Analyze this.
Query MX dns.com
Response MX nullmx.domainmanager.com
Query A nullmx.domainmanager.com
Response CNAME mta.dewile.net, A 64.40.103.249
See attached network trace.
No. Time Source Destination Protocol Info
1 0.000000 192.168.1.16 64.40.103.249 DNS
Standard query MX dns.com
Frame 1 (67 bytes on wire, 67 bytes captured)
Ethernet II, Src: Usi_de:94:de (00:10:c6:de:94:de), Dst: Actionte_51:fa:72
(00:18:01:51:fa:72)
Internet Protocol, Src: 192.168.1.16 (192.168.1.16), Dst: 64.40.103.249
(64.40.103.249)
User Datagram Protocol, Src Port: ltp (4044), Dst Port: domain (53)
Domain Name System (query)
[Response In: 2]
Transaction ID: 0x0008
Flags: 0x0100 (Standard query)
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
dns.com: type MX, class IN
Name: dns.com
Type: MX (Mail exchange)
Class: IN (0x0001)
No. Time Source Destination Protocol Info
2 0.016776 64.40.103.249 192.168.1.16 DNS
Standard query response MX 0 nullmx.domainmanager.com
Frame 2 (104 bytes on wire, 104 bytes captured)
Ethernet II, Src: Actionte_51:fa:72 (00:18:01:51:fa:72), Dst: Usi_de:94:de
(00:10:c6:de:94:de)
Internet Protocol, Src: 64.40.103.249 (64.40.103.249), Dst: 192.168.1.16
(192.168.1.16)
User Datagram Protocol, Src Port: domain (53), Dst Port: ltp (4044)
Domain Name System (response)
[Request In: 1]
[Time: 0.016776000 seconds]
Transaction ID: 0x0008
Flags: 0x8500 (Standard query response, No error)
Questions: 1
Answer RRs: 1
Authority RRs: 0
Additional RRs: 0
Queries
dns.com: type MX, class IN
Name: dns.com
Type: MX (Mail exchange)
Class: IN (0x0001)
Answers
dns.com: type MX, class IN, preference 0, mx nullmx.domainmanager.com
Name: dns.com
Type: MX (Mail exchange)
Class: IN (0x0001)
Time to live: 1 hour
Data length: 25
Preference: 0
Mail exchange: nullmx.domainmanager.com
No. Time Source Destination Protocol Info
3 2.478114 192.168.1.16 64.40.103.249 DNS
Standard query A nullmx.domainmanager.com
Frame 3 (84 bytes on wire, 84 bytes captured)
Ethernet II, Src: Usi_de:94:de (00:10:c6:de:94:de), Dst: Actionte_51:fa:72
(00:18:01:51:fa:72)
Internet Protocol, Src: 192.168.1.16 (192.168.1.16), Dst: 64.40.103.249
(64.40.103.249)
User Datagram Protocol, Src Port: acp-proto (4046), Dst Port: domain (53)
Domain Name System (query)
[Response In: 4]
Transaction ID: 0x0006
Flags: 0x0100 (Standard query)
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
nullmx.domainmanager.com: type A, class IN
Name: nullmx.domainmanager.com
Type: A (Host address)
Class: IN (0x0001)
No. Time Source Destination Protocol Info
4 0.016820 64.40.103.249 192.168.1.16 DNS
Standard query response CNAME mta.dewile.net A 64.40.103.249
Frame 4 (128 bytes on wire, 128 bytes captured)
Ethernet II, Src: Actionte_51:fa:72 (00:18:01:51:fa:72), Dst: Usi_de:94:de
(00:10:c6:de:94:de)
Internet Protocol, Src: 64.40.103.249 (64.40.103.249), Dst: 192.168.1.16
(192.168.1.16)
User Datagram Protocol, Src Port: domain (53), Dst Port: acp-proto (4046)
Domain Name System (response)
[Request In: 3]
[Time: 0.016820000 seconds]
Transaction ID: 0x0006
Flags: 0x8500 (Standard query response, No error)
Questions: 1
Answer RRs: 2
Authority RRs: 0
Additional RRs: 0
Queries
nullmx.domainmanager.com: type A, class IN
Name: nullmx.domainmanager.com
Type: A (Host address)
Class: IN (0x0001)
Answers
nullmx.domainmanager.com: type CNAME, class IN, cname mta.dewile.net
Name: nullmx.domainmanager.com
Type: CNAME (Canonical name for an alias)
Class: IN (0x0001)
Time to live: 1 minute
Data length: 16
Primary name: mta.dewile.net
mta.dewile.net: type A, class IN, addr 64.40.103.249
Name: mta.dewile.net
Type: A (Host address)
Class: IN (0x0001)
Time to live: 1 hour
Data length: 4
Addr: 64.40.103.249
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
