On Mon, Nov 09, 2015 at 11:10:05AM -0500, Patrick Domack wrote: > domain-insecure: "mail.mil." > > The above seems to be functioning, I'll do larger tests tonight. Also see if > I hit any other systems like this, as I start testing against more and more > servers. > > The domain-insecure: "eemsg.mail.mil.", kept failing randomly, I believe > this was due again to the ns servers at the mail.mil level.
I think it may be because "mail.mil" is a signed delegation point, while "eemsg.mil" is just an internal node in a signed zone. I did not check where the delegation points were, and just mentioned that you may need to go higher up the tree, which turned out to be the case. If you want a more comprehensive list of domains with DNS problems, ... I just happen to have one. :-) Notably, there are some domains hosted by isphuset.no, whose nameserver should be remediated this month I'm told, and binero.se which fail sporadically (becase one of the nameservers is good, while the rest are scheduled for an update). Some of the other domains also only fail intermittently and mail goes through, perhaps after some (random) delay. If your users are actually sending email to any of these domains, and having difficulties getting through, that might provide more motivation for the domain owners to address the issue. Please appropriate (polite) pressure. Domain SOA primary nameserver SOA contact email ----------------------- ----------------------------- --------------------- mijnvps.be nszero1.axc.nl hostmas...@mijnvps.be wwwinvest.be nszero1.axc.nl hostmas...@wwwinvest.be bb.b.br dns1.bb.b.br r...@dns1.bb.b.br fly01.com.br cerberus.totvs.com.br r...@totvs.com.br edpescelsa.com.br band53.bandeirante.com.br webmas...@edpbr.com.br stj.jus.br ns1.stj.jus.br netmas...@stj.jus.br enfam.jus.br ns1.enfam.jus.br netmas...@enfam.jus.br mpmt.mp.br ns1.mpmt.mp.br hostmas...@mpmt.mp.br m3ganet.net.br ns1.m3ganet.net.br eltonsan...@m3ganet.net.br salabostader.se ns01.one.com hostmas...@one.com lettersblogatory.com ns1.linode.com hostmas...@lettersblogatory.com wisekey.ch ns1.wisekey.com d...@wisekey.com lingidiom.com ns1.lingidiom.com hostmas...@lingidiom.com nal-vonminden.com ns1.nodesecure.com nvm...@nal-vonminden.com edsi-tech.com dns1.edsi-tech.com postmas...@edsi-tech.com lordtoniok.com zapp.lordtoniok.com l...@lordtoniok.com sheridanwest.com ns0.sheridanwest.com techni...@sheridanwest.com wohlfordcompany.com ns1.wohlfordcompany.com hostmas...@wohlfordcompany.com statskontoret.se ns1.episerverhosting.com hostmas...@episerverhosting.com planetvampire.com salubri.planetvampire.com s...@planetvampire.com gleez.com ns1.linode.com "gleez\\"@com.domainsbyproxy.com charliebanana.eu dns1.papaki.gr i...@orfeapharma.com bncr.fi.cr ns.bncr.fi.cr hostmas...@bncr.fi.cr administruji.cz ns1.ignum.com hostmas...@ignum.cz 1000listku.cz alfa.ns.active24.cz hostmas...@active24.cz pozorkliste.cz alfa.ns.active24.cz hostmas...@active24.cz klempirsky-eshop.cz alfa.ns.active24.cz hostmas...@active24.cz pfp.de ns.pfp.de patr...@pfp.de bfb-ev.de ns1.remotedienst.de hostmas...@bfb-ev.de truman.edu ns3.truman.edu dns-ale...@truman.edu upmccancercenter.com ns3.upmc.com dc...@msx.upmc.edu alanwest.eu ns0.alanwest.eu techni...@alanwest.eu aeschi.eu ns0.core.aeschi.eu hostmas...@aeschi.eu studienportal.eu ns.studienportal.eu webmas...