Some feeds are blocked in AntennaPod

[woj-tek]

It's starting to driving me nuts, while RethingDNS is enabled some feeds from AntennaPod are blocked, for example: http://api.rtve.es/api/programas/23730/audios.rss

I tried disabling everything in RethingDNS (Sky/ RDNS Plus - edit, deselect any list, apply) but still nothing.
Then I went to "Rules", Configuration and again disabled all rules - nothing, still error in AntennaPod

I disabled "Rules" completely and switched to "System DNS" at which point RethinkDNS should basically do nothing and it is still not working.

I restored the configuration and added AntennaPod to Permint/Exclude lists (my understanding is that it should not do anything to AP requests in that case) and it's not working.

At this point only completely disabling RDNS works...

[ignoramous]

Thanks.

I don't use AttenaPod, but realise that it is super popular. I'll test it one of these days.

AtennaPod is open source, yeah? It might be worth while asking the developers if AtennaPod is incompatible with local VPNs like Rethink.

[woj-tek]

Yes, AntennaPod is open source. I don't think it shouldn't be compatible with local VPNs. Besides, the problem is only with a couple of feeds, not all of them, which would suggest a rule being triggered (but I wasn't able to track which rule or where it was)

[ignoramous]

Can you share the feeds, please? Sounds like DNS getting in the way, but you already mentioned you removed all rules, so that's strange indeed.

[woj-tek]

I shared one of them in the first message: http://api.rtve.es/api/programas/23730/audios.rss

Is there some sort of cache that would cause similar issue?

[ignoramous]

Is there some sort of cache that would cause similar issue?

Android caches dns responses. Ideally, stop / start Rethink should clear those up.

Rethink also caches, if DNS Booster is enabled by the user (in v054, it is disabled by default). Tapping on the "refresh" icon in the DNS screen (top right of the screen) rids of the existing cache.

[woj-tek]

Android caches dns responses. Ideally, stop / start Rethink should clear those up.

Stop/starting Rethink didn't help.

I have Booster disabled.

Though, since yesterday I don't see the error. It's weird...

[Terrance]

I've also been having trouble with this -- one feed out of ten or so is getting blocked by Rethink, despite the domain being allowed. I know feeds often employ redirects for tracking, but I can't see any additional domains in the log that need unblocking.

AntennaPod errors out on episode downloads with:

The download was blocked by another app on your device (like a VPN or ad blocker).

Here's the code performing their check -- seems to be looking for an internal or zero IP address in the connection failure, so presumably Rethink is serving a 0.0.0.0 DNS record when it shouldn't be.

Pausing/stopping Rethink is sufficient to get the download to go through (without delay too -- doesn't seem like there's any cache to contend with).

Here, feeds.megaphone.fm is the RSS feed, and the other three are the redirects to the episode itself.

[Terrance]

Having dug the media URL out of AntennaPod's database backup and thrown it into curl, I can see there's an additional redirect from chrt.fm to traffic.megaphone.fm, where the latter is blocked by upstream DNS (I run a local Blocky DNS server with a couple of blocklists, and Rethink is configured to use it via DoH).

I guess the question then is why Rethink isn't showing this domain anywhere in the UI -- I would expect it to appear in the DNS panel as blocked by upstream?

[woj-tek]

Slightly extending the scope - I just tried accessing https://jedynka.polskieradio.pl/artykul/1128364,Poradnik-wyborczy-sprawdz-czy-jestes-w-spisie-wyborcow in Firefox (and Vivalding) and got network error. Rethink reported that websited is permitted... disabling Rethink and I was able to open it... there is something fishy going on here...

[ignoramous]

Rethink reported that websited is permitted... disabling Rethink and I was able to open it... there is something fishy going on here...

Do you have DNS Booster enabled? In v055 (not yet available on the PlayStore / F-Droid but should be in the coming days), we've fixed a grave bug where the DNS cache data was incorrectly stored in some very rare cases.

[woj-tek]

#964 (comment)

I have Booster disabled.

⬆️ no, I don't have booster from what I see :-)

[ignoramous]

Right... I can reproduce the issue with jedynka.polskieradio.pl. cURL on my PC loads it just fine while Chrome / Firefox with Rethink enabled can't.

My theory is jedynka.polskieradio.pl doesn't like TLS ClientHello packet split Rethink does (ref)... I have a fix for this in mind and will see if it works and report back. Might take a while though.

[woj-tek]

I updated to the latest version yesterday and today got update from rtve feed so it seems something got fixed.

polskie radio is still inaccesible though.

[ignoramous]

Thanks for reporting back. Pleasantly surprised that things have improved in v055 wrt connectivity.

polskie radio is still inaccesible though.

celzero/firestack@eecc668 has the fix. Will ship with v055a (hopefully, in two days from now as there are other severe bugs like #991 and #992).

[ignoramous]

Thanks a bunch everyone for helping us track this one down. It was really one of the more satisfying bugs to track down.

v055a has the fix. Please see if AntennaPod (feeds) work for you folks without any problems with Rethink enabled? If so, reopen this bug and we would be happy to take another look.

[Terrance]

Just to confirm (as it looks like a few of us may have reported some subtely different issues), my issue of upstream blocks not being reported is indeed fixed in v055a (now showing in the DNS tab of logs). 👍