Not sure what’s going on here, but … this command returns nothing:
$ dig -t RRSIG 87.169.55.65.in-addr.arpa +short Whereas the first three seem to be returning wrong information, but that might be an artifact of my home server’s host command? $ host -t RRSIG 65.55.169.87 87.169.55.65.in-addr.arpa domain name pointer mail-bl2on0087.outbound.protection.outlook.com. darkthorne:~ bofh$ host 65.55.169.87 87.169.55.65.in-addr.arpa domain name pointer mail-bl2on0087.outbound.protection.outlook.com. darkthorne:~ bofh$ host -t DNSKEY 65.55.169.87 87.169.55.65.in-addr.arpa domain name pointer mail-bl2on0087.outbound.protection.outlook.com. darkthorne:~ bofh$ host -t DNSKEY hotmail.com hotmail.com has no DNSKEY record Aloha, Michael. -- Michael J Wise | Microsoft | Spam Analysis | "Your Spam Specimen Has Been Processed." | Got the Junk Mail Reporting Tool ? -----Original Message----- From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Tony Bunce Sent: Monday, March 7, 2016 2:44 PM To: Michael Peddemors <mich...@linuxmagic.com>; mailop@mailop.org Subject: Re: [mailop] Google DNS Servers not returning results for Hotmail today? I just disabled DNSSEC validation on all of our resolvers and that appears to have fixed the problem for us. I’m far from a DNSSEC expert but I think the issue is with the entire https://na01.safelinks.protection.outlook.com/?url=65.in-addr.arpa&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=eKoZn8aIEUUzdFfiT2Ic222QQQho6%2fhE4LHi95Mi5MQ%3d zone. I can reproduce the issue on any PTR record inside of https://na01.safelinks.protection.outlook.com/?url=65.0.0.0%2f8.&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=4xTa2qddYpUkEUqQG6wvREAzVJuVQP5jHc9XzaHg988%3d -Tony -----Original Message----- From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Michael Peddemors Sent: Monday, March 7, 2016 5:35 PM To: mailop@mailop.org<mailto:mailop@mailop.org> Subject: Re: [mailop] Google DNS Servers not returning results for Hotmail today? michael@mistress:~$ host 65.55.90.110 https://na01.safelinks.protection.outlook.com/?url=110.90.55.65.in-addr.arpa&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=JQ31EN4jPO%2bbmfwxRZu4igbDBpWZJhwGicilcSVn11I%3d domain name pointer snt004-omc2s35.hotmail.com. michael@mistress:~$ host 65.55.90.110 8.8.8.8 Using domain server: Name: 8.8.8.8 Address: 8.8.8.8#53 Aliases: Host https://na01.safelinks.protection.outlook.com/?url=110.90.55.65.in-addr.arpa&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=JQ31EN4jPO%2bbmfwxRZu4igbDBpWZJhwGicilcSVn11I%3d not found: 2(SERVFAIL) On 16-03-07 02:14 PM, Michael Wise wrote: > Hotmail doesn't publish any DNSSEC records. > > Neither does > https://na01.safelinks.protection.outlook.com/?url=Microsoft.com&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=elP2O0lIMZCyLhxLdibWgySnkWE7KcFe%2b60f3ATilwM%3d, > etc.... > > As for the rDNS, this is from my home server: > > $ host 65.55.169.87 > > https://na01.safelinks.protection.outlook.com/?url=87.169.55.65.in-addr.arpa&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=deUPZh%2fHtR9UoG%2bLW6tLOfFXgLs3xtP6CQW8F93oL%2f8%3d > domain name pointer > mail-bl2on0087.outbound.protection.outlook.com. > > Aloha, > > Michael. > > -- > > Michael J Wise | Microsoft | Spam Analysis | "Your Spam Specimen Has > Been Processed." | Got the Junk Mail Reporting Tool ? > > -----Original Message----- > From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Tony Bunce > Sent: Monday, March 7, 2016 1:56 PM > To: Michael Peddemors > <mich...@linuxmagic.com<mailto:mich...