On 03/04/2025 18:14, Slavko via mailop wrote:
Some years ago i had not competent DNS provider, which resulted
in similar issue -- eg. unbound refused to process that record(s)
(in my case it was DKIM records). IIRC, it had something with empty
non-terminal records and PowerDNS with SQL backend (or so).

As it happens it is also unbound that we are using. Here are the particular debug logs for the query in question:

  Mar 15 16:46:08 [572709:0] info: validator: chased to 
_dmarc.example.com.dmarc.has.pphosted.com. TXT IN
  Mar 15 16:46:08 [572709:0] debug: val handle processing q with state 
VAL_INIT_STATE
  Mar 15 16:46:08 [572709:0] debug: validator classification cnamenoanswer
  Mar 15 16:46:08 [572709:0] info: signer is dmarc.has.pphosted.com. TYPE0 
CLASS0
  Mar 15 16:46:08 [572709:0] info: chased extract ;; ->>HEADER<<- opcode: 
QUERY, rcode: NXDOMAIN, id: 0
     ;; flags: qr ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 0
     ;; QUESTION SECTION:
     _dmarc.example.com.dmarc.has.pphosted.com.      IN      TXT

We're currently working on summarizing the situation and will then ask the client to raise a ticket with Proofpoint.

Many thanks for all the comments and suggestions.

Andy

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to