[SOLVED] Can't access pastebin.com

overdosed · 2026-01-08 13:09:24

I changed dns on my Arch machine and my Windows 10 machine to 1.1.1.1. My Arch machine can't reach pastebin.com while my Windows 10 machine can. I'm using NetworkManager.

cat /etc/resolv.conf
nameserver 1.1.1.1
nameserver 1.0.0.1

This is my nmcli con show output:

ipv4.dns:                               1.1.1.1,1.0.0.1
ipv4.dns-search:                        --
ipv4.dns-options:                       --
ipv4.dns-priority:                      0
ipv4.addresses:                         --
ipv4.gateway:                           --
ipv4.routes:                            --
ipv4.route-metric:                      -1
ipv4.route-table:                       0 (unspec)
ipv4.routing-rules:                     --
ipv4.replace-local-rule:                -1 (default)
ipv4.dhcp-send-release:                 -1 (default)
ipv4.routed-dns:                        -1 (default)
ipv4.ignore-auto-routes:                no
ipv4.ignore-auto-dns:                   yes
ipv4.dhcp-client-id:                    --
ipv4.dhcp-iaid:                         --
ipv4.dhcp-dscp:                         --
ipv4.dhcp-timeout:                      0 (default)
ipv4.dhcp-send-hostname-deprecated:     yes
ipv4.dhcp-send-hostname:                -1 (default)
ipv4.forwarding:                        -1 (default)
ipv4.dhcp-hostname:                     --
ipv4.dhcp-fqdn:                         --
ipv4.dhcp-hostname-flags:               0x0 (none)
ipv4.never-default:                     no
ipv4.may-fail:                          yes
ipv4.required-timeout:                  -1 (default)
ipv4.dad-timeout:                       -1 (default)
ipv4.dhcp-vendor-class-identifier:      --
ipv4.dhcp-ipv6-only-preferred:          -1 (default)
ipv4.link-local:                        0 (default)
ipv4.dhcp-reject-servers:               --
ipv4.auto-route-ext-gw:                 -1 (default)
ipv4.shared-dhcp-range:                 --
ipv4.shared-dhcp-lease-time:            0 (default)
ipv6.method:                            disabled
ipv6.dns:                               --
ipv6.dns-search:                        --
ipv6.dns-options:                       --
ipv6.dns-priority:                      0
ipv6.addresses:                         --
ipv6.gateway:                           --
ipv6.routes:                            --
ipv6.route-metric:                      -1

Last edited by overdosed (2026-01-09 13:11:17)

seth · 2026-01-08 14:34:24

My Arch machine can't reach pastebin.com

Please don't paraphrase, https://bbs.archlinux.org/viewtopic.php?id=57855

ping -c1 pastebin.com
tracepath pastebin.com

mithrial · 2026-01-08 18:04:39

Is it in the browser? Maybe you have an overblocking addon or DoH config. Sometimes pastebin is regarded as "distributing malware" because some user shared something to that remark, and it will land the page on many blocklists.

overdosed · 2026-01-09 02:45:20

[o@o ~]$ ping -c1 pastebin.com
PING pastebin.com (::1) 56 data bytes
64 bytes from localhost (::1): icmp_seq=1 ttl=64 time=0.037 ms

--- pastebin.com ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.037/0.037/0.037/0.000 ms
[o@o ~]$ tracepath pastebin.com

 1?: [LOCALHOST]                        0.012ms pmtu 65536
 1:  localhost                                             0.096ms reached
 1:  localhost                                             0.085ms reached
     Resume: pmtu 65536 hops 1 back 1

-thc · 2026-01-09 06:02:39

overdosed wrote:

PING pastebin.com (::1) 56 data bytes
64 bytes from localhost (::1): icmp_seq=1 ttl=64 time=0.037 ms

Cloudflare's 1.1.1.1 will not resolve "pastebin.com" to "::1".

