<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:515389736;
mso-list-type:hybrid;
mso-list-template-ids:-1927932288 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Sorry for going dark on this issue. I appreciate the efforts everyone has put into this issue for me and the students in Western
<o:p></o:p></p>
<p class="MsoNormal">New York.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo1">172.64.80.1 was blocked by our firewall (I believed based on Fortinet malware intelligence). It was also triggering in Google Chrome as a potentially malicious site as well.<o:p></o:p></li></ol>
<p class="MsoListParagraph"><o:p> </o:p></p>
<p class="MsoListParagraph">Regardless, From Warren’s emails, it looks like this was still not a valid address to reach deltamath.com’s web page.<o:p></o:p></p>
<p class="MsoListParagraph"><o:p> </o:p></p>
<ol style="margin-top:0in" start="2" type="1">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo1">I am still getting the inconsistent result when querying one of the authoritative name servers:<br>
[wbrown@ns3 ~]$ dig @jarred.ns.cloudflare.com deltamath.com +short<br>
172.64.80.1<br>
[wbrown@ns3 ~]$ dig @jarred.ns.cloudflare.com deltamath.com +short<o:p></o:p></li></ol>
<p class="MsoListParagraph">104.26.3.229<br>
104.26.2.229<br>
172.67.75.10<o:p></o:p></p>
<ol style="margin-top:0in" start="3" type="1">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo1">We have reached out to deltamath in conjunction with the school districts and deltamath has reached out to CF on this issue.<o:p></o:p></li></ol>
<p class="MsoListParagraph"><o:p> </o:p></p>
<div>
<p class="MsoNormal">At this point, I will let deltamath and CF work this all out.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Again, thank you everyone that assisted with this issue.<o:p></o:p></p>
<p class="MsoNormal"><o:p></o:p></p>
<p class="MsoNormal">--<o:p></o:p></p>
<p class="MsoNormal">William Brown<o:p></o:p></p>
<p class="MsoNormal">WNYRIC/Erie 1 BOCES<o:p></o:p></p>
<p class="MsoNormal">716-821-7285<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">SharePoint, Eforms, Email, Spam Filtering Please reach out to
<a href="mailto:messaging@e1b.org">messaging@e1b.org</a><o:p></o:p></p>
<p class="MsoNormal">Immediate Needs Call our Service Desk at 716-821-7171<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Adam David <adam.vallee@gmail.com> <br>
<b>Sent:</b> Wednesday, September 22, 2021 7:17 PM<br>
<b>To:</b> Brown, William <wbrown@e1b.org><br>
<b>Cc:</b> Erik Stian Tefre <erik@tefre.com>; dns-operations@lists.dns-oarc.net<br>
<b>Subject:</b> Re: [dns-operations] Oddness with Cloudfare authoritative servers<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="mso-element:para-border-div;border:solid red 1.5pt;padding:0in 0in 0in 0in;background:#F9E79F">
<p align="center" style="text-align:center;line-height:10.0pt;background:#F9E79F;border:none;padding:0in">
<b><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:red">******** This email originated from outside of the organization. Use caution when replying, opening attachment(s), and/or clicking on URL's. ********
<o:p></o:p></span></b></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">This does not seem to be a DNS resolution/misconfiguration issue on Cloudflare's end. <br>
<br>
<a href="https://172.64.80.1/">https://172.64.80.1/</a> provides an error message (as it should) indicating it is a CloudFlare IP. If you can't see that in a web browser, then the issue is local to your network.
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The main causes that I gather would be:<br>
<br>
1. There was a temporary cache propagation issue on CF's network. (Still not a DNS issue.)
<o:p></o:p></p>
<div>
<p class="MsoNormal">2. Your IT department is using <a href="http://172.0.0.0/9">
172.0.0.0/9</a> or possibly even <a href="http://172.0.0.0/8">172.0.0.0/8</a> where they intended to use <a href="http://172.16.0.0/12">172.16.0.0/12</a> (RFC1918 IP space). This would block access to the netblock belonging to Cloudflare and you would have
difficulty accessing thousands of websites.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> Side Note: <a href="http://172.64.0.0/13">
172.64.0.0/13</a> belongs to AS13335.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">You should always start with your IT department.<br>
If you are a Cloudflare customer, contact them directly.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">If you are a DeltaMath customer, then you need to contact them directly.<o:p></o:p></p>
</div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">Sincerely,</span><o:p></o:p></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif">Adam Vallee<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Wed, Sep 22, 2021 at 4:03 PM Brown, William <<a href="mailto:wbrown@e1b.org">wbrown@e1b.org</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal">From: dns-operations <<a href="mailto:dns-operations-bounces@dns-oarc.net" target="_blank">dns-operations-bounces@dns-oarc.net</a>> On Behalf Of Erik Stian Tefre<br>
Sent: Wednesday, September 22, 2021 3:38 PM<br>
To: <a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
Subject: Re: [dns-operations] Oddness with Cloudfare authoritative servers<br>
<br>
> Possibly not a DNS issue at all, but something like this:<br>
<br>
> <a href="https://community.cloudflare.com/t/revil-ransomware/301435" target="_blank">
https://community.cloudflare.com/t/revil-ransomware/301435</a><br>
<br>
> (Executive summary: One Cloudflare IP being blocked by a firewall because of a different and misbehaving Cloudflare customer who happened to serve malicious content from that same IP.)<br>
<br>
> Regards,<br>
> Erik<br>
<br>
Interesting. The real issue I am experiencing is that I am getting inconsistent responses from nominally the same authoritative server. It just so happens that when we get 172.64.80.1 as the answer it fails. I would prefer to get the correct answer so students
can use the online educational resource the district is paying for.<br>
Confidentiality Notice: This electronic message and any attachments may contain confidential or privileged information, and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agent
responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachments. Please notify the sender immediately by
return e-mail or telephone and delete this message from your system.<br>
<br>
_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><o:p></o:p></p>
</blockquote>
</div>
</div>
</div>
Confidentiality Notice: This electronic message and any attachments may contain confidential or privileged information, and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agent
responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachments. Please notify the sender immediately by
return e-mail or telephone and delete this message from your system.
</body>
</html>