Ubuntu

Failed to resolve some websites with .hk

Asked by Max

I have browsed some of websites with the same router and ISP in Hong Kong on Ubuntu 17.04 USB live, the same version installed, Android 5.1 and Windows 10.

Some websites with suffix .hk are failed to resolve on Ubuntu, both USB live and installed one.
Websites not accessible are:
www.gov.hk
https://www.hsbc.com.hk
https://google.com.hk
http://www.discuss.com.hk/
polyu.edu.hk
www.cuhk.edu.hk

I have used the following DNS servers without success: local ISP server, Google (8.8.8.8, 8.8.4.4), CensurfriDNS (91.239.100.100, 89.233.43.71) and Verisign(64.6.64.6)

These websites have been tested with ping, firefox and web-browser-app.

But those following websites work:
google.com/ncr
google.com.tw
google.com.sg
hku.hk

A temporary fix is assigning the DNS server to OpenDNS (208.67.222.222).

Is there any way to get it normal? More info could be provided if you suggest. Thank you.

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#1

Have you tried rebooting your router? Leave it off for at least 30 seconds then power on and reboot your computer

Revision history for this message
timonoj (timonoj-gmail) said : 		#2

Rebooting the router didn't help. Having the same issue. Brand new installed Kubuntu 17.04. Live CD also presents same issues. Also Lubuntu 17.04. Windows machines and phones (and older linux machines) finds the pages as expected.

Revision history for this message
timonoj (timonoj-gmail) said : 		#3

Ok...solution found in superuser.com:
Ubuntu 17.04 can not(yet) resolve DNS server with DNSSEC support. I disable DNSSEC with this daemon. Solution: Disable DNSSEC support for the time being.

sudo mkdir -p /etc/systemd/resolved.conf.d
printf "[Resolve]\nDNSSEC=no\n" | sudo tee /etc/systemd/resolved.conf.d/no-dnssec.conf

sudo dpkg-reconfigure resolvconf
# Say yes to "prepare /etc/resolve.conf for dynamic updates?"

Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#4

Great find. I suggest you report a bug and add the above text as a fix.

Revision history for this message
Renea Khan (reankhans) said : 		#5

I think you need to report that issue. I also got this issue in my https://itrackcourier.com/ this website.

Revision history for this message
eliza (simxuone) said : 		#6

I have also faced this type of problem to my site https://trackthiscourier.com/. So, you will need to audit your routers and determine why there is a duplicate - then you will need to resolve it by changing the duplicates to take on a new Router ID.

Revision history for this message
eliza (simxuone) said : 		#7

I have also faced this type of problem to my site https://trackthiscourier.com/. So, you will need to audit your routers and determine why there is a duplicate - then you will need to resolve it by changing the duplicates to take on a new Router ID.

Can you help with this problem?

Provide an answer of your own, or ask Max for more information if necessary.

To post a message you must log in.