Re: [dns-operations] mail.protection.outlook.com has EDNS issues

--- Begin Message --- Matthew Richardson wrote on 2022-07-06 07:52: ... Alternatively, is this the sort of issue in which DNS-OARC could become involved by way of outreach to MS about the problems? The lack of EDNS0 will probably become an increasing problem over time. This DNS setup is used

Re: [dns-operations] mail.protection.outlook.com has EDNS issues

Aside from today's outage, the DNS for mail.protetion.office.com seems to have been very poor for a long time. As an example from 2020, Brian Somers lamented its state:- https://lists.dns-oarc.net/pipermail/dns-operations/2020-April/020124.html The scale of the general problem (after this fault

[dns-operations] mail.protection.outlook.com has EDNS issues

The authoritative name servers for mail.protection.outlook.com apparently don't reply if you use EDNS. And it seems many resolvers don't fallback on old-DNS (and rightly so). Seen from the RIPE Atlas probes, many resolvers cannot resolve names under mail.protection.outlook.com (here, the MX of cybe

Re: [dns-operations] mail.protection.outlook.com FORMERR responses when querying with EDNS

Well the correct response when you don’t support EDNS is FORMERR. That said there is no reason for any nameserver to not support EDNS. Its been well over 20 years since EDNS was introduced and it only takes a couple of extra lines of code to have a conforming implementation. You don’t need to

Re: [dns-operations] mail.protection.outlook.com FORMERR responses when querying with EDNS

On Wed, Oct 06, 2021 at 10:44:46AM +, Martin George wrote: > I was wondering if anyone else has noticed this behaviour previously, See: Note that DNS queries with type TLSA are mishandled by load-balancing nameservers th

[dns-operations] mail.protection.outlook.com FORMERR responses when querying with EDNS

Hiya all, I’m investigating an issue that is affecting a client of ours, they are seeing a high number of SERVFAILs for queries send to various children zones of .mail.protection.outlook.com. I’ve noticed that when querying for mail.protection.outlook.com, and any child zones, directly against

Re: [dns-operations] mail.protection.outlook.com

> On Apr 20, 2020, at 3:16 PM, Dave Lawrence wrote: > > The actual MTA itself is a bit vexsome, as well. I've had a message > stuck in queue for several days now because "lost connection ... while > sending message body". That can happen due to path MTU issues, especially with larger messages

Re: [dns-operations] mail.protection.outlook.com

Brian Somers writes: > Heh, mail.protection.outlook.com has consumed many hours of my time > in the past month :( The actual MTA itself is a bit vexsome, as well. I've had a message stuck in queue for several days now because "lost connection ... while sending message body". Even thought the m

Re: [dns-operations] mail.protection.outlook.com (was: Anyone from Google here?)

On Sat, Apr 18, 2020 at 09:55:07AM -0700, Brian Somers wrote: > Heh, mail.protection.outlook.com has consumed many hours of my time in the > past month :( > > For everyones’ amusement/astonishment: > * dig +edns ns mail.protection.outlook.com > @ns1-proddns.glbdns.o365filtering.com > Returns

[dns-operations] mail.protection.outlook.com (was: Anyone from Google here?)

Heh, mail.protection.outlook.com has consumed many hours of my time in the past month :( For everyones’ amusement/astonishment: * dig +edns ns mail.protection.outlook.com @ns1-proddns.glbdns.o365filtering.com Returns FORMERR but an empty question section * dig +noedns SOA mail.protection.outloo