[dns-operations] Problem DNSSEC domains for DANE TLSA lookup
Viktor Dukhovni
ietf-dane at dukhovni.org
Sun Aug 7 06:37:36 UTC 2016
I've scanned ~1 million DNSSEC domains for working SMTP-related
TLSA records. Of these, ~250 exhibit lookup problems. (Good news,
the problem is quite infrequent).
TLSA queries for the owner names below my signature fail either
persistently or intermittently, depending on whether all or just
some of the associated nameservers fail to generate valid replies.
The problem domains either cannot receive email from SMTP senders
that implement DANE support, or will experience intermittent delays
in email delivery.
Some of these don't reply to TLSA queries at all (middle boxes
blocking the RRtype). Some have broken denial of existence (incorrect
handling of empty non-terminals and the like). Others fail to
return NSEC or NSEC3 records from some or all of the nameservers
or have problems with the DNSKEY RRset, ... Many are running
nameserver software that is substantially out of date.
With a bit of luck, posting here might get the right folks looking
the issues, especially at the operators hosting multiple customer
domains.
Aggregating these by the zone containing the primary NS from the
SOA record we have in descending frequency the DNS operators of
199 of the 253 domains:
35 swebby.se
33 isphuset.no ; Notified, ticket open since 2015/08/04
23 loopia.se
15 axc.nl
12 registrar-servers.com
9 active24.cz
9 cas-com.net
9 forpsi.net ; Recently identified Knot DNS bug, to be fixed soon
6 aname.net
5 metaregistrar.nl
5 ovh.net
4 dnscto.net
4 jsr-it.nl
4 psyclonecontacts.net
3 countryclubbank.bank
3 pfsc.com
2 binero.se
2 darpa.mil
2 domaincontrol.com
2 dpf.gov.br
2 ignum.com
2 infracom.nl
2 jhuapl.edu
2 jobcorps.gov
2 ns.sx
2 tse.jus.br
... and 54 more seen just once ...
Note that the problem is not always with the primary NS, some of
the domains have issues only with independently operated secondary
nameservers, so in a few cases the wrong party is listed as the
culprit, sorry about that...
Some of the observed problems are rather exotic. For example, the
nameserver for truman.edu returns a very slightly different (and
thus invalid) signature for the same SOA record in negative replies
than it does for a direct SOA query.
;truman.edu. IN SOA
truman.edu. SOA ns3.truman.edu. dns-alerts.truman.edu. 2065422032 3600 900 1209600 3600
truman.edu. RRSIG SOA 5 2 3600 20160906050001 20160807050001 17523 truman.edu. B6Qfu3gkP6P8hzMOrCiCTorxzdBdNny7q5cKAZp9U1HeVEazjfA30v26lyTvqs4TwiJ/jCuwUP62uSCJOGegz84dGWrvYImMoDLrP/jE4EjeWs8ppf1C0ouOw+XAH3fdXDdc34TuQH0gNpNRnI63bFf8Huegq/12gKH+gF+1Mog=
;_25._tcp.barracuda.truman.edu. IN TLSA
truman.edu. SOA ns3.truman.edu. dns-alerts.truman.edu. 2065422032 3600 900 1209600 3600
truman.edu. RRSIG SOA 5 2 3600 20160906050001 20160807050001 17523 truman.edu. B6Qfu3gkP6P8hzMOrCiCTorxzdBdNny7q5cKAZp9U1HeVEazjfA30v26lyTvqs4TwiJ/jCuwUP62uSCJOGegz84dGWrvYImMoDLrP/jE4EjeWs8ppf1C0ouOw+XAH3fdXDdc34TuQH0gNpNRnI63bFf8Huegq/12gKH+gAAAAlg=
These signatures differ only in the final 8 base64 encoded characters:
gF+1Mog=
gAAAAlg=
which decode to:
80 5f b5 32 88
80 00 00 02 58
thus the mysterious damage is in the final 32 bits of the signature.
IIRC there are a couple of other domains with similar SOA RRSIG
anomalies, but I don't recall which ones they are.
--
Viktor.
NS zone # Primary NS TLSA qname
--------- -- ------------- ------------------------
swebby.se 35 nsa.swebby.se _25._tcp.barabraviner.se
swebby.se 35 nsa.swebby.se _25._tcp.betforbloggen.se
swebby.se 35 nsa.swebby.se _25._tcp.dinbike.se
swebby.se 35 nsa.swebby.se _25._tcp.doctors-and-nurses.se
swebby.se 35 nsa.swebby.se _25._tcp.ebrada.se
swebby.se 35 nsa.swebby.se _25._tcp.fivestarpt.se
swebby.se 35 nsa.swebby.se _25._tcp.grondalagard.se
swebby.se 35 nsa.swebby.se _25._tcp.hbim.se
swebby.se 35 nsa.swebby.se _25._tcp.hultarnas.se
swebby.se 35 nsa.swebby.se _25._tcp.lhelkonsult.se
swebby.se 35 nsa.swebby.se _25._tcp.mail.pepz.se
swebby.se 35 nsa.swebby.se _25._tcp.mail.wallstromstra.se
swebby.se 35 nsa.swebby.se _25._tcp.nobelkommitten.se
swebby.se 35 nsa.swebby.se _25._tcp.ogonblicketsfotograf.se
swebby.se 35 nsa.swebby.se _25._tcp.ors2015.se
swebby.se 35 nsa.swebby.se _25._tcp.ors2016.se
swebby.se 35 nsa.swebby.se _25._tcp.prestandadeklaration.se
swebby.se 35 nsa.swebby.se _25._tcp.rfslradgivningen.se
swebby.se 35 nsa.swebby.se _25._tcp.rfslskane.se
swebby.se 35 nsa.swebby.se _25._tcp.teamlorentzen.se
swebby.se 35 nsa.swebby.se _25._tcp.tjanstebilsdag.se
swebby.se 35 nsa.swebby.se _25._tcp.tjanstebilsdagarna.se
swebby.se 35 nsa.swebby.se _25._tcp.tltplatsannonser.se
swebby.se 35 nsa.swebby.se _25._tcp.vinolsprit.se
swebby.se 35 nsa.swebby.se _25._tcp.vinrebellerna.se
swebby.se 35 nsa.swebby.se _25._tcp.w-pellets.se
swebby.se 35 nsa.swebby.se _25._tcp.wfc.se
swebby.se 35 nsa.swebby.se _25._tcp.winest.se
swebby.se 35 nsa.swebby.se _25._tcp.xlbyggkampanj.se
swebby.se 35 nsa.swebby.se _25._tcp.xlkampanj.se
swebby.se 35 nsa.swebby.se _25._tcp.xn--bkhllviken-gcb.se
swebby.se 35 nsa.swebby.se _25._tcp.xn--bnnemark-n4a.se
swebby.se 35 nsa.swebby.se _25._tcp.xn--ebrda-ira.se
swebby.se 35 nsa.swebby.se _25._tcp.xn--rfslskne-f0a.se
swebby.se 35 nsa.swebby.se _25._tcp.xn--sexualterapiskne-qob.se
isphuset.no 33 ns.isphuset.no _25._tcp.amihotel.no
isphuset.no 33 ns.isphuset.no _25._tcp.bernhardhalvorsen.no
isphuset.no 33 ns.isphuset.no _25._tcp.bgresearch.no
isphuset.no 33 ns.isphuset.no _25._tcp.bokogbibliotek.no
isphuset.no 33 ns.isphuset.no _25._tcp.cyclingnorway.no
isphuset.no 33 ns.isphuset.no _25._tcp.enjoydesign.no
isphuset.no 33 ns.isphuset.no _25._tcp.epost.shad.no
isphuset.no 33 ns.isphuset.no _25._tcp.ergomove.no
isphuset.no 33 ns.isphuset.no _25._tcp.exchange.olympic.no
isphuset.no 33 ns.isphuset.no _25._tcp.internot.no
isphuset.no 33 ns.isphuset.no _25._tcp.jdykk.no
isphuset.no 33 ns.isphuset.no _25._tcp.kajakkspesialisten.no
isphuset.no 33 ns.isphuset.no _25._tcp.karmoy-sjoservice.no
isphuset.no 33 ns.isphuset.no _25._tcp.mail.apilar.no
isphuset.no 33 ns.isphuset.no _25._tcp.mail.apriori.no
isphuset.no 33 ns.isphuset.no _25._tcp.mail.bolthar.no
isphuset.no 33 ns.isphuset.no _25._tcp.mail.flashmedia.no
isphuset.no 33 ns.isphuset.no _25._tcp.mail.golfhandelen.no
isphuset.no 33 ns.isphuset.no _25._tcp.mail.norskaudioteknikk.no
isphuset.no 33 ns.isphuset.no _25._tcp.mail.op-as.no
isphuset.no 33 ns.isphuset.no _25._tcp.mail.tg8.no
isphuset.no 33 ns.isphuset.no _25._tcp.mekonomenbilverksted.nu
isphuset.no 33 ns.isphuset.no _25._tcp.partnerline.no
isphuset.no 33 ns.isphuset.no _25._tcp.planethifi.no
isphuset.no 33 ns.isphuset.no _25._tcp.quint.no
isphuset.no 33 ns.isphuset.no _25._tcp.r99.no
isphuset.no 33 ns.isphuset.no _25._tcp.remote.binzel.no
isphuset.no 33 ns.isphuset.no _25._tcp.remote.spoe.no
isphuset.no 33 ns.isphuset.no _25._tcp.scansat.no
isphuset.no 33 ns.isphuset.no _25._tcp.strandstudio.no
isphuset.no 33 ns.isphuset.no _25._tcp.trh.jne.no
isphuset.no 33 ns.isphuset.no _25._tcp.vps.fikse-design.no
isphuset.no 33 ns.isphuset.no _25._tcp.webmail.ti-industrier.no
loopia.se 23 ns1.loopia.se _25._tcp.bliuppringd.se
loopia.se 23 ns1.loopia.se _25._tcp.bravemonday.se
loopia.se 23 ns1.loopia.se _25._tcp.damhockey.se
loopia.se 23 ns1.loopia.se _25._tcp.darkambient.se
loopia.se 23 ns1.loopia.se _25._tcp.e-kommun.se
loopia.se 23 ns1.loopia.se _25._tcp.easton.se
loopia.se 23 ns1.loopia.se _25._tcp.finansforum.se
loopia.se 23 ns1.loopia.se _25._tcp.fungerandemedier.se
loopia.se 23 ns1.loopia.se _25._tcp.gratis-skraplotter.nu
loopia.se 23 ns1.loopia.se _25._tcp.hockeyshop.se
loopia.se 23 ns1.loopia.se _25._tcp.hurserradiout.se
loopia.se 23 ns1.loopia.se _25._tcp.johanhellgren.se
loopia.se 23 ns1.loopia.se _25._tcp.matspjut.nu
loopia.se 23 ns1.loopia.se _25._tcp.mywaybutiken.se
loopia.se 23 ns1.loopia.se _25._tcp.papperstallrik.se
loopia.se 23 ns1.loopia.se _25._tcp.shellvik.se
loopia.se 23 ns1.loopia.se _25._tcp.softwareengineering.se
loopia.se 23 ns1.loopia.se _25._tcp.studiodaikon.se
loopia.se 23 ns1.loopia.se _25._tcp.tornordern.se
loopia.se 23 ns1.loopia.se _25._tcp.tstime.se
loopia.se 23 ns1.loopia.se _25._tcp.underljud.se
loopia.se 23 ns1.loopia.se _25._tcp.vasterasaren.se
loopia.se 23 ns1.loopia.se _25._tcp.xn--frjestad-0za.se
axc.nl 15 nszero1.axc.nl _25._tcp.bed4baby.eu
axc.nl 15 nszero1.axc.nl _25._tcp.cameras-kopen.nl
axc.nl 15 nszero1.axc.nl _25._tcp.comodus.nl
axc.nl 15 nszero1.axc.nl _25._tcp.g13.nl
axc.nl 15 nszero1.axc.nl _25._tcp.gdl.nl
axc.nl 15 nszero1.axc.nl _25._tcp.hansvanelst.eu
axc.nl 15 nszero1.axc.nl _25._tcp.mail.de-garage.nl
axc.nl 15 nszero1.axc.nl _25._tcp.mail.jecom.nl
axc.nl 15 nszero1.axc.nl _25._tcp.mail.mediagardeserver.nl
axc.nl 15 nszero1.axc.nl _25._tcp.mail.mit-solutions.be
axc.nl 15 nszero1.axc.nl _25._tcp.mail.time2track.nl
axc.nl 15 nszero1.axc.nl _25._tcp.mail.vvbeta.nl
axc.nl 15 nszero1.axc.nl _25._tcp.smtp.mwalet.nl
axc.nl 15 nszero1.axc.nl _25._tcp.studiobeerens.nl
axc.nl 15 nszero1.axc.nl _25._tcp.synn.be
registrar-servers.com 12 dns1.registrar-servers.com _25._tcp.23systems-dev.net
registrar-servers.com 12 dns1.registrar-servers.com _25._tcp.86francisstreet.com
registrar-servers.com 12 dns1.registrar-servers.com _25._tcp.chriseiffel.com
registrar-servers.com 12 dns1.registrar-servers.com _25._tcp.dmgznet.com
registrar-servers.com 12 dns1.registrar-servers.com _25._tcp.howbacha.com
registrar-servers.com 12 dns1.registrar-servers.com _25._tcp.samct.com
registrar-servers.com 12 dns1.registrar-servers.com _25._tcp.slowlicks.com
registrar-servers.com 12 dns1.registrar-servers.com _25._tcp.thedashingbadger.com
registrar-servers.com 12 dns1.registrar-servers.com _25._tcp.twitterdex.net
registrar-servers.com 12 pdns1.registrar-servers.com _25._tcp.bitcoindownline.com
registrar-servers.com 12 pdns1.registrar-servers.com _25._tcp.omgpk.com
registrar-servers.com 12 pdns1.registrar-servers.com _25._tcp.websitewharf.net
active24.cz 9 alfa.ns.active24.cz _25._tcp.bdsoft.cz
active24.cz 9 alfa.ns.active24.cz _25._tcp.botanix.cz
active24.cz 9 alfa.ns.active24.cz _25._tcp.canson.cz
active24.cz 9 alfa.ns.active24.cz _25._tcp.dido.cz
active24.cz 9 alfa.ns.active24.cz _25._tcp.hobbypoint.cz
active24.cz 9 alfa.ns.active24.cz _25._tcp.klempirsky-eshop.cz
active24.cz 9 alfa.ns.active24.cz _25._tcp.pod1.cz
active24.cz 9 alfa.ns.active24.cz _25._tcp.pozorkliste.cz
active24.cz 9 alfa.ns.active24.cz _25._tcp.talka.cz
cas-com.net 9 ns2.cas-com.net _25._tcp.mail.bernheimmansion.com
cas-com.net 9 ns2.cas-com.net _25._tcp.mail.bestregistrar.com
cas-com.net 9 ns2.cas-com.net _25._tcp.mail.bmwlemon.com
cas-com.net 9 ns2.cas-com.net _25._tcp.mail.c-a-s-i.com
cas-com.net 9 ns2.cas-com.net _25._tcp.mail.dotshop.com
cas-com.net 9 ns2.cas-com.net _25._tcp.mail.ecwr.net
cas-com.net 9 ns2.cas-com.net _25._tcp.mail.relyapawn.com
cas-com.net 9 ns2.cas-com.net _25._tcp.mailky.b2.net
cas-com.net 9 ns2.cas-com.net _25._tcp.mailky.cas-com.net
forpsi.net 9 ns.forpsi.net _25._tcp.878.cz
forpsi.net 9 ns.forpsi.net _25._tcp.devsoft.cz
forpsi.net 9 ns.forpsi.net _25._tcp.fermontplus.cz
forpsi.net 9 ns.forpsi.net _25._tcp.fosfa.cz
forpsi.net 9 ns.forpsi.net _25._tcp.hnatik.cz
forpsi.net 9 ns.forpsi.net _25._tcp.mediastyle.cz
forpsi.net 9 ns.forpsi.net _25._tcp.pastorovi.cz
forpsi.net 9 ns.forpsi.net _25._tcp.rydings.cz
forpsi.net 9 ns.forpsi.net _25._tcp.silper.cz
aname.net 6 ns.aname.net _25._tcp.cloud.ekenberg.se
aname.net 6 ns.aname.net _25._tcp.dator.agnetab.se
aname.net 6 ns.aname.net _25._tcp.dator.ekenberg.se
aname.net 6 ns.aname.net _25._tcp.dator.fragastaten.se
aname.net 6 ns.aname.net _25._tcp.dator.netectus.se
aname.net 6 ns.aname.net _25._tcp.smtp.arknet.nu
metaregistrar.nl 5 ns1.metaregistrar.nl _25._tcp.avot.amsterdam
metaregistrar.nl 5 ns1.metaregistrar.nl _25._tcp.biohcg.amsterdam
metaregistrar.nl 5 ns1.metaregistrar.nl _25._tcp.o365.nl
metaregistrar.nl 5 ns1.metaregistrar.nl _25._tcp.rekencursus.amsterdam
metaregistrar.nl 5 ns1.metaregistrar.nl _25._tcp.relatietraining.amsterdam
ovh.net 5 dns10.ovh.net _25._tcp.magister.ovh
ovh.net 5 dns10.ovh.net _25._tcp.short-street.com
ovh.net 5 dns109.ovh.net _25._tcp.procodis-france.com
ovh.net 5 dns15.ovh.net _25._tcp.ouracnetreatment.com
ovh.net 5 mon-gs2.ovh.net _25._tcp.mx.admings.net
dnscto.net 4 ns3.dnscto.net _25._tcp.5606.com
dnscto.net 4 ns3.dnscto.net _25._tcp.606.com
dnscto.net 4 ns3.dnscto.net _25._tcp.6060000.com
dnscto.net 4 ns3.dnscto.net _25._tcp.y44.com
jsr-it.nl 4 ns1.jsr-it.nl _25._tcp.mail.dakprobleem.nl
jsr-it.nl 4 ns1.jsr-it.nl _25._tcp.mail.loodgieterindenbosch.nl
jsr-it.nl 4 ns1.jsr-it.nl _25._tcp.mail.simbi.nl
jsr-it.nl 4 ns1.jsr-it.nl _25._tcp.mail.wheelking.nl
psyclonecontacts.net 4 ns1.psyclonecontacts.net _25._tcp.mx1.commonsenseideas.com
psyclonecontacts.net 4 ns1.psyclonecontacts.net _25._tcp.mx1.psyclonecontacts.net
psyclonecontacts.net 4 ns1.psyclonecontacts.net _25._tcp.mx2.psyclonecontacts.net
psyclonecontacts.net 4 ns3.psyclonecontacts.net _25._tcp.mail.constitutionalrightspac.com
countryclubbank.bank 3 ns1.countryclubbank.bank _25._tcp.ccbfinancial.bank
countryclubbank.bank 3 ns1.countryclubbank.bank _25._tcp.countryclub.bank
countryclubbank.bank 3 ns1.countryclubbank.bank _25._tcp.countryclubbank.bank
pfsc.com 3 dns.pfsc.com _25._tcp.mailip.lease-admin.com
pfsc.com 3 dns.pfsc.com _25._tcp.mailip.pfsc.com
pfsc.com 3 dns.pfsc.com _25._tcp.mailip.servicerplus.com
binero.se 2 ns3.binero.se _25._tcp.dbdo.se
binero.se 2 ns3.binero.se _25._tcp.molnmicke.se
darpa.mil 2 ns1.darpa.mil _25._tcp.mailgate3.darpa.mil
darpa.mil 2 ns1.darpa.mil _25._tcp.mailgate4.darpa.mil
domaincontrol.com 2 ns61.domaincontrol.com _25._tcp.transport.hub210.net
domaincontrol.com 2 pdns03.domaincontrol.com _25._tcp.mail.intersatafrica.com
dpf.gov.br 2 ns1.dpf.gov.br _25._tcp.mailhost1.dpf.gov.br
dpf.gov.br 2 ns1.dpf.gov.br _25._tcp.mailhost2.dpf.gov.br
ignum.com 2 ns1.ignum.com _25._tcp.administruji.cz
ignum.com 2 ns1.ignum.com _25._tcp.hvideo.cz
infracom.nl 2 ns3.infracom.nl _25._tcp.doorgroeikansen.com
infracom.nl 2 ns3.infracom.nl _25._tcp.fivelpoort.nu
jhuapl.edu 2 infoblox-prod-gm.jhuapl.edu _25._tcp.pilot.jhuapl.edu
jhuapl.edu 2 infoblox-prod-gm.jhuapl.edu _25._tcp.piper.jhuapl.edu
jobcorps.gov 2 jcdc-s-eds-001.jobcorps.gov _25._tcp.ironport1.jobcorps.gov
jobcorps.gov 2 jcdc-s-eds-001.jobcorps.gov _25._tcp.ironport2.jobcorps.gov
ns.sx 2 a.ns.sx _25._tcp.mail.nic.sx
ns.sx 2 a.ns.sx _25._tcp.mail.registry.sx
tse.jus.br 2 sauron.tse.jus.br _25._tcp.dexter.tse.jus.br
tse.jus.br 2 sauron.tse.jus.br _25._tcp.mandark.tse.jus.br
act85.com 1 ns1.act85.com _25._tcp.mail.act85.com
anycast.me 1 dns200.anycast.me _25._tcp.gearfun.com
bandeirante.com.br 1 band53.bandeirante.com.br _25._tcp.mx.edpescelsa.com.br
bb.b.br 1 dns1.bb.b.br _25._tcp.bb.b.br
bezeqint.co.il 1 drppa-infogm.bezeqint.co.il _25._tcp.shahar.email
brazildns.com 1 v4.brazildns.com _25._tcp.deltaservers.com.br
c2bsa.com 1 dns1.c2bsa.com _25._tcp.mx1.conso-acteur.com
centcom.mil 1 hqnxdn01.centcom.mil _25._tcp.mail.dw.centcom.mil
charbonnet.com 1 ns0.charbonnet.com _25._tcp.mail.realmansolympics.com
commissio.org 1 ns1.commissio.org _25._tcp.mail.denver-electronics.nl
d2.pl 1 ns1.d2.pl _25._tcp.autokey.cz
dilichen.fr 1 ns.dilichen.fr _25._tcp.dilichen.fr
episerverhosting.com 1 ns1.episerverhosting.com _25._tcp.mail.statskontoret.se
fastbyte-hosting.nl 1 ns1.fastbyte-hosting.nl _25._tcp.mail.howit.nl
ferez.fr 1 ns.ferez.fr _25._tcp.mail.ferez.fr
fis.bank 1 ns1.fis.bank _25._tcp.fis.bank
fisglobal.com 1 ns1.fisglobal.com _25._tcp.dnssec-fisglobal.com
fnfis.com 1 bdiia01.fnfis.com _25._tcp.fnfis.com
gratisdns.dk 1 ns1.gratisdns.dk _25._tcp.demius.eu
hezmatt.org 1 a.ns.hezmatt.org _25._tcp.mail.hezmatt.org
is.nl 1 ns01.is.nl _25._tcp.watchguardxcs280.twenterand.nl
kp-dns.de 1 ns5.kp-dns.de _25._tcp.mail.kp-networks.com
krikkit.nl 1 dns1.krikkit.nl _25._tcp.rejo.zenger.nl
kurty.net 1 ns1.kurty.net _25._tcp.mx1.kurty.net
laposteguineenne.post 1 laposteguineenne.post _25._tcp.webmail.laposteguineenne.post
m3ganet.net.br 1 ns1.m3ganet.net.br _25._tcp.mail.m3ganet.net.br
mcso.net 1 ns1.mcso.net _25._tcp.mail.mcso.net
media-horizon.fr 1 ns0.media-horizon.fr _25._tcp.mx.media-horizon.fr
mediadcdns.net 1 ns1.mediadcdns.net _25._tcp.mx1.mediadchq.com
mhasmo.net 1 ns1.mhasmo.net _25._tcp.mail.watchevents.com
mmsc.cz 1 ns1.mmsc.cz _25._tcp.mail.mmsc.cz
mof.gov.tw 1 dns2.mof.gov.tw _25._tcp.mail.mof.gov.tw
nephelion.org 1 ns1.nephelion.org _25._tcp.mail.nephelion.org
nevoxo.com 1 ns1.nevoxo.com _25._tcp.h82.managed.nevoxo.com
ninethreequarter.net 1 ns1.ninethreequarter.net _25._tcp.ninethreequarter.net
nll.se 1 nemesis.nll.se _25._tcp.nllplus.se
offerman.net 1 dns1.offerman.net _25._tcp.chiplist.org
pin.se 1 ns1.pin.se _25._tcp.mailgw.ap2.se
protegere.se 1 ns.protegere.se _25._tcp.ims.se
rtaf.mi.th 1 ns1.rtaf.mi.th _25._tcp.imss.rtaf.mi.th
sakura.lg.jp 1 mb.city.sakura.lg.jp _25._tcp.despam-0201.city.sakura.lg.jp
sala.se 1 ns1.sala.se _25._tcp.edge.sala.se
stable.cz 1 ns.stable.cz _25._tcp.kopej.cz
techtrack.gov 1 lions.techtrack.gov _25._tcp.mx1.techtrack.gov
thednscompany.com 1 ns1.thednscompany.com _25._tcp.xchange.caramelo-media.nl
tiscomhosting.nl 1 ns1.tiscomhosting.nl _25._tcp.mail.studentrecruiter.nl
torinthiel.pl 1 charybda.torinthiel.pl _25._tcp.charybda.torinthiel.pl
totvs.com.br 1 cerberus.totvs.com.br _25._tcp.mail.fly01.com.br
truman.edu 1 ns3.truman.edu _25._tcp.barracuda.truman.edu
upmc.com 1 ns3.upmc.com _25._tcp.upmccancercenter.com
verisigndns.com 1 a1.verisigndns.com _25._tcp.creditsights.nyc
wibosa.nl 1 ns1.wibosa.nl _25._tcp.mail.wibosa.nl
worldcastdns.se 1 ns1.worldcastdns.se _25._tcp.12.mindsolution.se
xnyhps.nl 1 ns0.xnyhps.nl _25._tcp.xnyhps.nl
More information about the dns-operations
mailing list