Please post the output of either

dig pastebin.com

(part of "bind") or

drill pastebin.com

(part of "ldns").

overdosed · 2026-01-09 06:46:54

[o@o ~]$ dig pastebin.com

; <<>> DiG 9.20.17 <<>> pastebin.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29808
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;pastebin.com.			IN	A

;; ANSWER SECTION:
pastebin.com.		558	IN	A	127.0.0.1
pastebin.com.		558	IN	AAAA	::1

;; Query time: 8 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Fri Jan 09 13:44:06 +07 2026
;; MSG SIZE  rcvd: 85

seth · 2026-01-09 06:54:08

tracepath 1.1.1.1
dig @8.8.8.8 pastebin.com

Errrr… on a scale from 1 to Trump - how much dictatorial aspirations does your government have?

overdosed · 2026-01-09 07:09:53

[o@o ~]$ tracepath 1.1.1.1
 1?: [LOCALHOST]                      pmtu 1500
 1:  _gateway                                              1.996ms 
 1:  _gateway                                              1.877ms 
 2:  _gateway                                              1.738ms pmtu 1492
 2:  100.119.0.2                                           4.754ms 
 3:  172.16.129.135                                        8.943ms 
 4:  172.16.70.1                                          12.380ms asymm  3 
 5:  no reply
 6:  172.16.172.185                                        8.107ms asymm  5 
 7:  10.255.10.29                                          9.059ms asymm  6 
 8:  localhost                                            37.393ms asymm  9 
 9:  172.220.1.117.in-addr.arpa                           34.276ms asymm  7 
10:  91.189.212.125.in-addr.arpa                          37.197ms asymm  9 
11:  172.69.117.60                                        43.325ms asymm 10 
12:  172.69.117.81                                        44.887ms asymm 11 
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
25:  no reply
26:  no reply
27:  no reply
28:  no reply
29:  no reply
30:  no reply
     Too many hops: pmtu 1492
     Resume: pmtu 1492 
[o@o ~]$ dig @8.8.8.8 pastebin.com

; <<>> DiG 9.20.17 <<>> @8.8.8.8 pastebin.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57727
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;pastebin.com.			IN	A

;; ANSWER SECTION:
pastebin.com.		48	IN	A	127.0.0.1

;; Query time: 4 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Fri Jan 09 14:07:52 +07 2026
;; MSG SIZE  rcvd: 46

how much dictatorial aspirations does your government have?

I don't know

seth · 2026-01-09 07:21:10

I don't know

https://en.wikipedia.org/wiki/The_Econo … racy_Index

So the gateway sends you full circle back to the localhost to colorado, to italy and then to the cloudflare realm.
Are you using some VPN?

curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=pastebin.com&type=A'

Edit: and or

dig @1.1.1.1 pastebin.com +tls

Last edited by seth (2026-01-09 07:22:54)

overdosed · 2026-01-09 07:42:29

Are you using some VPN?

No

[o@o ~]$ curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=pastebin.com&type=A'
{"Status":0,"TC":false,"RD":true,"RA":true,"AD":false,"CD":false,"Question":[{"name":"pastebin.com","type":1}],"Answer":[{"name":"pastebin.com","type":1,"TTL":249,"data":"172.66.171.73"},{"name":"pastebin.com","type":1,"TTL":249,"data":"104.20.29.150"}]}

overdosed · 2026-01-09 07:47:43

how much dictatorial aspirations does your government have?

It's Vietnam

seth · 2026-01-09 07:57:27

You're resolving the proper pastebin IP via https => https://wiki.archlinux.org/title/Domain … d_security

The most likely reason currently is

It's Vietnam

overdosed · 2026-01-09 08:28:58

You're resolving the proper pastebin IP via https

You mean dns over https?

seth · 2026-01-09 08:30:38

Yes, that's what the curl command did.
All indications are that somebody fudges the DNS response - somebody being your friendly local dicktator.

Edit, for clarification: any encrypted protocol that's allowed to pass at all will do.

