Adguardfilters: ec2-35-157-204-197.eu-central-1.compute.amazonaws.com

[adguard-bot]

Issue URL (Incorrect Blocking)

http://ec2-35-157-204-197.eu-central-1.compute.amazonaws.com

Comment

When I am using your DNS 176.103.130.130 then HBO Go is not working. It is reporting DRM error and playback error. I investigated it with a packet sniffer, and you are blocking 35.127.x.x IP addresses, which belongs to Amazon web services, and seems it is used for DRM for HBO Go (and also for Netflix).

Screenshots

Screenshot 1

Screenshot 2

System configuration

Information | value
--- | ---
Platform: | Adguard in router
Browser: | Chrome
Filters: | AdGuard Base

[krystian3w]

403 - Forbidden: Access is denied. So maybe GeoLocked.

[Alex-302]

We don't block this IP. Which answer do you see when AdGuard DNS is enabled?

[poganytamas]

We don't block this IP. Which answer do you see when AdGuard DNS is enabled?

I am using this app on Android and Android TV: https://play.google.com/store/apps/details?id=eu.hbogo.android

When I am using your DNS (176.103.130.130) on my router, I got DRM error on Android, and playback error on Android TV. When I modify the DNS to anything else (like ISP DNS or Google DNS) it starts to work immediately.

[krystian3w]

So broken with AdGuard DNS.

[Alex-302]

@poganytamastsys I can't install this app. Could you please try with AdGuard Home?
https://adguard.com/adguard-home/overview.html
You will see all blocked requests and unblock them. If no blocked requests, maybe an app or their server check location of client(has different servers for regions)

[poganytamas]

@Alex-302 I managed to track the issue down with AdGuard Home.
Your DNS server 176.103.130.130 is blocking the domain hbo-playready.drmkeyserver.com which is a CNAME to license-eu-tokyo.drmkeyserver.com which should resolve to IP 35.157.204.197 and 35.157.212.176. Please see the attached picture that using your DNS this name is not resolving, using Google's it is resolving.

[Alex-302]

@poganytamastsys do you see this domain in the filtering log?
IP:3000

[poganytamas]

@Alex-302 : yes, I can see the domain hbo-playready.drmkeyserver.com in the Query log, and this is the only domain name that is blocked by DNS server 176.103.130.130

[Alex-302]

which rule blocks it? If the record is red, you will see it.

[poganytamas]

@Alex-302 : No rule blocks it using AdGuard Home. With this software, it works. Therefore I used it only to identify the domains what HBO Go uses. And the only blocked domain for DNS server 176.103.130.130 (which is a black box to me) is hbo-playready.drmkeyserver.com. All the other domains are resolvable.

[poganytamas]

In the end, the HBO Go DRM belongs to Amazon:
hbo-playready.drmkeyserver.com is a CNAME to license-eu-tokyo.drmkeyserver.com, which is 35.157.204.197 and 35.157.212.176. Checking with a reverse lookup:

• 35.157.204.197 is ec2-35-157-204-197.eu-central-1.compute.amazonaws.com
• 35.157.212.176 is ec2-35-157-212-176.eu-central-1.compute.amazonaws.com
  

[Alex-302]

Strange. Still can't reproduce:(

[ameshkov]

Something is wrong with the response indeed. We're looking into it, thanks for reporting it!

[poganytamas]

@ameshkov , @Alex-302 : not sure what was adjusted in the DNS server, but it has been working for at least 1.5 weeks now. I guess this issue can be closed now.