Hi, > > the conclusions at that time were: > > [...] > - It only affects domains on the Public Suffix List. i.e. > > the sender domain is in some public namespace where Y! want to see > > an SOA to show it's actually administered by someone. > > > > Is that the case for you? > > No. I might as well reveal the actual domain names involved, since > it's not particularly secret: it's "westfir.or.us" and > "ci.westfir.or.us". > > Neither of those are on the public suffix list, although "or.us" is. > > Mail from *@ci.westfir.or.us is accepted if ci.westfir.or.us has an > SOA record, and not accepted if it doesn't. > > So if it's supposed to be only checking at delegated breakpoints on > the PSL, it appears it has a bug, because there's no break between > those two (unless I'm missing something obvious)?
right now there is only a SOA record for `us.` itself and for `ci.westfir.or.us.`, but for nothing inbetween. Since both `us.` and `or.us.` are public suffixes, Y! seems to expect a SOA record somewhere below these two, so for `westfir.or.us.` or `ci.westfir.or.us.` (or both). Cheers, Felix _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
