[dns-operations] Issue with eBay nameservers causing broken pages

[bert hubert]

Hi everyone,

The issue has been resolved after a reader of this list reached out to the
right people. We don't know if this is what gave a sufficient push, but the
thumbnails are great again.

Thanks!

	Bert

On Thu, Feb 02, 2017 at 02:09:59PM +0100, bert hubert wrote:
> Hi everyone,
> 
> [shameless plug, today we published some DNSSEC numbers that might interest
> or astound you on https://powerdns.org/dnssec-stats/ ]
> 
> Since we are on the topic of the 'Hall of shame', PowerDNS is currently
> working with customers to resolve issues with an eBay related domain name,
> thumbs.g.ebay.com.  When this domain breaks, thumbnails do not show up
> correctly on eBay pages.  This impacts images hosted on
> thumbs.ebaystatic.com, which is a CNAME to thumbs.g.ebay.com.
> 
> The cause:
> 
> $ dig -t MX +norecurs thumbs.g.ebay.com @g6.ebay.com
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28835
> ;; AUTHORITY SECTION:
> g.ebay.com.		60	IN	SOA	g3.ebay.com. hostmaster.ebay.com. 3364 10800 3600 604800 60
> 
> This NXDOMAIN causes subsequent A and AAAA queries to also NXDOMAIN on
> a compliant resolver. It emits this NXDOMAIN for most query types that are
> not A or AAAA.
> 
> 'g6.ebay.com' does respond correctly for AAAA, for example:
> 
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43945
> thumbs.g.ebay.com.	60	IN	CNAME	slot5842.ebay.com.edgekey.net.
> 
> We have reached out to our contacts within eBay but these are not from the
> right department. We have also reached out to partners of eBay if these can
> perhaps reach the right people (thanks).
> 
> However, if you are eBay, or if you know anyone responsible for
> 'g3.ebay.com', please see what you can do.
> 
> For PowerDNS users, a Lua preoutquery rule can work around this issue.
> 
> 	Bert
> 	PowerDNS
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations