Today I tried to add amazon.com to my SPF domain whitelist, which
resulted in the error for each and every mail. This probably happens
because it tries to resolve the whitelist each time. So there definitely
seems to be something wrong with the results of a DNS resolve of the
amazon.com domain.
It is the same stacktrace once inside DNS/Base.py, so I didn't include
the trace in this mail.
I did a dig of the amazon.com domain from my server and this is what
gets returned. Note the line "Warning: Message parser reports malformed
message packet" in the TXT request! Let me know if you need more info.
; <<>> DiG 9.3.4-P1.1 <<>> amazon.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26723
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;amazon.com. IN A
;; ANSWER SECTION:
amazon.com. 11 IN A 72.21.210.11
amazon.com. 11 IN A 72.21.206.5
amazon.com. 11 IN A 72.21.203.1
;; Query time: 1 msec
;; SERVER: 83.133.84.53#53(83.133.84.53)
;; WHEN: Fri Oct 31 20:33:26 2008
;; MSG SIZE rcvd: 76
felixknecht:~# dig TXT amazon.com
;; Warning: Message parser reports malformed message packet.
;; Truncated, retrying in TCP mode.
; <<>> DiG 9.3.4-P1.1 <<>> TXT amazon.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27406
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;amazon.com. IN TXT
;; ANSWER SECTION:
amazon.com. 3175 IN TXT "v=spf1
ip4:207.171.160.0/19 ip4:87.238.80.0/21 ip4:72.21.193.0/24
ip4:72.21.196.0/22 ip4:72.21.208.0/24 ip4:72.21.205.0/24
ip4:72.21.209.0/24 ip4:194.154.193.200/28 ip4:194.7.41.152/28
ip4:212.123.28.40/32 ip4:203.81.17.0/24 ~all"
amazon.com. 3175 IN TXT "spf2.0/pra
ip4:207.171.160.0/19 ip4:87.238.80.0/21 ip4:72.21.193.0/24
ip4:72.21.196.0/22 ip4:72.21.208.0/24 ip4:72.21.205.0/24
ip4:72.21.209.0/24 ip4:194.154.193.200/28 ip4:194.7.41.152/28
ip4:212.123.28.40/32 ip4:203.81.17.0/24 ~all"
;; Query time: 3 msec
;; SERVER: 83.133.84.53#53(83.133.84.53)
;; WHEN: Fri Oct 31 20:33:28 2008
;; MSG SIZE rcvd: 516
A tcpdump -vv shows this:
20:45:36.872879 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto:
UDP (17), length: 56) t1117.greatnet.de.43223 >
ns-int.greatnet.de.domain: [bad udp cksum 329!] 5126+ TXT? amazon.com. (28)
20:45:36.873937 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto:
UDP (17), length: 56) ns-int.greatnet.de.domain >
t1117.greatnet.de.43223: [udp sum ok] 5126| q: TXT? amazon.com. 2/0/0
[|domain]
Let me know if you need more dumps/raw data.
Cheers, Felix
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