@studienportal.eu 64bitswebhosting.eu ns2a.64bitswebhosting.eu supp...@64bitswebhosting.eu hansvanelst.eu nszero1.axc.nl hostmas...@hansvanelst.eu kruyff.eu nszero1.axc.nl hostmas...@kruyff.eu fai.gov dns.gsa.gov hostmas...@gsa.gov uspto.gov dns3.uspto.gov n...@uspto.gov techtrack.gov lions.techtrack.gov hostmas...@techtrack.gov jobcorps.gov jcdc-s-eds-001.jobcorps.gov jcdc-s-eds-...@jobcorps.gov 3814.eu dns1.papaki.gr hostmas...@papaki.gr geme.eu dns1.papaki.gr hostmas...@papaki.gr limneos.eu dns1.papaki.gr hostmas...@papaki.gr nudeflix.eu dns1.papaki.gr hostmas...@papaki.gr pureaqua.eu dns1.papaki.gr hostmas...@papaki.gr osrportal.eu dns1.papaki.gr hostmas...@papaki.gr lawsonline.eu dns1.papaki.gr hostmas...@papaki.gr ultraweb4u.eu dns1.papaki.gr hostmas...@papaki.gr hitconsultants.eu dns1.papaki.gr hostmas...@papaki.gr thefamilybeez.eu dns1.papaki.gr i...@design-it.gr asis.io ns1.asis.io factor...@asis.io jpng.jp jpng.jp r...@jpng.jp city.sakura.lg.jp mb.city.sakura.lg.jp r...@city.sakura.lg.jp dcaa.mil hq1-dns.dcaa.mil hostmaster afnoc.af.mil wpafb-ns10.afnoc.af.mil dns...@afnet.af.mil dau.mil ns1.dau.mil syst...@administration.dau.mil mail.mil gcds-dns1.csd.disa.mil hostmas...@csd.disa.mil esgr.mil guv10m01.mont.disa.mil mon-cc...@csd.disa.mil defenselink.mil hadar.dma.mil c...@hadar.dma.mil dma.mil sirius.dma.mil c...@sirius.dma.mil homes.mil nrfkns1.cnic.navy.mil postmas...@cnic.navy.mil.homes.mil militaryonesource.mil guv10m01.mont.disa.mil d...@meade.esd.list.es312-ccc-hostmaster.mail.mil dss.mil ns1.dss.mil dssitsupp...@dss.mil dcma.mil ns1.dcma.mil hostmas...@dcma.mil dtra.mil ns1.dtra.mil hostmas...@dtra.mil jten.mil ns3.jten.mil hostmas...@jten.mil uscg.mil ns1.uscg.mil hostmas...@uscg.mil darpa.mil ns1.darpa.mil hostmas...@darpa.mil dfas.mil dzu2.dfas.mil hostmas...@dfas.mil soc.mil sentry.soc.mil r...@soc.mil navy.mil ns1.csd.disa.mil hostmas...@navy.mil jsf.mil gccvns01.jsf.mil net...@jsf.mil centcom.mil localhost r...@localhost.mil dw.centcom.mil localhost r...@localhost.mil stratcom.mil kingfisher1.stratcom.mil nmsn...@stratcom.mil osd.mil dns-mas-a1-t.pentagon.mil sysad...@pentagon.mil whs.mil dns-mas-a1-t.pentagon.mil sysad...@pentagon.mil dsca.mil dns-mas-a1-t.pentagon.mil sysad...@pentagon.mil pfpa.mil dns-mas-a1-t.pentagon.mil sysad...@pentagon.mil dodig.mil dns-mas-a1-t.pentagon.mil sysad...@pentagon.mil pentagon.mil dns-mas-a1-t.pentagon.mil sysad...@pentagon.mil doded.mil dns-pen.cnet.navy.mil da...@schisler.cnet.navy.mil pacom.mil dns1.pacom.mil phil...@katzman.ctr.pacom.mil dla.mil eagleib1.ad.dla.mil randy.sm...@dla.mil usmc.mil usmcdns1.usmc.mil secur...@mcnosc.usmc.mil jhcloos.org ore.jhcloos.com hostmas...@jhcloos.net intersatafrica.com ns5.intersatafrica.com d...@jomax.net fluidservers.net ns1.fluidservers.net r...@ns1.fluidservers.net fosfa.cz ns.forpsi.net ad...@forpsi.net palat.cz ns.forpsi.net ad...@forpsi.net silper.cz ns.forpsi.net ad...@forpsi.net rydings.cz ns.forpsi.net ad...@forpsi.net fermontplus.cz ns.forpsi.net ad...@forpsi.net kurty.net ns1.kurty.net dnsmas...@kurty.net labellewinerystore.com dns111.ovh.net t...@ovh.net hub210.net ns40.hub210.net d...@jomax.net stgraber.org samba-dc04.stgraber.net hostmas...@stgraber.net linuxcontainers.org samba-dc04.stgraber.net hostmas...