@linuxmagic.com>>; mailop > <mailop@mailop.org<mailto:mailop@mailop.org>> > Subject: Re: [mailop] Google DNS Servers not returning results for > Hotmail today? > > We are seeing similar issues on Office 365 mail. > > We are getting SERVFAIL on reverse DNS lookups, both using our resolvers > as well as testing against Google. > > It looks DNSSEC related: > > https://na01.safelinks.protection.outlook.com/?url=87.169.55.65.in-addr.arpa&data=01%7c01%7cmichael.wise%40microsoft.com%7c44129af38f454438da6b08d346d43c41%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=orZOsyfUwl8QutwjS33FHJ1lGr%2fkG2mP9D7cPpXW2F8%3d > PTR: bad cache hit > (https://na01.safelinks.protection.outlook.com/?url=55.65.in-addr.arpa%2fDS&data=01%7c01%7cmichael.wise%40microsoft.com%7c44129af38f454438da6b08d346d43c41%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=zLpvVVaYnzIbpAu%2fJHl6qPl0e%2fGhRiOBqfY9J1waEoY%3d) > > With checks disabled the query works: > > dig -x 65.55.169.63 +cd > > This looks like something is not right: > > https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fdnsviz.net%2fd%2f55.65.in-addr.arpa%2fdnssec%2f&data=01%7c01%7cmichael.wise%40microsoft.com%7c44129af38f454438da6b08d346d43c41%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=d3aCKTnyI0a1w6CjpyIfs2S1o49kxgBa1cULgt5ViAM%3d > > -Tony > > -----Original Message----- > > From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Michael > Peddemors > > Sent: Monday, March 7, 2016 4:29 PM > > To: mailop <mailop@mailop.org > <mailto:mailop@mailop.org<mailto:mailop@mailop.org%20%3cmailto:mailop@mailop.org>>> > > Subject: [mailop] Google DNS Servers not returning results for Hotmail > today? > > Had several reports of DNS oddities from the Google DNS servers, from > > customers/clients who use them as the default. > > Are they in the middle of a move/change? > > _______________________________________________ > > mailop mailing list > > mailop@mailop.org<mailto:mailop@mailop.org> <mailto:mailop@mailop.org> > > https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fchilli.nosignal.org%2fcgi-bin%2fmailman%2flistinfo%2fmailop%0a&data=01%7c01%7cmichael.wise%40microsoft.com%7c44129af38f454438da6b08d346d43c41%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=TOT%2fu4LSpF0EsgiWOCr5HQAWkkjjWVjhnaTglzYtMTA%3d > > > > _______________________________________________ > mailop mailing list > mailop@mailop.org<mailto:mailop@mailop.org> > https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fchilli.nosignal.org%2fcgi-bin%2fmailman%2flistinfo%2fmailop&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=J6MShqG24UB9DYZmdcZjKz3y63xGO96QMeuztjrvsh8%3d > -- "Catch the Magic of Linux..." ------------------------------------------------------------------------ Michael Peddemors, President/CEO LinuxMagic Inc. Visit us at https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.linuxmagic.com&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=LrGd2K0Qrr2F8WmNvtGDoqyPEYb0voQssOs75wgkPfA%3d @linuxmagic ------------------------------------------------------------------------ A Wizard IT Company - For More Info https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.wizard.ca&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=EhAF0anJshlvdmrKvDu2g0JQmrhKjUooKwG7DjjjuHI%3d "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd. ------------------------------------------------------------------------ 604-682-0300 Beautiful British Columbia, Canada This email and any electronic data contained are confidential and intended solely for the use of the individual or entity to which they are addressed. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company. _______________________________________________ mailop mailing list mailop@mailop.org<mailto:mailop@mailop.org> https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fchilli.nosignal.org%2fcgi-bin%2fmailman%2flistinfo%2fmailop&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=J6MShqG24UB9DYZmdcZjKz3y63xGO96QMeuztjrvsh8%3d _______________________________________________ mailop mailing list mailop@mailop.org<mailto:mailop@mailop.org> https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fchilli.nosignal.org%2fcgi-bin%2fmailman%2flistinfo%2fmailop%0a&data=01%7c01%7cmichael.wise%40microsoft.com%7ce6cb1e9eb28e4eb3f79608d346dadf8f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=Z%2feVFWYLmvFb2q7ZMhLU5Kcvo%2baqAqSZ744b3lIAJFU%3d
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
