Google domains cannot be reached

[Air4141841 23]

I created a new tunnel on my opnsense router and connected.   
connected to nl3.vpn.airdns.org > Capellia
using any browser.  I can't access gmail.com. or google.com. but can access YouTube.com
I ran a trace route to google.com and got one response 
 

Server: 10.4.0.1

Address: 10.4.0.1#53

 

Non-authoritative answer:

Name: www.google.com

Address: 142.251.36.36

 

% traceroute www.google.com

traceroute to www.google.com (142.251.36.36), 64 hops max, 52 byte packets

1  10.33.174.1 (10.33.174.1)  122.341 ms  120.852 ms  122.549 ms

2  * * *

3  * * *

4  * * *

5  * * *

6  * * *

7  * * *

8  * * *

9  * * *

10  * * *

11  * * *

12  * * *

13  * * *

14  * * *

15  * * *

16  * * *

17  * * *

18  * * *

19  * * *

20  * * *

21  * * *

22  * * *

23  * * *

24  * * *

25  * * *

26  * * *

27  * * *

28  * * *

29  * * *

30  * * *

31  * * *

32  * * *

33  * * *

34  * * *

35  * * *

36  * * *

37  * * *

38  * * *

39  * * *

40  * * *

41  * * *

42  * * *

43  * * *

44  * * *

45  * * *

46  * * *

47  * * *

48  * * *

49  * * *

50  * * *

51  * * *

52  * * *

53  * * *

54  * * *

55  * * *

56  * * *

57  * * *

58  * * *

59  * * *

60  * * *

61  * * *

62  * * *

63  * * *

64  * * *

 

% traceroute www.youtube.com

traceroute: Warning: www.youtube.com has multiple addresses; using 142.251.36.14

traceroute to youtube-ui.l.google.com (142.251.36.14), 64 hops max, 52 byte packets

1  10.33.174.1 (10.33.174.1)  123.864 ms  122.645 ms  121.411 ms

2  connected-by.global-layer.com (134.19.179.129)  129.149 ms  121.754 ms  124.259 ms

3  connected-by.global-layer.com (37.123.210.78)  123.362 ms  126.277 ms  123.629 ms

4  400g-nikhef-im.global-layer.com (37.123.210.21)  124.582 ms  123.041 ms  131.773 ms

5  * * *

6  185.188.28.10 (185.188.28.10)  123.202 ms  122.029 ms  122.273 ms

7  142.250.172.148 (142.250.172.148)  122.249 ms  122.539 ms  122.330 ms

8  * * *

9  142.251.255.38 (142.251.255.38)  127.427 ms

    142.251.48.174 (142.251.48.174)  123.026 ms

    142.251.66.238 (142.251.66.238)  123.260 ms

10  108.170.241.204 (108.170.241.204)  127.360 ms  123.499 ms

    108.170.241.236 (108.170.241.236)  123.160 ms

11  216.239.43.27 (216.239.43.27)  123.720 ms

    216.239.42.103 (216.239.42.103)  124.751 ms

    142.251.237.172 (142.251.237.172)  124.661 ms

12  216.239.40.134 (216.239.40.134)  123.731 ms

    ams15s44-in-f14.1e100.net (142.251.36.14)  122.206 ms  123.873 ms

 

 

[Teng Teng Toa 2]

Staff is aware.
I've created a ticket.

Latest response:
 

Quote

 

Hello and thank you for your choice!

Google is blocking some of our DNS (each VPN server runs its own DNS server, that's why some servers can resolve Google domain names and other can not). We are studying a solution, stay tuned in the next week.
 
Kind regards
AirVPN Support Team

 

Edited ... by Teng Teng Toa

[Teng Teng Toa 2]

Any news on this?

Edited ... by Teng Teng Toa
Typo

[kaymio 7]

@Teng Teng Toa you opened the ticket. Shouldn't you keep us up to date?

It has been a week since your last post. Relying on quad9 DoH for the moment. Works mostly...

[Teng Teng Toa 2]

I would want to keep you up to date but it has been utterly silent, no reaction from AirVPN crew since the 10th of July...

[NL99 5]

still not fixed😒

[Teng Teng Toa 2]

@Staff

Any news on this issue we're all facing?

[Flx 76]

it's working...Lesath server...brave browser.
Server:  UnKnown
Address:  10.20.230.1

Non-authoritative answer:
Name:    google.com
Addresses:  2607:f8b0:400b:803::200e
          142.251.41.46

[Staff 9765]

10 hours ago, Teng Teng Toa said:

@Staff

Any news on this issue we're all facing?

