Windows 10 Windows store, xbox, companion app doesnt work with local DNS server but everything else works

  • Thread starter Thread starter Filip.fitom
  • Start date Start date
F

Filip.fitom

I have very strange problem. I'm using dnscrypt for many years and now when i moved to win10 and tried to check windows store and xbox (game pass) i cant access them. Internet and everything else is working fine (including windows updates)

Network status in settings app is showing all fine "you are connected to internet" , no yellow exclamation mark on connection icon.

First I suspected dnscrypt proxy, to mishandle some queries coming from store apps and to be at fault but with further troubleshooting it has to be something with store [apps] and how they resolve stuff or something. As for everything else DNS is flawless.


Problem:

With dns server configured on local address (@127.), windows store wont connect (its usual nw errors like Code: 0x00000194) - store is OK initially i did numerous store troubleshooting reinstalling, purging cache etc but thats not the problem here - when i start xbox companion app it is unable to connect - it just shows "welcome back" (like I'm logged) but when i click "lets play" it just blinks back to login prompt and "we cant sign you in right now try again later"



workaround:

If I put 8.8.8.8 or 1.1.1.1 etc as DNS everything suddenly works fine.


Config:

So my DNS server setting is 127.0.0.9 (where dnscrypt listens and forwards queries to public resolvers) , I have also disabled windows native "dnscache" service, as dnscrypt does caching itself. However there seems to be bug with dnscache disabled as ipconfig /all no longer shows dns servers, its also not showed in network connections and clicking on nw adapter -> status , it DNS server info is empty.

I also have ipv6 disabled.

Win10 x64 1909 18363.815


<code>

C:\Windows\System\BIND9.14.9.x64>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : name
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter doma:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe GbE Family Controller
Physical Address. . . . . . . . . : XXXXX
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.0.33(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter VirtualBox Host-Only Network:
</code>


there is no DNS server info in output, neither with /displaydns - as this relies on dnscache service (which is not good imo)


<code>

C:\Windows\System\BIND9.14.9.x64>ipconfig /displaydns

Windows IP Configuration

Could not display the DNS Resolver Cache.

</code>


same with powershell

<code>

PS C:\Windows\system32> get-netipconfiguration
InterfaceAlias : doma
InterfaceIndex : 9
InterfaceDescription : Realtek PCIe GbE Family Controller
NetProfile.Name : Network 4
IPv4Address : 192.168.0.33
IPv4DefaultGateway : 192.168.0.1
DNSServer :
</code>


DNS works:

C:\Windows\System\BIND9.14.9.x64>nslookup microsoft.com
Server: 127.0.0.9
Address: 127.0.0.9#53

Non-authoritative answer:
Name: microsoft.com
Address: 13.77.161.179
Name: microsoft.com
Address: 40.76.4.15

.....


I ruled out dnscrypt proxy issue by

a) running unbound resolver @127.0.0.4, which forwarded queries to dnscrypt 127.0.0.9

b) running unbound resolver @127.0.0.4, which forwarded queries to public DNS like 1.1.1.1

In both cases problem persists. So it must be flaw in store/xbox (possibly other store apps but i dont use anything else) as 1.1.1.1 works perfectly fine but if its "routed" via local unbound DNS apps dont work.

Good third test would be if I could run unbound/dnscrypt at some public IP but I dont have any PC/server outside my lan.


Any idea what could be wrong?

Continue reading...
 
Back
Top