[94276] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

what happens when you put a typo in a DNSBL server?

daemon@ATHENA.MIT.EDU (Wes Hardaker)
Tue Jan 16 11:38:45 2007

From: Wes Hardaker <wjhns61@hardakers.net>
To: nanog@merit.edu
Date: Tue, 16 Jan 2007 08:36:03 -0800
Errors-To: owner-nanog@merit.edu



A number of ISPs use njabl.org as a DNS BL server.  However, starting
jan 2 a new domain exists "njalb.org" which is serving A records for
anything queried against it's DNS server.  (note the difference: njaBL
vs njaLB). Previous to this date a misconfigured ISP was just not
being protected by the BL.  Now, it's potentially dropping all mail
from anyone because of the typo.

# dig +short mail.merit.edu a
198.108.1.11

# dig +short 11.1.108.198.combined.njabl.org

# dig +short 11.1.108.198.combined.njalb.org
64.20.43.107
66.45.232.66
66.45.232.75
66.45.237.187


I know of at least one ISP that is likely dropping mail from
everyone...
-- 
"In the bathtub of history the truth is harder to hold than the soap,
 and much more difficult to find."  -- Terry Pratchett

home help back first fref pref prev next nref lref last post