Roku 1 Netflix app hanging on splash - reason & tech info

Problem: Netflix App Hanging On Roku in UK
Issue: Works fine with TalkTalk UK's DNS server, fails with Google's open DNS (and others)

Diagnostics & proof:

Test with TalkTalk UK's normal DNS server....

sudo ./dnschef.py -i 192.168.81.12 --nameservers=62.24.134.1
          _                _          __
         | | version 0.2  | |        / _|
       __| |_ __  ___  ___| |__   ___| |_
      / _` | '_ \/ __|/ __| '_ \ / _ \  _|
     | (_| | | | \__ \ (__| | | |  __/ |
      \__,_|_| |_|___/\___|_| |_|\___|_|
                   iphelix@thesprawl.org

[*] DNSChef started on interface: 192.168.81.12
[*] Using the following nameservers: 62.24.134.1
[*] No parameters were specified. Running in full proxy mode
[15:37:57] 192.168.81.30: proxying the response of type 'A' for cloudservices.roku.com
[15:37:58] 192.168.81.30: proxying the response of type 'A' for api.roku.com
[15:38:00] 192.168.81.30: proxying the response of type 'A' for cloudservices.roku.com
[15:38:01] 192.168.81.30: proxying the response of type 'A' for api.roku.com
[15:38:02] 192.168.81.30: proxying the response of type 'A' for cloudservices.roku.com
[15:38:10] 192.168.81.30: proxying the response of type 'A' for nccp-nrdp-31.cloud.netflix.net
[15:38:11] 192.168.81.30: proxying the response of type 'A' for api.netflix.com
[15:38:11] 192.168.81.30: proxying the response of type 'A' for api-global.netflix.com
[15:38:15] 192.168.81.30: proxying the response of type 'A' for cdn0.nflximg.net
[15:38:15] 192.168.81.30: proxying the response of type 'A' for cdn1.nflximg.net
[15:38:15] 192.168.81.30: proxying the response of type 'A' for cdn0.nflximg.net
[15:38:15] 192.168.81.30: proxying the response of type 'A' for cdn0.nflximg.net
[15:38:15] 192.168.81.30: proxying the response of type 'A' for cdn1.nflximg.net
[15:38:15] 192.168.81.30: proxying the response of type 'A' for cdn0.nflximg.net
[15:38:15] 192.168.81.30: proxying the response of type 'A' for cdn1.nflximg.net
[15:38:15] 192.168.81.30: proxying the response of type 'A' for cdn1.nflximg.net
[15:38:15] 192.168.81.30: proxying the response of type 'A' for cdn0.nflximg.net
[15:38:17] 192.168.81.30: proxying the response of type 'A' for cdn0.nflximg.net
[15:38:18] 192.168.81.30: proxying the response of type 'A' for cdn1.nflximg.net
[15:38:18] 192.168.81.30: proxying the response of type 'A' for cdn1.nflximg.net
[15:38:19] 192.168.81.30: proxying the response of type 'A' for cdn1.nflximg.net
[15:38:19] 192.168.81.30: proxying the response of type 'A' for cdn0.nflximg.net
[15:38:19] 192.168.81.30: proxying the response of type 'A' for cdn1.nflximg.net

Success!

Test with Google's nameservers...

sudo ./dnschef.py -i 192.168.81.12 --nameservers=8.8.8.8
          _                _          __
         | | version 0.2  | |        / _|
       __| |_ __  ___  ___| |__   ___| |_
      / _` | '_ \/ __|/ __| '_ \ / _ \  _|
     | (_| | | | \__ \ (__| | | |  __/ |
      \__,_|_| |_|___/\___|_| |_|\___|_|
                   iphelix@thesprawl.org

[*] DNSChef started on interface: 192.168.81.12
[*] Using the following nameservers: 8.8.8.8
[*] No parameters were specified. Running in full proxy mode
[15:39:21] 192.168.81.30: proxying the response of type 'A' for cloudservices.roku.com
[15:39:22] 192.168.81.30: proxying the response of type 'A' for channels.roku.com
[15:39:23] 192.168.81.30: proxying the response of type 'A' for api.roku.com
[15:39:23] 192.168.81.30: proxying the response of type 'A' for channels.roku.com
[15:39:25] 192.168.81.30: proxying the response of type 'A' for cloudservices.roku.com
[15:39:26] 192.168.81.30: proxying the response of type 'A' for api.roku.com
[15:39:28] 192.168.81.30: proxying the response of type 'A' for cloudservices.roku.com
[15:39:36] 192.168.81.30: proxying the response of type 'A' for nccp-nrdp-31.cloud.netflix.net
[15:39:37] 192.168.81.30: proxying the response of type 'A' for redirects-eu.nccp.netflix.com
[15:39:38] 192.168.81.30: proxying the response of type 'A' for api.netflix.com
[15:39:38] 192.168.81.30: proxying the response of type 'A' for api-global.netflix.com
[15:39:41] 192.168.81.30: proxying the response of type 'A' for api-eu.netflix.com

Hangs at the start red netflix splash screen.

Note the EU redirections!

Roku Model: UK Roku 1 / 2710X
Firmware: version 5.5 * build 321
Netflix App: Version 3.1 | 12 July 2014
ISP: TalkTalk UK

My current netblock-

% Information related to '78.144.0.0 - 78.147.255.255'

% Abuse contact for '78.144.0.0 - 78.147.255.255' is 'abuse@talktalkplc.com'

inetnum:        78.144.0.0 - 78.147.255.255
netname:        OPAL-DSL
descr:          Opal Telecom DSL
country:        GB
admin-c:        PM58-RIPE
admin-c:        GD1052-RIPE
tech-c:         PM58-RIPE
tech-c:         GD1052-RIPE
status:         ASSIGNED PA
mnt-by:         OPAL-MNT
source:         RIPE  Filtered

person:         Gavin Ditchfield
address:        TalkTalk Communications Limited
address:        Northbank Industrial Estate
address:        Irlam
address:        Manchester
address:        M44 5BL
address:        United Kingdom
phone:          +44 161 222-2000
fax-no:         +44 161 222-2008
nic-hdl:        GD1052-RIPE
mnt-by:         OPAL-MNT
source:         RIPE  Filtered

person:         Phill Magill
address:        TalkTalk Communications Limited
address:        Northbank Industrial Estate
address:        Irlam
address:        Manchester
address:        M44 5BL
address:        United Kingdom
phone:          +44 161 222-2000
fax-no:         +44 161 222-2008
nic-hdl:        PM58-RIPE
mnt-by:         OPAL-MNT
source:         RIPE  Filtered

% Information related to '78.144.0.0/14AS13285'

route:          78.144.0.0/14
descr:          Opal-Net Autonomous System
origin:         AS13285
mnt-by:         OPAL-MNT
source:         RIPE  Filtered

% This query was served by the RIPE Database Query Service version 1.73.1 (DB-3)

- geekycow 15/07/2014