<div dir="ltr"><div dir="ltr">One thought that occurs to me (prompted by Joe's response) is, do they:<div>-- Make a PTR query for the apparent source address of the client, which returns "<a href="http://239-13.colo.sta.blacknight.ie" target="_blank">239-13.colo.sta.blacknight.ie</a>." and then...</div><div>-- Make a forward address query (A or AAAA) for "<a href="http://239-13.colo.sta.blacknight.ie" target="_blank">239-13.colo.sta.blacknight.ie</a>.", which gives NXDOMAIN.</div><div><br></div><div>Just a hunch, but what if you create an A record(AAAA if v6 as well) for "<a href="http://239-13.colo.sta.blacknight.ie">239-13.colo.sta.blacknight.ie</a>"? I don't know what value you'd give it, but it sounds like anything is worth a go at this point.</div><div><br></div><div>Greg</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 23 Nov 2022 at 13:42, Michele Neylon - Blacknight <<a href="mailto:michele@blacknight.com" target="_blank">michele@blacknight.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>
<div lang="EN-IE">
<div>
<p class="MsoNormal"><span style="font-size:11pt">Greg<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">From my understanding some of these companies assume that ALL our IP blocks are used for hosting and that traffic from them is from VPNs or is in some way illegitimate.
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">We have tried repeatedly to engage with the various companies, but a lot of them don’t have a public contact for their network or security team, so our clients end up having to deal
with their first level customer service teams. In the case of Disney+, for example, their CS team can resolve the issue on a per IP basis, but that obviously does not scale. Netflix does seem to be responsive thankfully, but others like Ticketmaster and All4
are a black box.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">We honestly do not know what it is that they are looking for. In the description field for our broadband IPs we try to make it clear that they’re being used for broaband and not
hosting:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">inetnum: 185.97.236.0 - 185.97.236.255<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">netname: BLACKNIGHT-BROADBAND<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">descr: Broadband Customers<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">So we are trying to tweak what we can tweak ie. That which we control in the hope that it has some impact.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">Regards<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">Michele<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">--<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">Mr Michele Neylon<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">Blacknight Solutions<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">Hosting, Colocation & Domains<u></u><u></u></span></p>
<p class="MsoNormal"><a href="https://www.blacknight.com/" target="_blank"><span style="font-size:11pt;font-family:-webkit-standard;color:rgb(5,99,193)">https://www.blacknight.com/</span></a><span style="font-size:11pt;font-family:-webkit-standard;color:black"><u></u><u></u></span></p>
<p class="MsoNormal"><a href="https://blacknight.blog/" target="_blank"><span style="font-size:11pt;font-family:-webkit-standard;color:rgb(5,99,193)">https://blacknight.blog/</span></a><span style="font-size:11pt;font-family:-webkit-standard;color:black"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">Intl. +353 (0) 59 9183072<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">Direct Dial: +353 (0)59 9183090<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">Personal blog: </span><a href="https://michele.blog/" target="_blank"><span style="font-size:11pt;font-family:-webkit-standard;color:rgb(5,99,193)">https://michele.blog/</span></a><span style="font-size:11pt;font-family:-webkit-standard;color:black"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">Some thoughts: </span><a href="https://ceo.hosting/" target="_blank"><span style="font-size:11pt;font-family:-webkit-standard;color:rgb(5,99,193)">https://ceo.hosting/</span></a><span style="font-size:11pt;font-family:-webkit-standard;color:black"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">-------------------------------<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:-webkit-standard;color:black">Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0cm 0cm">
<p class="MsoNormal" style="margin-right:0cm;margin-bottom:12pt;margin-left:36pt">
<b><span style="font-size:12pt;color:black">From: </span></b><span style="font-size:12pt;color:black">Greg Choules <<a href="mailto:gregchoules%2Bbindusers@googlemail.com" target="_blank">gregchoules+bindusers@googlemail.com</a>><br>
<b>Date: </b>Wednesday, 23 November 2022 at 13:35<br>
<b>To: </b>Michele Neylon - Blacknight <<a href="mailto:michele@blacknight.com" target="_blank">michele@blacknight.com</a>><br>
<b>Cc: </b><a href="mailto:dns-operations@dns-oarc.net" target="_blank">dns-operations@dns-oarc.net</a> <<a href="mailto:dns-operations@dns-oarc.net" target="_blank">dns-operations@dns-oarc.net</a>><br>
<b>Subject: </b>Re: [dns-operations] PTR Records for Broadband Network?<u></u><u></u></span></p>
</div>
<div style="border:1pt solid rgb(255,202,202);padding:12pt;background:rgb(255,202,202);margin-left:36pt;margin-right:0cm">
<p style="background:rgb(255,202,202);border:none;padding:0cm"><b><span style="font-size:12pt;font-family:Arial,sans-serif;color:black">[EXTERNAL EMAIL]</span></b><span style="font-family:Arial,sans-serif;color:black">
</span><span style="font-size:10pt;font-family:Arial,sans-serif;color:black">Please use caution when opening attachments from unrecognised sources.</span><span style="font-family:Arial,sans-serif"><u></u><u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-left:36pt"><span style="font-size:11pt">Hi Michele.
