[dns-operations] Microsoft DNS DNSSEC issues

[Chad Dailey]

Any listeners from the Microsoft DNS team here?

Had an issue that started last week around 0304 CST 11/7/2024, mail
deliverability for our Exchange service went to zero.  Digging <rimshot>
deeper it looks like the DNSSEC chain is failing, because an invalid RCODE
is being returned.  Forcing +noedns on our recursive boxes restores
service, but would prefer not to leave this in place.  Doesn't seem much
like the Exchange team understands what's happening, they might need a
nudge.

https://dnsviz.net/d/mail.protection.outlook.com/dnssec/

Hit me up if you want the case number or other details.

Thanks for your time,
Chad D
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20241112/63712d06/attachment.html>