[dns-operations] PTR Records for Broadband Network?

Greg Choules gregchoules+dnsops at googlemail.com
Wed Nov 23 14:11:26 UTC 2022


One thought that occurs to me (prompted by Joe's response) is, do they:
-- Make a PTR query for the apparent source address of the client, which
returns "239-13.colo.sta.blacknight.ie." and then...
-- Make a forward address query (A or AAAA) for "
239-13.colo.sta.blacknight.ie.", which gives NXDOMAIN.

Just a hunch, but what if you create an A record(AAAA if v6 as well) for "
239-13.colo.sta.blacknight.ie"? I don't know what value you'd give it, but
it sounds like anything is worth a go at this point.

Greg

On Wed, 23 Nov 2022 at 13:42, Michele Neylon - Blacknight <
michele at blacknight.com> wrote:

> Greg
>
>
>
> From my understanding some of these companies assume that ALL our IP
> blocks are used for hosting and that traffic from them is from VPNs or is
> in some way illegitimate.
>
> We have tried repeatedly to engage with the various companies, but a lot
> of them don’t have a public contact for their network or security team, so
> our clients end up having to deal with their first level customer service
> teams. In the case of Disney+, for example, their CS team can resolve the
> issue on a per IP basis, but that obviously does not scale. Netflix does
> seem to be responsive thankfully, but others like Ticketmaster and All4 are
> a black box.
>
> We honestly do not know what it is that they are looking for. In the
> description field for our broadband IPs we try to make it clear that
> they’re being used for broaband and not hosting:
>
>
>
> inetnum:        185.97.236.0 - 185.97.236.255
>
> netname:        BLACKNIGHT-BROADBAND
>
> descr:          Broadband Customers
>
>
>
> So we are trying to tweak what we can tweak ie. That which we control in
> the hope that it has some impact.
>
>
>
>
>
> Regards
>
>
>
> Michele
>
>
>
> --
>
> Mr Michele Neylon
>
> Blacknight Solutions
>
> Hosting, Colocation & Domains
>
> https://www.blacknight.com/
>
> https://blacknight.blog/
>
> Intl. +353 (0) 59  9183072
>
> Direct Dial: +353 (0)59 9183090
>
> Personal blog: https://michele.blog/
>
> Some thoughts: https://ceo.hosting/
>
> -------------------------------
>
> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
>
> Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845
>
>
>
>
>
> *From: *Greg Choules <gregchoules+bindusers at googlemail.com>
> *Date: *Wednesday, 23 November 2022 at 13:35
> *To: *Michele Neylon - Blacknight <michele at blacknight.com>
> *Cc: *dns-operations at dns-oarc.net <dns-operations at dns-oarc.net>
> *Subject: *Re: [dns-operations] PTR Records for Broadband Network?
>
> *[EXTERNAL EMAIL]* Please use caution when opening attachments from
> unrecognised sources.
>
> Hi Michele.
>
> Before changing anything, exactly what problem is it that Disney+ etc. are
> having? Or better, what do they *expect* to see, if not what you have now?
>
> I didn't think many people used PTR records.
>
>
>
> Cheers, Greg
>
>
>
> On Wed, 23 Nov 2022 at 12:50, Michele Neylon - Blacknight via
> dns-operations <dns-operations at dns-oarc.net> wrote:
>
>
>
>
> ---------- Forwarded message ----------
> From: Michele Neylon - Blacknight <michele at blacknight.com>
> To: "dns-operations at dns-oarc.net" <dns-operations at dns-oarc.net>
> Cc:
> Bcc:
> Date: Wed, 23 Nov 2022 12:44:46 +0000
> Subject: PTR Records for Broadband Network?
>
> All
>
>
>
> Sorry if this is a little left of field, but I suspect that collectively
> the people on this list can give us better advice than many.
>
>
>
> Many many moons ago we setup the PTR records for our network using a
> template that clearly flagged that the IPs were static and used for
> hosting.
>
>
>
> The result was that the IP 185.97.239.13 would end up with a PTR record of
> 239-13.colo.sta.blacknight.ie
>
>
>
> Fast forward to 2022 and we now offer broadband to both businesses and
> consumers, but unfortunately some streaming services and others are
> blocking access. So our users have issues with Disney+, All4, Netflix and
> Ticketmaster to name but a few examples. One of the issues appears to be
> the PTR records.
>
>
>
> For clarity the IP blocks we use for broadband are NOT the same blocks
> that we use for hosting.
>
>
>
> We are therefore looking at tweaking the PTR records for the broadband net
> blocks.
>
>
>
> Would removing the “colo.sta” bit be enough?
>
>
>
> Should we replace it with something else?
>
>
>
> Thanks and regards
>
>
>
> Michele
>
>
>
>
>
>
>
> --
>
> Mr Michele Neylon
>
> Blacknight Solutions
>
> Hosting, Colocation & Domains
>
> https://www.blacknight.com/
>
> https://blacknight.blog/
>
> Intl. +353 (0) 59  9183072
>
> Direct Dial: +353 (0)59 9183090
>
> Personal blog: https://michele.blog/
>
> Some thoughts: https://ceo.hosting/
>
> -------------------------------
>
> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
>
> Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845
>
>
>
>
>
>
> ---------- Forwarded message ----------
> From: Michele Neylon - Blacknight via dns-operations <
> dns-operations at dns-oarc.net>
> To: "dns-operations at dns-oarc.net" <dns-operations at dns-oarc.net>
> Cc:
> Bcc:
> Date: Wed, 23 Nov 2022 12:44:46 +0000
> Subject: [dns-operations] PTR Records for Broadband Network?
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20221123/ae854dee/attachment-0001.html>


More information about the dns-operations mailing list