Yes, noticed the ARIN involvement, and went to wash my hands, so to speak. It's been a while since I was mucking about with DNS stuffs...
Aloha, Michael. -- Michael J Wise | Microsoft | Spam Analysis | "Your Spam Specimen Has Been Processed." | Got the Junk Mail Reporting Tool ? -----Original Message----- From: Doug Barton [mailto:dougb@dougbarton.email] Sent: Tuesday, March 8, 2016 1:24 PM To: Michael Wise <michael.w...@microsoft.com>; Tony Bunce <to...@go-concepts.com>; Michael Peddemors <mich...@linuxmagic.com>; mailop@mailop.org Subject: Re: [mailop] Google DNS Servers not returning results for Hotmail today? host isn't really designed for DNS debugging, beyond telling you what your resolver chain knows about the record you're asking for. In your examples it is helpfully showing you what it does know about the record, which it its PTR. In your dig example you're getting exactly what you asked for, "Tell me only about any RRSIG records for this label." There are none, so you got nothing back. Change your QTYPE to PTR and you'll get an answer. As was mentioned previously, the problem here was DNSSEC, but it was not at Microsoft's level. The problem was at ARIN, who apparently made an operational mistake with the https://na01.safelinks.protection.outlook.com/?url=65.in-addr.arpa&data=01%7c01%7cMichael.Wise%40microsoft.com%7c5c1067b93b8f4bc3e5d208d34797f78c%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=UYYEiE6s6ZKcMdMxdYZHm9JOEun5e6qfJJruLRW3dkk%3d zone. Doug On 03/07/2016 03:03 PM, Michael Wise wrote: > Not sure what’s going on here, but … this command returns nothing: > > $ dig -t RRSIG > https://na01.safelinks.protection.outlook.com/?url=87.169.55.65.in-addr.arpa&data=01%7c01%7cMichael.Wise%40microsoft.com%7c5c1067b93b8f4bc3e5d208d34797f78c%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=WZxuXCnXSptFWkcTfZU7YX7SHhcSdPq1WbUdIrvs4Mk%3d > +short > > Whereas the first three seem to be returning wrong information, but that > might be an artifact of my home server’s host command? > > $ host -t RRSIG 65.55.169.87 > > https://na01.safelinks.protection.outlook.com/?url=87.169.55.65.in-addr.arpa&data=01%7c01%7cMichael.Wise%40microsoft.com%7c5c1067b93b8f4bc3e5d208d34797f78c%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=WZxuXCnXSptFWkcTfZU7YX7SHhcSdPq1WbUdIrvs4Mk%3d > domain name pointer > mail-bl2on0087.outbound.protection.outlook.com. > > darkthorne:~ bofh$ host 65.55.169.87 > > https://na01.safelinks.protection.outlook.com/?url=87.169.55.65.in-addr.arpa&data=01%7c01%7cMichael.Wise%40microsoft.com%7c5c1067b93b8f4bc3e5d208d34797f78c%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=WZxuXCnXSptFWkcTfZU7YX7SHhcSdPq1WbUdIrvs4Mk%3d > domain name pointer > mail-bl2on0087.outbound.protection.outlook.com. > > darkthorne:~ bofh$ host -t DNSKEY 65.55.169.87 > > https://na01.safelinks.protection.outlook.com/?url=87.169.55.65.in-addr.arpa&data=01%7c01%7cMichael.Wise%40microsoft.com%7c5c1067b93b8f4bc3e5d208d34797f78c%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=WZxuXCnXSptFWkcTfZU7YX7SHhcSdPq1WbUdIrvs4Mk%3d > domain name pointer > mail-bl2on0087.outbound.protection.outlook.com. > > darkthorne:~ bofh$ host -t DNSKEY > https://na01.safelinks.protection.outlook.com/?url=hotmail.com&data=01%7c01%7cMichael.Wise%40microsoft.com%7c5c1067b93b8f4bc3e5d208d34797f78c%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=UCymbavgmIKkAnlx1Uipma3TZNODYWM1O3opFyNqGCo%3d > > https://na01.safelinks.protection.outlook.com/?url=hotmail.com&data=01%7c01%7cMichael.Wise%40microsoft.com%7c5c1067b93b8f4bc3e5d208d34797f78c%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=UCymbavgmIKkAnlx1Uipma3TZNODYWM1O3opFyNqGCo%3d > has no DNSKEY record > > Aloha, > > Michael. > > -- > > Michael J Wise | Microsoft | Spam Analysis | "Your Spam Specimen Has > Been Processed." | Got the Junk Mail Reporting Tool ? _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
