ZeroTier Question
-
The user has IPv6 DNS enabled as their first DNS server at home.
Turn off IPv6 on their main network conneciton.
-
@WLS-ITGuy said in ZeroTier Question:
@Dashrender said in ZeroTier Question:
makes me wonder if the router at the coffee shop was taken over and is doing bad things...
Was that IP obtained while at the coffee shop? or did I miss it and it was really someone at their home?
This one is at home.
What do they have for DNS servers at home? Their ISP? I've seen many ISPs (Cox does this) if you put in a bad address, you get redirected to a bad website request page hosted by Cox instead of getting an invalid domain name as you might rather have. They are trying to making things more understandable for consumers, sadly it just screws us instead.
Have you home user change the DNS provided by their router (if possible) to Google's 8.8.8.8 and 8.8.4.4 and try again.
-
@dafyre said in ZeroTier Question:
@WLS-ITGuy said in ZeroTier Question:
DUDE! YOU ARE A GENIUS! <---Absoluetely no sarcasm
If you are off-site and your DNS server returns the internal IP, stuff still ain't gonna work.
This also goes back to what I said. You do NOT want to do this unless you are 100% ready to manually update your on premise DNS server manually to have every ZeroTier IP address listed.
-
@Dashrender said in ZeroTier Question:
@WLS-ITGuy said in ZeroTier Question:
@Dashrender said in ZeroTier Question:
makes me wonder if the router at the coffee shop was taken over and is doing bad things...
Was that IP obtained while at the coffee shop? or did I miss it and it was really someone at their home?
This one is at home.
What do they have for DNS servers at home? Their ISP? I've seen many ISPs (Cox does this) if you put in a bad address, you get redirected to a bad website request page hosted by Cox instead of getting an invalid domain name as you might rather have. They are trying to making things more understandable for consumers, sadly it just screws us instead.
Have you home user change the DNS provided by their router (if possible) to Google's 8.8.8.8 and 8.8.4.4 and try again.
I've got $1 that says I can name the ISP of the home user...
(Pro tip: It's mine too).
-
@dafyre said in ZeroTier Question:
@Dashrender said in ZeroTier Question:
@WLS-ITGuy said in ZeroTier Question:
@Dashrender said in ZeroTier Question:
makes me wonder if the router at the coffee shop was taken over and is doing bad things...
Was that IP obtained while at the coffee shop? or did I miss it and it was really someone at their home?
This one is at home.
What do they have for DNS servers at home? Their ISP? I've seen many ISPs (Cox does this) if you put in a bad address, you get redirected to a bad website request page hosted by Cox instead of getting an invalid domain name as you might rather have. They are trying to making things more understandable for consumers, sadly it just screws us instead.
Have you home user change the DNS provided by their router (if possible) to Google's 8.8.8.8 and 8.8.4.4 and try again.
I've got $1 that says I can name the ISP of the home user...
(Pro tip: It's mine too).
AT&T? Cause that is mine too and I think I got the same address
-
@dafyre said in ZeroTier Question:
I've got $1 that says I can name the ISP of the home user...
(Pro tip: It's mine too).
Not a secret. it is listed right in the screenshot.
-
@WLS-ITGuy said in ZeroTier Question:
@dafyre said in ZeroTier Question:
@Dashrender said in ZeroTier Question:
@WLS-ITGuy said in ZeroTier Question:
@Dashrender said in ZeroTier Question:
makes me wonder if the router at the coffee shop was taken over and is doing bad things...
Was that IP obtained while at the coffee shop? or did I miss it and it was really someone at their home?
This one is at home.
What do they have for DNS servers at home? Their ISP? I've seen many ISPs (Cox does this) if you put in a bad address, you get redirected to a bad website request page hosted by Cox instead of getting an invalid domain name as you might rather have. They are trying to making things more understandable for consumers, sadly it just screws us instead.
Have you home user change the DNS provided by their router (if possible) to Google's 8.8.8.8 and 8.8.4.4 and try again.
I've got $1 that says I can name the ISP of the home user...
(Pro tip: It's mine too).
AT&T? Cause that is mine too and I think I got the same address
Naw... I bet your home-user's ISP is Charter?
-
@Dashrender said in ZeroTier Question:
@dafyre said in ZeroTier Question:
Except in the case of the end-user's machine not actually hitting the internal DNS, maybe?
Sure, but if the user isn't hitting an internal DNS, where would that address come from at all? I would expect it to simply fail, or get a *.wls.wels.net reply back, which isn't happening when I ping, so no reason to believe that would be happening to the home user.
F[moderated], I said it. It is coming from his primary DNS like it should.
-
@JaredBusch said in ZeroTier Question:
@Dashrender said in ZeroTier Question:
@dafyre said in ZeroTier Question:
Except in the case of the end-user's machine not actually hitting the internal DNS, maybe?
