ANSWERED no connection to themoviedb.org

[proton-air-vpn 0]

Hello I have the problem that I can't access themoviedb.org with an active vpn connection.
On the router (openwrt), pinging and routing to themoviedb.org works without any problems.
Only on the end devices (mobile phone, laptop...) does this not work.
an ns lookup resulted in:
nslookup themoviedb.org
Servers: 1.1.1.1

Address: 1.1.1.1#53 Non-authoritative answer: Name: themoviedb.org
Address: 52.85.49.42 Name: themoviedb.org
Address: 52.85.49.118 Name: themoviedb.org
Address: 52.85.49.38 Name: themoviedb.org
Address: 52.85.49.34 Name: themoviedb.org

I would be grateful if someone could help me because I don't know where the problem is.
Sorry for the bad english, I'm not that good at it

[OpenSourcerer 1359]

Spicy nickname…

Do you connect with your PC or with the router to AirVPN? If PC, which software do you use?

[proton-air-vpn 0]

So my configuration is as follows:

AirVPN runs on OpenWRT router.
My computer runs LMDE5 with LibreWolf.
I use Android with Firefox on my Phone.

I had previously set the airdns but since I noticed that themoviedb doesn't work, I set the dns to 1.1.1.1 to rule out an error in airdns.
But that's not the reason because I can't access themoviedb with google dns either.

If I switch to my unprotected lan/wlan, I can access themoviedb directly. the same with opera and vpn switched on.

I don't understand that because I can ping themoviedb in openwrt and the routing also works without problems...

[OpenSourcerer 1359]

Better check if you can connect to DNS servers to begin with. On Linux desktop, netcat can do that. -z closes nc if successful instead of waiting for CTRL-C, -v shows success, too, and -w is timeout of 10 seconds (default is 300 or 600, something along this):

$ nc -zvw10 <your router> 53
$ nc -zvw10 <AirDNS server> 53
$ nc -zvw10 1.1.1.1 53

.

[proton-air-vpn 0]

Sorry I was sick in bed for a few days.

So the connection to the dns is not a problem.
the request also appears in adguard and this is not blocked either, but no transmission takes place but i get the standard message: error: connection failed

LibreWolf cannot connect to the server at www.themoviedb.org.

nc -zvw10 returned the following:

:~$ nc -zvw10 10.20.30.1 53
Connection to 10.20.30.1 53 port [tcp/domain] succeeded!
:~$ nc -zvw10 10.20.30.123 53 (Adguardhome dns)
Connection to 10.20.30.123 53 port [tcp/domain] succeeded!
:~$ nc -zvw10 10.4.0.1 53
Connection to 10.4.0.1 53 port [tcp/domain] succeeded!

What I don't understand is that the request can be seen in adguard and is not blocked,
but the page is not called up, regardless of which device I want to call up the page from.
as said on in openwrt diagnostics I get the following output:

PING themoviedb.org (52.85.49.34): 56 data bytes
64 bytes from 52.85.49.34: seq=0 ttl=242 time=74.827 ms
64 bytes from 52.85.49.34: seq=1 ttl=242 time=48.152 ms
64 bytes from 52.85.49.34: seq=2 ttl=242 time=50.544 ms
64 bytes from 52.85.49.34: seq=3 ttl=242 time=50.892 ms
64 bytes from 52.85.49.34: seq=4 ttl=242 time=51.872 ms

--- themoviedb.org ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 48.152/55.257/74.827 ms

Server:		127.0.0.1
Address:	127.0.0.1:53

Non-authoritative answer:
Name:	themoviedb.org
Address: 52.85.49.42
Name:	themoviedb.org
Address: 52.85.49.34
Name:	themoviedb.org
Address: 52.85.49.118
Name:	themoviedb.org
Address: 52.85.49.38

Non-authoritative answer:
Name:	themoviedb.org
Address: 2600:9000:2038:1a00:e:5373:440:93a1
Name:	themoviedb.org
Address: 2600:9000:2038:8200:e:5373:440:93a1
Name:	themoviedb.org
Address: 2600:9000:2038:8c00:e:5373:440:93a1
Name:	themoviedb.org
Address: 2600:9000:2038:9200:e:5373:440:93a1
Name:	themoviedb.org
Address: 2600:9000:2038:ba00:e:5373:440:93a1
Name:	themoviedb.org
Address: 2600:9000:2038:c200:e:5373:440:93a1
Name:	themoviedb.org
Address: 2600:9000:2038:e400:e:5373:440:93a1
Name:	themoviedb.org
Address: 2600:9000:2038:f200:e:5373:440:93a1

everything works on the router but not on the end device
 

[Flx 76]

4 hours ago, proton-air-vpn said:

everything works on the router but not on the end device

What happens if gateway and DNS are set to match the router IP(OpenWRT) for Phone and your computer?

[proton-air-vpn 0]

If I deposit the dns on the router (OpenWRT) (gateway and dns identical) I have the same problem...

[proton-air-vpn 0]

So the problem is found and fixed
Many thanks to OpenSourcerer without whom I would not have gotten it solved.

The problem was the Yandex DNS (77.88.8.8 and 77.88.8.1) that was specified as a WAN DNS server.

After removing the two dns servers, I was able to access themoviedb.org again without any problems.

It's not clear to me why the WAN DNS has an influence on the LAN, since I'm actually using the AirDNS (10.4.0.1) there, but well, ok then that's the way it is

[OpenSourcerer 1359]

4 minutes ago, proton-air-vpn said:

It's not clear to me why the WAN DNS has an influence on the LAN, since I'm actually using the AirDNS (10.4.0.1) there, but well, ok then that's the way it is

We'll check on that in the future, as discussed in our little chat. But the original problem is solved. Thank you for your patience!