@stgraber.net vpro.nl ns.vpro.nl beh...@vpro.nl waat.nl ns01.is.nl postmas...@is.nl mijnstadmijndorp.nl ns01.is.nl postmas...@is.nl xnyhps.nl ns0.xnyhps.nl hostmas...@xnyhps.nl busreizen24.nl nszero1.axc.nl hostmas...@busreizen24.nl freshned.nl nszero1.axc.nl hostmas...@freshned.nl heino.nl nszero1.axc.nl hostmas...@heino.nl lewins.nl nszero1.axc.nl hostmas...@lewins.nl lgms.nl nszero1.axc.nl hostmas...@lgms.nl lostaging.nl nszero1.axc.nl hostmas...@lostaging.nl maartenburie.nl nszero1.axc.nl hostmas...@maartenburie.nl moederenbaby.nl nszero1.axc.nl hostmas...@moederenbaby.nl nethuis.nl ns1.nethuis.nl hostmas...@nethuis.nl time2track.nl nszero1.axc.nl hostmas...@time2track.nl tvk.nl nszero1.axc.nl hostmas...@tvk.nl vrijeuitgevers.nl nszero1.axc.nl hostmas...@vrijeuitgevers.nl zenger.nl dns1.krikkit.nl hostmas...@krikkit.nl sx.nl ns1.shockmedia.nl hostmas...@shockmedia.nl instabone.nl ns1.shockmedia.nl hostmas...@shockmedia.nl mijnoproepje.nl ns1.shockmedia.nl hostmas...@shockmedia.nl inpromo.nl ns1.metaregistrar.nl beh...@metaregistrar.nl tuhu.nl ns1.tiscomhosting.nl hostmas...@tiscomhosting.nl h0st.nl ns1.fastbyte-hosting.nl n...@fastbyte-hosting.nl hardsummer.nl ns1.stichtingictmanagement.nl hostmas...@hardsummer.nl amihotel.no ns.isphuset.no hostmas...@amihotel.no apilar.no ns.isphuset.no hostmas...@apilar.no aprilarkitekter.no ns.isphuset.no hostmas...@aprilarkitekter.no bgresearch.no ns.isphuset.no hostmas...@bgresearch.no binzel.no ns.isphuset.no hostmas...@binzel.no bokogbibliotek.no ns.isphuset.no hostmas...@bokogbibliotek.no cyclingnorway.no ns.isphuset.no hostmas...@cyclingnorway.no eh-bygg.no ns.isphuset.no hostmas...@eh-bygg.no enjoydesign.no ns.isphuset.no hostmas...@enjoydesign.no fikse-design.no ns.isphuset.no hostmas...@fikse-design.no flashmedia.no ns.isphuset.no hostmas...@flashmedia.no golfhandelen.no ns.isphuset.no hostmas...@golfhandelen.no gustavsenas.no ns.isphuset.no hostmas...@gustavsenas.no human-resources.no ns.isphuset.no hostmas...@human-resources.no internot.no ns.isphuset.no hostmas...@internot.no kajakkspesialisten.no ns.isphuset.no hostmas...@kajakkspesialisten.no norskaudioteknikk.no ns.isphuset.no hostmas...@norskaudioteknikk.no olympic.no ns.isphuset.no hostmas...@olympic.no partnerline.no ns.isphuset.no hostmas...@partnerline.no quint.no ns.isphuset.no hostmas...@quint.no r99.no ns.isphuset.no hostmas...@r99.no rfi.no ns.isphuset.no hostmas...@rfi.no scansat.no ns.isphuset.no hostmas...@scansat.no schou-andreassen.no ns.isphuset.no hostmas...@schou-andreassen.no shad.no ns.isphuset.no hostmas...@shad.no spoe.no ns.isphuset.no hostmas...@spoe.no ti-industrier.no ns.isphuset.no hostmas...@ti-industrier.no zelektro.no ns.isphuset.no hostmas...@zelektro.no nga.mil arndns2.nga.mil please_set_email@absolutely.nowhere gencat.cat a1-133.akam.net please_set_email@absolutely.nowhere eudev.org NS1.GRATISDNS.DK prometheanf...@gentoo.org sourceware.org sourceware.org r...@sourceware.org denver-electronics.nl ns1.commissio.org beh...@commissio.org patriotguard.org ns1.patriotguard.org r...@patriotguard.org torinthiel.pl charybda.torinthiel.pl torinth...@data.pl bank.scb ns1.dns.scb hostmas...@ns1.dns.scb cloud.ekenberg.se ns.aname.net hostmas...@ekenberg.se hugin.si2.se primary.se i...@si2.se ap2.se ns1.pin.se supp...