I routinely find messages stuck in my sendmail queue with the error, "Deferred: Name server: outlook-com.olc.protection.outlook.com". This system uses unbound (with DNSSEC validation enabled -- perhaps not relevant) and the only way I was able to get one message I really needed to deliver was to temporarily aim resolv.conf at the google public dns resolver.

outlook.com has a MX to outlook-com.olc.protection.outlook.com and the NS records for olc.protection.outlook.com are in o365filtering.com which has "issues":

    https://dnsviz.net/d/o365filtering.com/dnssec/

An easy way to provoke this is to send a message to t...@outlook.com.

This has been broken for months and there are an impressive number of domains that use outlook.com for their mail...

Rather than go down the rabbit hole of trying to engage msn...@microsoft.com (which itself is broken for me) perhaps someone on this list can poke the right person at microsoft?

                Craig
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to