[swinog] Re: Swisscom DNS issue: spectrum-conference.org wrongfully resolves to a bluewin address in swisscom mobile networks

Yes, I understand the technical issues. And yes it's ugly. But do you have a better solution? Swisscom should stop tampering with DNS, as it does not work, and is no solution to the problem. I disagree, Swisscom still misses a lot of phishing and malware websites. I would like them to be wa

[swinog] Re: Swisscom DNS issue: spectrum-conference.org wrongfully resolves to a bluewin address in swisscom mobile networks

Try http://195.186.208.193/ Daniel On 23.04.2024 08:40, Marc Balmer wrote: Swisscom returns this IP address for blocked domain names most likely because it assumes this website is compromised (phishing, malware). If you visit this IP address in a web browser you are redirected to https://w

[swinog] Re: Swisscom DNS issue: spectrum-conference.org wrongfully resolves to a bluewin address in swisscom mobile networks

Swisscom returns this IP address for blocked domain names most likely because it assumes this website is compromised (phishing, malware). If you visit this IP address in a web browser you are redirected to https://www.swisscom.ch/abuse-info This website has a form to report false positive. D

[swinog] Re: Debugging bluewin.ch emails not going through

at least one delegation is broken: ns1.init7.net: 200-30.135.144.213.in-addr.arpa. 86400 IN NSdns.nazgul.ch. 200-30.135.144.213.in-addr.arpa. 86400 IN NSdns.swill.org. dig dns.swill.org ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16024 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AU

[swinog] Operational announcement: transition from NSEC3 to NSEC in the CH/LI zone

Hi list, We plan a DNSSEC signing change for the ch. and li. zone files. Introduction: Both NSEC and NSEC3 are mechanisms that provide signed DNS records as proof of non-existence for a given name or associated Resource Record Type in a DNSSEC signed zone. While they serve the same primary pur

[swinog] Re: Swiss Domain Security Report Q3 2022

Hi Adrian, On 07.06.23 21:33, Adrian Ulrich via swinog wrote: I'm pretty surprised that of the 1.7M domains with an MX record, only 57% have DKIM I don't see how one could reliability gather this data from DNS: DKIM allows you to specify a selector in the header of the mail: This mail for

[swinog] Re: DNSSEC auto-disabled by SWITCH on some .ch domains?

On 01.05.23 15:48, Benoît Panizzon via swinog wrote: It looks like Gandi at least messed up their Registrar UI. From their point of view, my 'algo 5' .ch domains have still DNSSEC active but deleting DS or disabling DNSSEC hangs forever and upon reloading my old algo 5 keys are back. I guess t

[swinog] Re: DNSSEC auto-disabled by SWITCH on some .ch domains?

I wasn't a part of this procedure so I cannot answer anything related to that. I can, however, respond to questions for which we make information available online. If you want specific information about the procedure I suggest you ask your registrar or you can contact SWITCH at regis...@nic.ch

[swinog] Re: DNSSEC issue with swizzonic DNS servers?

Hi Benoit Not sure what the original problem was on the 27th of Dec but the current problem is as follow: numberportability.ch has an NSEC negative proof at the zone apex which states that there are no other hostnames then numberportability.ch itself. dig @dns1.swizzonic.ch numberportabilit