after experiencing ddos dns amplification attack, 8.8.8.8 and 8.8.4.4 seem to deny our dns queries (udp).
# /usr/sbin/traceroute -n -w 2 -m 30
dns.googletraceroute to
dns.google (8.8.8.8), 30 hops max, 60 byte packets
1 212.14.52.81 0.255 ms 0.265 ms 0.259 ms
2 213.155.191.254 0.325 ms 0.326 ms 0.329 ms
3 89.46.144.185 8.371 ms 8.368 ms 8.351 ms
4 142.251.253.223 9.309 ms 192.178.99.191 8.435 ms 142.251.253.223 9.367 ms
5 142.250.239.81 8.655 ms 72.14.237.17 8.534 ms 142.250.239.81 8.636 ms
6 8.8.8.8 8.455 ms 8.515 ms 8.474 ms