Interesting find, thanks!

On Tue, Jun 20, 2023 at 10:35 AM Mark Alley via mailop <mailop@mailop.org>
wrote:

> Looks specific to several of their NS' in the "u06" subdomain. Everything
> returned from the "r06" servers resolves correctly.
>
> a.u06.twtrdns.net
>
> b.u06.twtrdns.net
>
> c.u06.twtrdns.net
>
> d.u06.twtrdns.net
> On 6/20/2023 11:17 AM, Tom Bartel via mailop wrote:
>
> Twitter seems to have copy/pasted quoted string into "some" of the DNS
> servers such that were logging copious errors. Anyone else seeing this?
> Bad record:
>
> dig dkim-201406._domainkey.twitter.com txt
>
> ; <<>> DiG 9.10.6 <<>> dkim-201406._domainkey.twitter.com txt
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1956
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4000
> ;; QUESTION SECTION:
> ;dkim-201406._domainkey.twitter.com. IN       TXT
>
> ;; ANSWER SECTION:
> dkim-201406._domainkey.twitter.com. 60 IN TXT "\"v=DKIM1; 
> p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe34ubzrMzM9sT0XVkcc3UXd7W+EHCyHoqn70l2AxXox52lAZzH/UnKwAoO+5qsuP7T9QOifIJ9ddNH9lEQ95Y/GdHBsPLGdgSJIs95mXNxscD6MSyejpenMGL9TPQAcxfqY5xPViZ+1wA1qcr\"
>  \"yjdZKRqf1f4fpMY+x3b8k7H5Qyf/Smz0sv4xFsx1r+THNIz0rz" 
> "k2LO3GvE0f1ybp6P+5eAelYU4mGeZQqsKw/eB20I3jHWEyGrXuvzB67nt6ddI+N2eD5K38wg/aSytOsb5O+bUSEe7P0zx9ebRRVknCD6uuqG3gSmQmttlD5OrMWSXzrPIXe8eTBaaPd+e/jfxwIDAQAB\""
>
> ;; Query time: 170 msec
> ;; SERVER: 10.1.5.4#53(10.1.5.4)
> ;; WHEN: Tue Jun 20 12:08:03 -03 2023
> ;; MSG SIZE  rcvd: 485
>
> Bad record:
>
> dig dkim-201406._domainkey.twitter.com txt +short
> "\"v=DKIM1; 
> p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe34ubzrMzM9sT0XVkcc3UXd7W+EHCyHoqn70l2AxXox52lAZzH/UnKwAoO+5qsuP7T9QOifIJ9ddNH9lEQ95Y/GdHBsPLGdgSJIs95mXNxscD6MSyejpenMGL9TPQAcxfqY5xPViZ+1wA1qcr\"
>  \"yjdZKRqf1f4fpMY+x3b8k7H5Qyf/Smz0sv4xFsx1r+THNIz0rz" 
> "k2LO3GvE0f1ybp6P+5eAelYU4mGeZQqsKw/eB20I3jHWEyGrXuvzB67nt6ddI+N2eD5K38wg/aSytOsb5O+bUSEe7P0zx9ebRRVknCD6uuqG3gSmQmttlD5OrMWSXzrPIXe8eTBaaPd+e/jfxwIDAQAB\""
>
> Good record:
>
> dig dkim-201406._domainkey.twitter.com txt
>
> ; <<>> DiG 9.10.6 <<>> dkim-201406._domainkey.twitter.com txt
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25524
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4000
> ;; QUESTION SECTION:
> ;dkim-201406._domainkey.twitter.com. IN       TXT
>
> ;; ANSWER SECTION:
> dkim-201406._domainkey.twitter.com. 6 IN TXT  "v=DKIM1; 
> p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe34ubzrMzM9sT0XVkcc3UXd7W+EHCyHoqn70l2AxXox52lAZzH/UnKwAoO+5qsuP7T9QOifIJ9ddNH9lEQ95Y/GdHBsPLGdgSJIs95mXNxscD6MSyejpenMGL9TPQAcxfqY5xPViZ+1wA1qcr"
>  
> "yjdZKRqf1f4fpMY+x3b8k7H5Qyf/Smz0sv4xFsx1r+THNIz0rzk2LO3GvE0f1ybp6P+5eAelYU4mGeZQqsKw/eB20I3jHWEyGrXuvzB67nt6ddI+N2eD5K38wg/aSytOsb5O+bUSEe7P0zx9ebRRVknCD6uuqG3gSmQmttlD5OrMWSXzrPIXe8eTBaaPd+e/jfxwIDAQAB"
>
> ;; Query time: 191 msec
> ;; SERVER: 10.1.5.4#53(10.1.5.4)
> ;; WHEN: Tue Jun 20 12:03:30 -03 2023
> ;; MSG SIZE  rcvd: 480
>
> Good record:
>
> dig scph0618._domainkey.i.drop.com txt +short
> "v=DKIM1; k=rsa; h=sha256; 
> p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsj4i57bbiuDFupkAlTYX3E/DD6eq+kcr3KQ5MnbdIXIUYTC1cJ0AhMCv2HHJxztIsFt6HlQUF2GOVrxKX3UUibf9Gmum7GHVqms5/Ok+2m1/sRqOcqYwR4Xt67N5cyiTViURMuWcUOK5bTp3+WQR8/FjlUXPvTdhma7Rvs4qznwIDAQAB"
>
>
> --
> Phone: 303.517.9655
> Instagram: https://instagram.com/bartel_photo
>
> "Life's most persistent and urgent question is, 'What are you doing for
> others?'" - Martin Luther King Jr.
>
> _______________________________________________
> mailop mailing listmailop@mailop.orghttps://list.mailop.org/listinfo/mailop
>
> _______________________________________________
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>


-- 
Phone: 303.517.9655
Instagram: https://instagram.com/bartel_photo

"Life's most persistent and urgent question is, 'What are you doing for
others?'" - Martin Luther King Jr.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to