<u></u><u></u></span></p>
<div>
<p class="MsoNormal" style="margin-left:36pt"><span style="font-size:11pt">Before changing anything, exactly what problem is it that Disney+ etc. are having? Or better, what do they *expect* to see, if not what you have now?<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36pt"><span style="font-size:11pt">I didn't think many people used PTR records.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36pt"><span style="font-size:11pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36pt"><span style="font-size:11pt">Cheers, Greg<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:36pt"><span style="font-size:11pt"><u></u> <u></u></span></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:36pt"><span style="font-size:11pt">On Wed, 23 Nov 2022 at 12:50, Michele Neylon - Blacknight via dns-operations <</span><a href="mailto:dns-operations@dns-oarc.net" target="_blank"><span style="font-size:11pt">dns-operations@dns-oarc.net</span></a><span style="font-size:11pt">>
wrote:<u></u><u></u></span></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<p class="MsoNormal" style="margin-left:36pt"><span style="font-size:11pt"><br>
<br>
<br>
---------- Forwarded message ----------<br>
From: Michele Neylon - Blacknight <</span><a href="mailto:michele@blacknight.com" target="_blank"><span style="font-size:11pt">michele@blacknight.com</span></a><span style="font-size:11pt">><br>
To: "</span><a href="mailto:dns-operations@dns-oarc.net" target="_blank"><span style="font-size:11pt">dns-operations@dns-oarc.net</span></a><span style="font-size:11pt">" <</span><a href="mailto:dns-operations@dns-oarc.net" target="_blank"><span style="font-size:11pt">dns-operations@dns-oarc.net</span></a><span style="font-size:11pt">><br>
Cc: <br>
Bcc: <br>
Date: Wed, 23 Nov 2022 12:44:46 +0000<br>
Subject: PTR Records for Broadband Network?<u></u><u></u></span></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">All<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">Sorry if this is a little left of field, but I suspect that collectively the people on this list can give us better advice than many.<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">Many many moons ago we setup the PTR records for our network using a template that clearly flagged that the IPs were static and used for hosting.
<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">The result was that the IP 185.97.239.13 would end up with a PTR record of
</span><a href="http://239-13.colo.sta.blacknight.ie" target="_blank"><span style="font-size:11pt">239-13.colo.sta.blacknight.ie</span></a><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">Fast forward to 2022 and we now offer broadband to both businesses and consumers, but unfortunately some streaming services and others are blocking access. So our users have issues with Disney+, All4, Netflix and Ticketmaster
to name but a few examples. One of the issues appears to be the PTR records.<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">For clarity the IP blocks we use for broadband are NOT the same blocks that we use for hosting.
<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">We are therefore looking at tweaking the PTR records for the broadband net blocks.
<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">Would removing the “colo.sta” bit be enough? <u></u>
<u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">Should we replace it with something else?<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">Thanks and regards<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt">Michele<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">--</span><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">Mr Michele Neylon</span><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">Blacknight Solutions</span><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">Hosting, Colocation & Domains</span><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<a href="https://www.blacknight.com/" target="_blank"><span style="font-size:11pt;font-family:-webkit-standard;color:rgb(5,99,193)">https://www.blacknight.com/</span></a><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<a href="https://blacknight.blog/" target="_blank"><span style="font-size:11pt;font-family:-webkit-standard;color:rgb(5,99,193)">https://blacknight.blog/</span></a><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">Intl. +353 (0) 59 9183072</span><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">Direct Dial: +353 (0)59 9183090</span><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">Personal blog: </span><a href="https://michele.blog/" target="_blank"><span style="font-size:11pt;font-family:-webkit-standard;color:rgb(5,99,193)">https://michele.blog/</span></a><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">Some thoughts: </span><a href="https://ceo.hosting/" target="_blank"><span style="font-size:11pt;font-family:-webkit-standard;color:rgb(5,99,193)">https://ceo.hosting/</span></a><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">-------------------------------</span><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty</span><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt;font-family:-webkit-standard;color:black">Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845</span><span style="font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:36pt">
<span style="font-size:11pt"> <u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:36pt"><span style="font-size:11pt"><br>
<br>
<br>
---------- Forwarded message ----------<br>
From: Michele Neylon - Blacknight via dns-operations <</span><a href="mailto:dns-operations@dns-oarc.net" target="_blank"><span style="font-size:11pt">dns-operations@dns-oarc.net</span></a><span style="font-size:11pt">><br>
To: "</span><a href="mailto:dns-operations@dns-oarc.net" target="_blank"><span style="font-size:11pt">dns-operations@dns-oarc.net</span></a><span style="font-size:11pt">" <</span><a href="mailto:dns-operations@dns-oarc.net" target="_blank"><span style="font-size:11pt">dns-operations@dns-oarc.net</span></a><span style="font-size:11pt">><br>
Cc: <br>
Bcc: <br>
Date: Wed, 23 Nov 2022 12:44:46 +0000<br>
Subject: [dns-operations] PTR Records for Broadband Network?<br>
_______________________________________________<br>
dns-operations mailing list<br>
</span><a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank"><span style="font-size:11pt">dns-operations@lists.dns-oarc.net</span></a><span style="font-size:11pt"><br>
</span><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" target="_blank"><span style="font-size:11pt">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</span></a><span style="font-size:11pt"><u></u><u></u></span></p>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</div></blockquote></div></div>