I routinely find messages stuck in my sendmail queue with the error,
"Deferred: Name server: outlook-com.olc.protection.outlook.com". This
system uses unbound (with DNSSEC validation enabled -- perhaps not
relevant) and the only way I was able to get one message I really needed
to deliver was to temporarily aim resolv.conf at the google public dns
resolver.
outlook.com has a MX to outlook-com.olc.protection.outlook.com and the
NS records for olc.protection.outlook.com are in o365filtering.com which
has "issues":
https://dnsviz.net/d/o365filtering.com/dnssec/
An easy way to provoke this is to send a message to t...@outlook.com.
This has been broken for months and there are an impressive number of
domains that use outlook.com for their mail...
Rather than go down the rabbit hole of trying to engage
msn...@microsoft.com (which itself is broken for me) perhaps someone on
this list can poke the right person at microsoft?
Craig
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations