On 03/04/2025 18:14, Slavko via mailop wrote:
Some years ago i had not competent DNS provider, which resulted in similar issue -- eg. unbound refused to process that record(s) (in my case it was DKIM records). IIRC, it had something with empty non-terminal records and PowerDNS with SQL backend (or so).
As it happens it is also unbound that we are using. Here are the particular debug logs for the query in question:
Mar 15 16:46:08 [572709:0] info: validator: chased to _dmarc.example.com.dmarc.has.pphosted.com. TXT IN Mar 15 16:46:08 [572709:0] debug: val handle processing q with state VAL_INIT_STATE Mar 15 16:46:08 [572709:0] debug: validator classification cnamenoanswer Mar 15 16:46:08 [572709:0] info: signer is dmarc.has.pphosted.com. TYPE0 CLASS0 Mar 15 16:46:08 [572709:0] info: chased extract ;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 0 ;; flags: qr ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 0 ;; QUESTION SECTION: _dmarc.example.com.dmarc.has.pphosted.com. IN TXT
We're currently working on summarizing the situation and will then ask the client to raise a ticket with Proofpoint.
Many thanks for all the comments and suggestions. Andy _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop