nanog mailing list archives

Re: what happens when you put a typo in a DNSBL server?


From: "Alexander Harrowell" <a.harrowell () gmail com>
Date: Tue, 16 Jan 2007 16:49:30 +0000


Let's all hope they don't think of the possibilities *too* quickly.

On 1/16/07, Wes Hardaker <wjhns61 () hardakers net> wrote:


A number of ISPs use njabl.org as a DNS BL server.  However, starting
jan 2 a new domain exists "njalb.org" which is serving A records for
anything queried against it's DNS server.  (note the difference: njaBL
vs njaLB). Previous to this date a misconfigured ISP was just not
being protected by the BL.  Now, it's potentially dropping all mail
from anyone because of the typo.

# dig +short mail.merit.edu a
198.108.1.11

# dig +short 11.1.108.198.combined.njabl.org

# dig +short 11.1.108.198.combined.njalb.org
64.20.43.107
66.45.232.66
66.45.232.75
66.45.237.187


I know of at least one ISP that is likely dropping mail from
everyone...
--
"In the bathtub of history the truth is harder to hold than the soap,
 and much more difficult to find."  -- Terry Pratchett



Current thread: