[dns-operations] is there anyone from microsoft on the list?

Robert Edmonds edmonds at isc.org
Tue Mar 16 23:12:36 UTC 2010


ns[1-5].msft.net are broken; they set the TC bit on certain UDP
responses but do not respond to TCP queries.

    microsoft.com has address 207.46.197.32
    microsoft.com has address 207.46.232.182
    microsoft.com mail is handled by 10 mail.messaging.microsoft.com.

    46.207.in-addr.arpa.    86400   IN  NS  ns1.msft.net.
    46.207.in-addr.arpa.    86400   IN  NS  ns2.msft.net.
    46.207.in-addr.arpa.    86400   IN  NS  ns5.msft.net.
    46.207.in-addr.arpa.    86400   IN  NS  ns4.msft.net.
    46.207.in-addr.arpa.    86400   IN  NS  ns3.msft.net.
    ;; Received 142 bytes from 2001:500:31::63#53(x.arin.net) in 105 ms

    $ dig +norec @ns1.msft.net -x 207.46.197.32
    ;; Truncated, retrying in TCP mode.

    ; <<>> DiG 9.7.0 <<>> +norec @ns1.msft.net -x 207.46.197.32
    ; (1 server found)
    ;; global options: +cmd
    ;; connection timed out; no servers could be reached

packet capture is attached.

-- 
Robert Edmonds
edmonds at isc.org
-------------- next part --------------
No.     Time                       Source                Destination           Protocol Info
      1 2010-03-16 19:05:28.078902 216.27.162.2          65.55.37.62           DNS      Standard query PTR 32.197.46.207.in-addr.arpa

Frame 1 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
User Datagram Protocol, Src Port: 50477 (50477), Dst Port: domain (53)
Domain Name System (query)
    [Response In: 2]
    Transaction ID: 0x0505
    Flags: 0x0000 (Standard query)
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...0 .... .... = Recursion desired: Don't do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        32.197.46.207.in-addr.arpa: type PTR, class IN

No.     Time                       Source                Destination           Protocol Info
      2 2010-03-16 19:05:28.174656 65.55.37.62           216.27.162.2          DNS      Standard query response PTR alacris.com PTR allsorted.co.nz PTR alpineskihouse.com PTR alpineskihouse.net PTR 400plusdifferences.ca PTR 5iantlavalamp.com PTR academiczone.ch PTR activeviews.com PTR activeviews.net PTR adatum.com PTR adatum.net PTR adatum.org PTR adventure-works.com PTR adventure-works.net PTR adventure-works.org PTR ageofmythology.com

Frame 2 (530 bytes on wire, 530 bytes captured)
Ethernet II, Src: Unispher_a0:dc:be (00:90:1a:a0:dc:be), Dst: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c)
Internet Protocol, Src: 65.55.37.62 (65.55.37.62), Dst: 216.27.162.2 (216.27.162.2)
User Datagram Protocol, Src Port: domain (53), Dst Port: 50477 (50477)
Domain Name System (response)
    [Request In: 1]
    [Time: 0.095754000 seconds]
    Transaction ID: 0x0505
    Flags: 0x8600 (Standard query response, No error)
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .1.. .... .... = Authoritative: Server is an authority for domain
        .... ..1. .... .... = Truncated: Message is truncated
        .... ...0 .... .... = Recursion desired: Don't do query recursively
        .... .... 0... .... = Recursion available: Server can't do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
        .... .... .... 0000 = Reply code: No error (0)
    Questions: 1
    Answer RRs: 16
    Authority RRs: 0
    Additional RRs: 0
    Queries
        32.197.46.207.in-addr.arpa: type PTR, class IN
    Answers
        32.197.46.207.in-addr.arpa: type PTR, class IN, alacris.com
        32.197.46.207.in-addr.arpa: type PTR, class IN, allsorted.co.nz
        32.197.46.207.in-addr.arpa: type PTR, class IN, alpineskihouse.com
        32.197.46.207.in-addr.arpa: type PTR, class IN, alpineskihouse.net
        32.197.46.207.in-addr.arpa: type PTR, class IN, 400plusdifferences.ca
        32.197.46.207.in-addr.arpa: type PTR, class IN, 5iantlavalamp.com
        32.197.46.207.in-addr.arpa: type PTR, class IN, academiczone.ch
        32.197.46.207.in-addr.arpa: type PTR, class IN, activeviews.com
        32.197.46.207.in-addr.arpa: type PTR, class IN, activeviews.net
        32.197.46.207.in-addr.arpa: type PTR, class IN, adatum.com
        32.197.46.207.in-addr.arpa: type PTR, class IN, adatum.net
        32.197.46.207.in-addr.arpa: type PTR, class IN, adatum.org
        32.197.46.207.in-addr.arpa: type PTR, class IN, adventure-works.com
        32.197.46.207.in-addr.arpa: type PTR, class IN, adventure-works.net
        32.197.46.207.in-addr.arpa: type PTR, class IN, adventure-works.org
        32.197.46.207.in-addr.arpa: type PTR, class IN, ageofmythology.com

No.     Time                       Source                Destination           Protocol Info
      3 2010-03-16 19:05:28.174993 216.27.162.2          65.55.37.62           TCP      36441 > domain [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=392853086 TSER=0 WS=7

Frame 3 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
Transmission Control Protocol, Src Port: 36441 (36441), Dst Port: domain (53), Seq: 0, Len: 0

No.     Time                       Source                Destination           Protocol Info
      4 2010-03-16 19:05:31.173753 216.27.162.2          65.55.37.62           TCP      36441 > domain [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=392853836 TSER=0 WS=7

Frame 4 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
Transmission Control Protocol, Src Port: 36441 (36441), Dst Port: domain (53), Seq: 0, Len: 0

No.     Time                       Source                Destination           Protocol Info
      5 2010-03-16 19:05:37.173256 216.27.162.2          65.55.37.62           TCP      36441 > domain [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=392855336 TSER=0 WS=7

Frame 5 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
Transmission Control Protocol, Src Port: 36441 (36441), Dst Port: domain (53), Seq: 0, Len: 0

No.     Time                       Source                Destination           Protocol Info
      6 2010-03-16 19:05:38.175171 216.27.162.2          65.55.37.62           TCP      38087 > domain [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=392855586 TSER=0 WS=7

Frame 6 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
Transmission Control Protocol, Src Port: 38087 (38087), Dst Port: domain (53), Seq: 0, Len: 0

No.     Time                       Source                Destination           Protocol Info
      7 2010-03-16 19:05:41.173250 216.27.162.2          65.55.37.62           TCP      38087 > domain [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=392856336 TSER=0 WS=7

Frame 7 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
Transmission Control Protocol, Src Port: 38087 (38087), Dst Port: domain (53), Seq: 0, Len: 0

No.     Time                       Source                Destination           Protocol Info
      8 2010-03-16 19:05:47.173754 216.27.162.2          65.55.37.62           TCP      38087 > domain [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=392857836 TSER=0 WS=7

Frame 8 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
Transmission Control Protocol, Src Port: 38087 (38087), Dst Port: domain (53), Seq: 0, Len: 0

No.     Time                       Source                Destination           Protocol Info
      9 2010-03-16 19:05:48.175344 216.27.162.2          65.55.37.62           TCP      50340 > domain [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=392858086 TSER=0 WS=7

Frame 9 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
Transmission Control Protocol, Src Port: 50340 (50340), Dst Port: domain (53), Seq: 0, Len: 0

No.     Time                       Source                Destination           Protocol Info
     10 2010-03-16 19:05:51.173253 216.27.162.2          65.55.37.62           TCP      50340 > domain [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=392858836 TSER=0 WS=7

Frame 10 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
Transmission Control Protocol, Src Port: 50340 (50340), Dst Port: domain (53), Seq: 0, Len: 0

No.     Time                       Source                Destination           Protocol Info
     11 2010-03-16 19:05:57.173255 216.27.162.2          65.55.37.62           TCP      50340 > domain [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=392860336 TSER=0 WS=7

Frame 11 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: IntelCor_3d:c4:7c (00:15:17:3d:c4:7c), Dst: Unispher_a0:dc:be (00:90:1a:a0:dc:be)
Internet Protocol, Src: 216.27.162.2 (216.27.162.2), Dst: 65.55.37.62 (65.55.37.62)
Transmission Control Protocol, Src Port: 50340 (50340), Dst Port: domain (53), Seq: 0, Len: 0


More information about the dns-operations mailing list