On 2022-04-13 18:46, Wietse Venema wrote:
Benny Pedersen:

i recently begin to see domains give connection timeout

posttls-finger -l none gmail.dk

According to my DNS, gmail.dk has no MX record. Is that expected?

On 13.04.22 19:01, Benny Pedersen wrote:
in what way its not a nullMX domain ?

it does not have MX, that's why.

However, anyone should reject mail from it because:
gmail.dk.               300     IN      TXT     "v=spf1 -all"

_dmarc.gmail.dk.        300     IN      TXT     "v=DMARC1; p=reject; 
rua=mailto:mailauth-repo...@google.com";

;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58935
;_domainkeys.gmail.dk.          IN      ANY

so: deny based SPF, no DKIM key, DMARC reject.

however, they miss the nullmx record:

gmail.dk.               300     IN      MX      0 .


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Windows 2000: 640 MB ought to be enough for anybody

Reply via email to