISP DNS servers as the fowarder IP addresses.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Certified Penetration Testing

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now