Sure, but if the user isn't hitting an internal DNS, where would that address come from at all? I would expect it to simply fail, or get a *.wls.wels.net reply back, which isn't happening when I ping, so no reason to believe that would be happening to the home user.
F[moderated], I said it. It is coming from his primary DNS like it should.
Most likely it is his ISP hijacking the bad DNS results and will show a search page if he were to use a web browser.
-
@dafyre said in ZeroTier Question:
@JaredBusch said in ZeroTier Question:
@Dashrender said in ZeroTier Question:
@dafyre said in ZeroTier Question:
Except in the case of the end-user's machine not actually hitting the internal DNS, maybe?
Sure, but if the user isn't hitting an internal DNS, where would that address come from at all? I would expect it to simply fail, or get a *.wls.wels.net reply back, which isn't happening when I ping, so no reason to believe that would be happening to the home user.
F[moderated], I said it. It is coming from his primary DNS like it should.
Most likely it is his ISP hijacking the bad DNS results and will show a search page if he were to use a web browser.
I concur.
-
@JaredBusch said in ZeroTier Question:
@dafyre said in ZeroTier Question:
I've got $1 that says I can name the ISP of the home user...
(Pro tip: It's mine too).
Not a secret. it is listed right in the screenshot.
lol, nice scrolling
-
Connect him up via ZeroTier, and set your DNS Server's ZT IP on the zt Nic, and you should be good to go.
-
@dafyre said in ZeroTier Question:
Connect him up via ZeroTier, and set your DNS Server's ZT IP on the zt Nic, and you should be good to go.
Why. You keep saying this and I keep telling you that it is a bad idea.
I have ZeroTier running and it resolves ZeroTier IP addresses with no DNS modifications.
-
@JaredBusch said in ZeroTier Question:
@dafyre said in ZeroTier Question:
Connect him up via ZeroTier, and set your DNS Server's ZT IP on the zt Nic, and you should be good to go.
Why. You keep saying this and I keep telling you that it is a bad idea.
I have ZeroTier running and it resolves ZeroTier IP addresses with no DNS modifications.
What are you using to do that? Your windows AD DNS?
-
@dafyre said in ZeroTier Question:
@JaredBusch said in ZeroTier Question:
@dafyre said in ZeroTier Question:
Connect him up via ZeroTier, and set your DNS Server's ZT IP on the zt Nic, and you should be good to go.
Why. You keep saying this and I keep telling you that it is a bad idea.
I have ZeroTier running and it resolves ZeroTier IP addresses with no DNS modifications.
What are you using to do that? Your windows AD DNS?
Nothing. ZeroTier passes NetBIOS. This is really basic.
-
@JaredBusch said in ZeroTier Question:
@dafyre said in ZeroTier Question:
@JaredBusch said in ZeroTier Question:
@dafyre said in ZeroTier Question:
Connect him up via ZeroTier, and set your DNS Server's ZT IP on the zt Nic, and you should be good to go.
Why. You keep saying this and I keep telling you that it is a bad idea.
I have ZeroTier running and it resolves ZeroTier IP addresses with no DNS modifications.
What are you using to do that? Your windows AD DNS?
Nothing. ZeroTier passes NetBIOS. This is really basic.
Ug.. did you just say NetBIOS?
-
@Dashrender said in ZeroTier Question:
@JaredBusch said in ZeroTier Question:
@dafyre said in ZeroTier Question:
@JaredBusch said in ZeroTier Question:
@dafyre said in ZeroTier Question:
Connect him up via ZeroTier, and set your DNS Server's ZT IP on the zt Nic, and you should be good to go.
Why. You keep saying this and I keep telling you that it is a bad idea.
I have ZeroTier running and it resolves ZeroTier IP addresses with no DNS modifications.
What are you using to do that? Your windows AD DNS?
Nothing. ZeroTier passes NetBIOS. This is really basic.
Ug.. did you just say NetBIOS?
Yes. That magic way that everything works on a LAN without DNS.
-
@JaredBusch said in ZeroTier Question:
@dafyre said in ZeroTier Question:
@JaredBusch said in ZeroTier Question:
@dafyre said in ZeroTier Question:
Connect him up via ZeroTier, and set your DNS Server's ZT IP on the zt Nic, and you should be good to go.
Why. You keep saying this and I keep telling you that it is a bad idea.
I have ZeroTier running and it resolves ZeroTier IP addresses with no DNS modifications.
What are you using to do that? Your windows AD DNS?
Nothing. ZeroTier passes NetBIOS. This is really basic.
Yes it does. In my experience, over VPN type techs (like Pertino, ZT, OpenVPN, etc), Netbios has not been reliable.
-
@dafyre I too have found reliability to be a problem.
-
Let's wait and hear back from @WLS-ITGuy before we go too far down the rabbit hole.
