On Tue, 16 Jan 2007, Wes Hardaker wrote:
>
>
> A number of ISPs use njabl.org as a DNS BL server. However, starting
> jan 2 a new domain exists "njalb.org" which is serving A records for
> anything queried against it's DNS server. (note the difference: njaBL
> vs njaLB). Previous to this date a misconfigured ISP was just not
> being protected by the BL. Now, it's potentially dropping all mail
> from anyone because of the typo.
>
> # dig +short mail.merit.edu a
> 198.108.1.11
>
> # dig +short 11.1.108.198.combined.njabl.org
>
> # dig +short 11.1.108.198.combined.njalb.org
> 64.20.43.107
> 66.45.232.66
> 66.45.232.75
> 66.45.237.187
right, these are those pesky njiix.net 'dns servers' that send the same 4
A's for any request. I suspect their zone config is:
* IN A 64.20.43.107
IN A 66.45.232.66
IN A 66.45.232.75
IN A 66.45.237.187
in the root.zone file :(