@pin.se sala.se ns1.sala.se hostmas...@sala.se fokau.se ns1.fokau.se and...@fokau.se nmihi.com ns3.binero.se regis...@binero.se autorelaxed.com ns3.binero.se regis...@binero.se billogram.eu ns3.binero.se regis...@binero.se exceed-it.eu ns3.binero.se regis...@binero.se aevy.org ns3.binero.se regis...@binero.se ap.se ns3.binero.se regis...@binero.se ca.se ns3.binero.se regis...@binero.se cc.se ns3.binero.se regis...@binero.se cz.se ns3.binero.se regis...@binero.se eh.se ns3.binero.se regis...@binero.se es.se ns3.binero.se regis...@binero.se eu.se ns3.binero.se regis...@binero.se hk.se ns3.binero.se regis...@binero.se id.se ns3.binero.se regis...@binero.se nl.se ns3.binero.se regis...@binero.se pa.se ns3.binero.se regis...@binero.se pw.se ns3.binero.se regis...@binero.se sa.se ns3.binero.se regis...@binero.se sk.se ns3.binero.se regis...@binero.se uk.se ns3.binero.se regis...@binero.se us.se ns3.binero.se regis...@binero.se vu.se ns3.binero.se regis...@binero.se za.se ns3.binero.se regis...@binero.se ibj.se ns3.binero.se regis...@binero.se raj.se ns3.binero.se regis...@binero.se zoy.se ns3.binero.se regis...@binero.se diff.se ns3.binero.se regis...@binero.se ludl.se ns3.binero.se regis...@binero.se manc.se ns3.binero.se regis...@binero.se mplp.se ns3.binero.se regis...@binero.se sabf.se ns3.binero.se regis...@binero.se wima.se ns3.binero.se regis...@binero.se xmpp.se ns3.binero.se regis...@binero.se astec.se ns3.binero.se regis...@binero.se jhwbg.se ns3.binero.se regis...@binero.se rafel.se ns3.binero.se regis...@binero.se react.se ns3.binero.se regis...@binero.se webgl.se ns3.binero.se regis...@binero.se blogge.se ns3.binero.se regis...@binero.se entero.se ns3.binero.se regis...@binero.se sohbet.se ns3.binero.se regis...@binero.se wololo.se ns3.binero.se regis...@binero.se infoway.se ns3.binero.se regis...@binero.se ostebro.se ns3.binero.se regis...@binero.se sommars.se ns3.binero.se regis...@binero.se facehack.se ns3.binero.se regis...@binero.se feldgrau.se ns3.binero.se regis...@binero.se maintain.se ns3.binero.se regis...@binero.se studiofy.se ns3.binero.se regis...@binero.se zenhusen.se ns3.binero.se regis...@binero.se extragood.se ns3.binero.se regis...@binero.se nearfield.se ns3.binero.se regis...@binero.se wimbledon.se ns3.binero.se regis...@binero.se brownsugar.se ns3.binero.se regis...@binero.se livingfree.se ns3.binero.se regis...@binero.se satyananda.se ns3.binero.se regis...@binero.se ahallservice.se ns3.binero.se regis...@binero.se fridabloggar.se ns3.binero.se regis...@binero.se sandrabeijer.se ns3.binero.se regis...@binero.se tobiassjosten.se ns3.binero.se regis...@binero.se salasilvergruva.se ns3.binero.se regis...@binero.se cashflowplatform.se ns3.binero.se regis...@binero.se unitedminds.nu ns1.loopia.se regis...@loopia.se ktit.se ns1.loopia.se regis...@loopia.se basketliganherr.se ns1.loopia.se regis...@loopia.se harnosand.se ns1.ipv6dns.se hostmas...@harnosand.se nllplus.se nemesis.nll.se hostmas...@nll.se ims.se ns.protegere.se hostmas...@ims.se karlstad.se dns1.karlstad.se hostmas...@karlstad.se jordbruksverket.se dns01.jordbruksverket.se postmas...@jordbruksverket.se nic.sx a.ns.sx postmas...@nic.sx registry.sx a.ns.sx postmas...@registry.sx rtaf.mi.th ns1.rtaf.mi.th ad...@rtaf.mi.th mof.gov.tw dns2.mof.gov.tw cl...@mail.mof.gov.tw -- Viktor.