Re: Question on prod.msocdn.com

2016-11-11 Thread Jim Glassford
Just fyi, Found my problem here, our Tipping Point IPS was misbehaving for msocdn.com, all well now. The contributors on the ISC lists are a wealth of information and appreciated. best! jim On 11/9/2016 2:50 PM, Jim Glassford wrote: On 11/9/2016 2:42 PM, Jim Glassford wrote: On 11/9/2016 4

Re: Question on prod.msocdn.com

2016-11-09 Thread Jim Glassford
On 11/9/2016 2:42 PM, Jim Glassford wrote: On 11/9/2016 4:55 AM, Tony Finch wrote: Jim Glassford wrote: Doing dig +cd on prod.msocnd.com will get the CNAME, without +cd either timeout or SERVFAIL depending on version of bind. It works for me with BIND 9.11 and 9.10.4-P4. There are some EDN

Re: [Ext] Re: Question on prod.msocdn.com

2016-11-09 Thread Jim Glassford
On 11/9/2016 4:55 AM, Tony Finch wrote: Jim Glassford wrote: Doing dig +cd on prod.msocnd.com will get the CNAME, without +cd either timeout or SERVFAIL depending on version of bind. It works for me with BIND 9.11 and 9.10.4-P4. There are some EDNS-related changes in 9.10 which might be why

Re: Question on prod.msocdn.com

2016-11-09 Thread Tony Finch
Jim Glassford wrote: > > Doing dig +cd on prod.msocnd.com will get the CNAME, without +cd either > timeout or SERVFAIL depending on version of bind. It works for me with BIND 9.11 and 9.10.4-P4. There are some EDNS-related changes in 9.10 which might be why these versions are better able to reso