Last edited by seth (2026-01-09 08:32:11)

overdosed · 2026-01-09 08:35:16

So I can't do anything with it except switching to my Windows machine?
Not only pastebin, I also can't access pornhub

Last edited by overdosed (2026-01-09 08:36:02)

overdosed · 2026-01-09 08:37:47

[o@o ~]$ dig @1.1.1.1 pastebin.com +tls

; <<>> DiG 9.20.17 <<>> @1.1.1.1 pastebin.com +tls
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28223
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; PADDING: (391 bytes)
;; QUESTION SECTION:
;pastebin.com.			IN	A

;; ANSWER SECTION:
pastebin.com.		46	IN	A	172.66.171.73
pastebin.com.		46	IN	A	104.20.29.150

;; Query time: 35 msec
;; SERVER: 1.1.1.1#853(1.1.1.1) (TLS)
;; WHEN: Fri Jan 09 15:36:40 +07 2026
;; MSG SIZE  rcvd: 468

seth · 2026-01-09 08:41:18

What?

So, first of all: without further measures you "windows machine" will be subject to the same kind of censorship.
Second, the linked https://wiki.archlinux.org/title/Domain … d_security shows what and how to configure for DoH (leaving aside that the major browsers offer/default to that anyway)

You can also make curl use "--doh-url https://cloudflare-dns.com/dns-query " by default, https://wiki.archlinux.org/title/CURL#config_file

overdosed · 2026-01-09 08:49:14

So, first of all: without further measures you "windows machine" will be subject to the same kind of censorship.

Yes, it is. But after I changed the dns to 1.1.1.1 on both machine, only my Windows machine works

seth · 2026-01-09 12:31:05

Idk whether any resolver in windows (though if your metric is a browser: they do support or a even default to DoH) uses encrypted DNS but since the unencrypted response gets manipulated, that is what you want to configure and use anywhere.

mithrial · 2026-01-09 12:39:11

You can setup systemd-resolved and make it use 1.1.1.1 using DNS-over-TLS: https://developers.cloudflare.com/1.1.1 … d-resolved

Create a new file:

# /etc/systemd/resolved.conf.d/cloudflare.conf
[Resolve]
DNS=1.1.1.1#one.one.one.one
DNSOverTLS=yes

Enable systemd-resolved (https://wiki.archlinux.org/title/Systemd-resolved)

$ systemctl enable --now systemd-resolved.service
$ sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf

Last edited by mithrial (2026-01-09 12:40:44)

Arch Linux

#1 2026-01-08 13:09:24

[SOLVED] Can't access pastebin.com

#2 2026-01-08 14:34:24

Re: [SOLVED] Can't access pastebin.com

#3 2026-01-08 18:04:39

Re: [SOLVED] Can't access pastebin.com

#4 2026-01-09 02:45:20

Re: [SOLVED] Can't access pastebin.com

#5 2026-01-09 06:02:39

Re: [SOLVED] Can't access pastebin.com

#6 2026-01-09 06:46:54

Re: [SOLVED] Can't access pastebin.com

#7 2026-01-09 06:54:08

Re: [SOLVED] Can't access pastebin.com

#8 2026-01-09 07:09:53

Re: [SOLVED] Can't access pastebin.com

#9 2026-01-09 07:21:10

Re: [SOLVED] Can't access pastebin.com

#10 2026-01-09 07:42:29

Re: [SOLVED] Can't access pastebin.com

#11 2026-01-09 07:47:43

Re: [SOLVED] Can't access pastebin.com

#12 2026-01-09 07:57:27

Re: [SOLVED] Can't access pastebin.com

#13 2026-01-09 08:28:58

Re: [SOLVED] Can't access pastebin.com

#14 2026-01-09 08:30:38

Re: [SOLVED] Can't access pastebin.com

#15 2026-01-09 08:35:16

Re: [SOLVED] Can't access pastebin.com

#16 2026-01-09 08:37:47

Re: [SOLVED] Can't access pastebin.com

#17 2026-01-09 08:41:18

Re: [SOLVED] Can't access pastebin.com

#18 2026-01-09 08:49:14

Re: [SOLVED] Can't access pastebin.com

#19 2026-01-09 12:31:05

Re: [SOLVED] Can't access pastebin.com

#20 2026-01-09 12:39:11

Re: [SOLVED] Can't access pastebin.com

Board footer