(If "DIG" was used to produce output's this would be easier to debug...)
Here i my 5-cents,
DNS servers/DNS revolvers do nowadays not respond if the indirect bit is set
in a query. This might be the thing we are seeing?
-P
----- Original Message -----
From: "bqt" <bqt at softjar.se>
To: "hecnet" <hecnet at Update.UU.SE>
Sent: Monday, August 16, 2021 9:34:20 PM
Subject: Re: [HECnet] All gone silent
On 2021-08-17 03:04, Paul Koning wrote:
On Aug 16, 2021, at 6:36 PM, Mark <mwjr at
protonmail.com> wrote:
Mystery solved (or at least the mystery of no response) - I used to have some
issues when I ran authoratitive DNS and mail directly from our school's IP
addresses rather than an 'established' (big tech co) source
Why would that explain the failure to answer DNS queries? DNS servers are
supposed to answer queries from everyone. I've never heard of failing to do
so. FWIW, I just tried asking ns1.protonmail.ch about mail.protonmail.ch, and
it was happy to answer me (to my random Comcast client addresses, IPv4 and IPv6
both work).
I think the comment should be read as "that explains the failure of the
mail being delivered".
Why the DNS queries are blocked from my mail server remains a mystery,
but it is a fact that they are.
I could/should update that machine, in case there is something in my
whole setup that is a reason, but right now I can't really understand
what that would be...
If I explicitly give the IP address of ns1.protonmail.ch as the name
server, I do get a response. Not sure if it might in the end be some
other name server that is refusing me, and I don't really feel like
trying to figure out where things are going wrong right now.
But maybe updating my system will help. We'll see. Something I'll try in
the next day or two.
Johnny
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol