Swisscom DynDNS - DMZ no more working

[spinof]

Hi everyone,

No more access to my DMZ trough the DynDNS from Swisscom.

OK with the external IP of my router.

Working well without any problem until today...

Any similar experience ?

[Black Mamba]

The DMZ (for demilitarized zone) function of the Internet-Box makes it possible to redirect all Internet connections from outside the home network to a specific device. It is mainly used when you want to operate an additional firewall on your home network and all computers are connected to this firewall. This function should only be used by network experts. Find out here how to activate this service and what to pay attention to

The Internet-Box makes it possible to perform personalized expert settings on network and IP addresses. To make this setting, enter “http: // internetbox” or “192.168.1.1” in your Internet browser, connect by entering the “admin” password for your Internet-Box, then activate Expert mode. In Network -> Settings -> DMZ, you can configure the function on the home network using "Select device". The DMZ function requires a good understanding of the network settings and requires a precise configuration on the terminals concerned

Warning: this feature has the disadvantage of exposing the device you have selected to all access attempts, whether friendly or not. Swisscom accepts no liability for abuse by a third party

Other expert settings that you can configure on the Internet-Box are port forwarding, static IP addresses, DynDNS e IPv6, these articles are in German, you just need to translate them

Do you have questions or do you want to give us your opinion? Please don't hesitate to leave us a comment

Meilleures salutations de la Communauté francophone

Customers help customers

[spinof]

Thank you for the answer but the problem was not the functionnality of a DMZ.

My post is related to a problem with the resolution of the name xxxxx.internet-box.ch who was no more possible trough the internet.

It was impossible to resolve the name --> impossible to reach my DMZ. Ping the name xxxxx.internet-box.ch failed with no resolution and give no IP.

Ping or access other destination trough a name (www.swisscom.ch / duckduckgo.com / ...) without any problem.

The only way to reach my DMZ is to know my own router IP adress. Then I can reach my DMZ.

----> The problem is typically a failure in the process / spread of name resolution (from a swisscom connection and from other).

The problem seems to be solved today. I can now reach my DMZ with the name.

But why ? Cache DNS problem on the internet with swisscom ?

Thanks for the analyze

[mabu1 · Accepted solution]

@spinof 
There were several issues in the past few years regarding the reliability of the Swisscom DDNS.

How about to use your DMZ device to update own DNS on afraid or cloudflare? This is what I used to do with my Swisscom connection.

P.S. Have had you tried out to ping the IBx hostname (ip-reverse.blabla.swisscom.ch) yet?

[spinof]

@mabu1 

Was too late in the night to check. Need an access as quickly as possible so I used the IP,. Not time to do a "reverse" ping or investigate which DNS server failed.

The solution you offer is ok and more under my own control. The other is to make an account on another DDNS provider. But the simpliest and inexpensive way to have an access from "the world" is the DDNS from Swisscom.

At the moment everything seems ok.

Thanks a lot for your answers

[Teamer16]

Hi everyone,

I have the same problem. In the past days the name mapping for my home internet box disappeared from the DNS (in general - not resolvable also with query to international name servers).

The only way to reach the router was to get the assigned IP from the configuration page hosted at the Swisscom web sites.

This morning the problem is the same: no mapping. The router reports that the DynDNS service is working properly, but no way to resolve the assigned name. Do you know if there is currently any issue with this service?

Many thanks.

[spinof]

Same problem at the moment. Calling support.

[Teamer16]

At the moment, the various DNS are resolving my internet box name.

So, at the moment, the issue seems solved.

However, I wonder what the problem was and if it's something that could happen again in future...

[Teamer16]

NOT SOLVED! Same problem again this morning. It starts to be frustrating.

[blu22]

Swisscom did NOT publish/resolve *.internet-box.ch names Tue.20.Oct.2020 around noon. The MyService hotline (Fr.40/15 min) did not know about any service down at their end, and suggested that I do "reset and restore my internet Box" (which I didn't due to lack of time).. Magically, the DNS name was resolveable in the internet again later in the afternoon.

Today Wed.21.Oct. the same again. - On my internet box I tried to delete the Dyn DNS entry to set it again .. but then got the error message "Der Dienst kann nicht mit dem dynamischen DNS Server verbinden" <-- to me, a clear indication that Swisscom's Dyn DNS Service is (temporarily) DOWN ! This is causing a lot of troubles to a lot of Swisscom customers, not just private, also business services hosted behind a SC router 😞

[Teamer16]

Fine. Downtime happens to all systems, unfortunately, now and then.

However, a communication stating the issue and a provisional time for its restore would be appreciated because, as blu22 wrote, there are also business customers relying on the name resolution.

As an important Company, the way you manage your services is not only a matter of care for the customers, but is also (always) a matter of class.

[Seimpalli33]

i have the same problem. Didnt work yesterday, in the evening it did again before the problem came back today / tonight. Contacted Swisscom Support through a contact form. no reply yet. 

[Smoo]

same issue at my side....

[kincaid03]

Same problem a few days ago.

IP > ok

DN > nok

[spinof]

Phone contact with thé support yesterday, Eskalation to 2. Level. Today I receive a voice message on my Combox : Not the right way for this problem. Please call My Services 0800 822 830... Call is not free of charge...

[mabu1]

Does NAT444 ring a bell? Check your IP against the following range 100.64.0.0/10

[Teamer16]

Hi mabu1,

my IP is outside that range, as it was few days ago when everything was working normally.

Also, for what I know, NAT444 shouldn't break the DNS resolution. But maybe I am wrong.

DynDNS still not working for my address at the moment.

[Grieschauku72]

My xxx.internet-box.ch domain is also not resolved anymore.

Just talked to myService support. They have a disruption since Monday, but it is not listed here (https://www.swisscom.ch/de/privatkunden/hilfe/netz-und-servicestatus.html#).

Also, some xxx.internet-box.ch domains are still resolved (I just guessed a couple names).

[mabu1]

Official statement from @Anonym 

https://twitter.com/swisscom_de/status/1319172494281105408?s=21 

https://swisscom.response.lithium.com/portal/conversation/223339057?authentication=wbiul6-K1o-j12e80ueFaRVTkeiyoyycxeFlVkyppA4%3D 

The majority is not affected by this yet, till the WAN IP will change and it wont resolve anymore.

[Teamer16]

Thanks for pointing this out.