Some ISPs, most often in Asia, Africa, or the Middle East, will transparently redirect DNS requests destined for third-party DNS services, like Quad9, to their own DNS forwarders/servers. This may be an attempt to enforce local policies/laws, or to simply increase their cache HIT rate on their DNS forwarders.
You can detect a transparent DNS redirection by executing the following command from the Command Prompt or Terminal of any operating system. If the answer is anything except resXXX.xxx.rrdns.pch.net, then DNS is being transparently redirected.
- Windows (PowerShell)
- MacOS/Linux/BSD (Terminal)
nslookup -q=txt -class=chaos id.server. 9.9.9.9 | Select-String "pch"dig +short ch txt id.server. @9.9.9.9If the output does not look similar to the following, or there is no output, then DNS is being transparently redirected.
- Windows (PowerShell)
- MacOS/Linux/BSD (Terminal)
Non-authoritative answer:
"res200.vie.rrdns.pch.net""res860.qfra3.rrdns.pch.net"My ISP is transparently redirecting DNS. Now what? #
Please refer to our Setup Guides appended with (Encrypted) in the title. By using encrypted DNS, transparent DNS redirection will not be possible.