DNS 用 tcp 的方式已经无法解析了

用境外 dns 解析敏感域名直接 connection reset

dig www.facebook.com @8.8.8.8 +tcp
;; communications error to 8.8.8.8#53: connection reset

dig www.google.ae @1.1.1.1 +tcp
;; communications error to 1.1.1.1#53: connection reset

非敏感域名正常
dig www.qq.com @1.1.1.1 +tcp

; <<>> DiG 9.10.6 <<>> www.qq.com @1.1.1.1 +tcp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21126
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1452
;; QUESTION SECTION:
;www.qq.com. IN A

;; ANSWER SECTION:
www.qq.com. 300 IN CNAME news.qq.com.edgekey.net.
news.qq.com.edgekey.net. 3685 IN CNAME e6156.dscf.akamaiedge.net.
e6156.dscf.akamaiedge.net. 6 IN A 59.151.129.125

;; Query time: 258 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Mon Jan 28 09:16:59 CST 2019
;; MSG SIZE rcvd: 128