Hello!

We're sorry, no news. Google blocks some of our VPN servers as well as VPN servers of our competitors. Moreover, some servers are not blocked, but it's the Google's authoritative DNS that blocks our DNS servers, so we have two different approaches to sabotage VPN access. That's understandable as a widespread usage of VPN, Tor etc. is a threat to Google core business, which is also pushing its own VPN in an attempt to stop the threat. Google services must never be used and if you share our mission you should avoid them at all costs, but if you want to access them from the VPN you may consider to contact Google and send them your complaints. For Google Search consider startpage.com (which helps mitigate Google Search tracking) or switch to some better search engine which does not harvest your personal data such as https://search.brave.com

Kind regards
 

[Oblivion 2013 8]

I managed to have a guest OpenVPN network with DNS servers of Ad Guard Family Protection. It was very difficult. With the pushed DNS actually nothing related to Google did work. So i forced Ag Guard Family Protection.

However you know whizkid are smarter and setting DNS to 8.8.8.8 is not enough, but i won't tell you how to bypass the AirVPN DNS restrictions.

It is at this moment good enough that no website outside Family Protection can be reached.

This took me several days to find out.

It really makes me feel sad, The servers pushed by AirVPN seems to not be allowed to communicate whatever google something. This means mobile phone says not internet connection, sometimes it would work fine, mostly it would not work.

3 weeks ago everything worked fine with the default generator.

Unfortunately since i push AdGuard Family Protection DNS severs I cannot help you. But it does work

It does work FOR NOW.

I want to block all adult sites, and did heavily testing websites like about an adult hamster e.g. or an adult youtube site.

From the coniguration file i accepted DNS NONE. And only had AdGuard Family Protection running before it.

At this moment i hope this will work.

No addult sites like gambling, or hamster this hamster that, want to block them all, but you know whizkid, they know how to bypass, that is what you have to understand.

 

[wildbill 0]

On 7/21/2023 at 3:49 AM, Staff said:

"Google services must never be used and if you share our mission you should avoid them at all costs, but if you want to access them from the VPN you may consider to contact Google and send them your complaints."
 

Unfortunately it's not possible to completely avoid all things Google, because so many sites now use Google's "reCAPTCHA," which you can't avoid if you want to access those the sites.  All different kinds of sites use this now and the list keeps growing, since its free to use unless its a site with a ton of traffic.  Google is blocking reCAPTCHA authentication as well, when using the Netherlands servers and a few servers in other countries, but it seems it's only the in the Netherlands where all servers seem to be blocked.  I tried the DNS changes others suggested and while that lets Google search work, it doesn't solve the reCAPTCHA issue.
 

[ss11 15]

We have to send to Google as many complaints as possible, it's clearly hard to avoid them at all costs (for example I am Android user...).

[benjamed 0]

Big surprise is proton android app seems to use google to confirm internet access.  If android falsely says no internet connectivity then the proton app says "ok" and does not work, just saying "off line".

[kaymio 7]

On 7/21/2023 at 9:49 AM, Staff said:

Google services must never be used and if you share our mission you should avoid them at all costs,

This is not possible at all. Many of the websites used by me take minutes to load because they wait for a response from a google IP that doesn't come. E.G. phoronix.com the major News website for all FOSS things.

On the other hand, youtube.com has been available 99% of the time. It is not possible for me to NOT use youtube. Edited ... by kaymio
Forgot something

[benfitita 35]

I only experienced this issue at some point in the past, but not anymore. I usually use DE, NL and CH servers. I suspect we might have some configuration differences in DNS section. I have all blocklists enabled (AirVPN and third party), except for "OISD Full" and all "GoodbyeAds". These I have disabled, because they are too aggressive for my taste. Could you check if disabling these fixes your issues? Remember that DNS can be configured account-wise and per device.

[revsplus 7]

Since a couple of weeks ago or maybe more I don't experience any problem with various Google services, Google Search and GMail included, when I am connected to the Netherlands servers. I do query VPN DNS, but I don't have any DNS filter list active. I also do not have any problem with web sites with Google based CAPTCHA.

[ss11 15]

yes the problem is somehow related only to DNS - for example I use a local instance of unbound (local resolver) which forwards queries to google public DNS resolvers, and I tried with every single server that was reported as "problematic with google services" in this thread and I could not reproduce the problems, all services where working fine for me.