Spam detection software, running on the system
"lucid-nonsense.infracaninophile.co.uk", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
The administrator of that system for details.
Content preview: On 17/06/2011 14:33, Andrew Benton wrote: > On Fri, 17 Jun
2011 13:01:00 +0100 > Phil Mayers <p.may...@imperial.ac.uk> wrote: > >> On
17/06/11 12:10, Andrew Benton wrote: >>> >>> And it works well for every
domain on the internet. Except for >>> www.nhs.uk - I can't resolve nhs.uk
>> >> www.nhs.uk is, currently, a CNAME to >> www.prod.nhs.uk.akadns.net
>> >> You might be suffering from the bind 9.8 CNAME issue. See the recent,
>> repeated discussions in the archives, including a link to a quick >>
one-line
patch you can apply to see if it fixes it. > > Do you mean this patch? >
>
http://www.freebsd.org/cgi/cvsweb.cgi/~checkout~/ports/dns/bind98/files/patch-bin__named__query.c?rev=1.1
> > I've just tried it and it made no difference. I'm not convinced of this
> CNAME hypothesis. Could you point me towards the threads where it is >
discussed? I'm new here. [...]
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
3.2 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
0.7 TVD_RCVD_IP TVD_RCVD_IP
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see
http://www.openspf.org/Why?s=mfrom;id=m.seaman%40infracaninophile.co.uk;ip=81.187.76.166;r=lucid-nonsense.infracaninophile.co.uk]
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.0552]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
--- Begin Message ---
On 17/06/2011 14:33, Andrew Benton wrote:
> On Fri, 17 Jun 2011 13:01:00 +0100
> Phil Mayers <p.may...@imperial.ac.uk> wrote:
>
>> On 17/06/11 12:10, Andrew Benton wrote:
>>>
>>> And it works well for every domain on the internet. Except for
>>> www.nhs.uk - I can't resolve nhs.uk
>>
>> www.nhs.uk is, currently, a CNAME to
>> www.prod.nhs.uk.akadns.net
>>
>> You might be suffering from the bind 9.8 CNAME issue. See the recent,
>> repeated discussions in the archives, including a link to a quick
>> one-line patch you can apply to see if it fixes it.
>
> Do you mean this patch?
>
> http://www.freebsd.org/cgi/cvsweb.cgi/~checkout~/ports/dns/bind98/files/patch-bin__named__query.c?rev=1.1
>
> I've just tried it and it made no difference. I'm not convinced of this
> CNAME hypothesis. Could you point me towards the threads where it is
> discussed? I'm new here.
Works for me using the FreeBSD bind98 port:
lucid-nonsense:~:% /usr/local/bin/dig www.nhs.uk
; <<>> DiG 9.8.0-P2 <<>> www.nhs.uk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41398
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 9, ADDITIONAL: 9
;; QUESTION SECTION:
;www.nhs.uk. IN A
;; ANSWER SECTION:
www.nhs.uk. 900 IN CNAME www.prod.nhs.uk.akadns.net.
www.prod.nhs.uk.akadns.net. 300 IN A 217.64.234.65
;; AUTHORITY SECTION:
akadns.net. 75490 IN NS zc.akadns.org.
akadns.net. 75490 IN NS za.akadns.org.
akadns.net. 75490 IN NS zd.akadns.org.
akadns.net. 75490 IN NS usw2.akadns.net.
akadns.net. 75490 IN NS zb.akadns.org.
akadns.net. 75490 IN NS asia9.akadns.net.
akadns.net. 75490 IN NS use3.akadns.net.
akadns.net. 75490 IN NS eur1.akadns.net.
akadns.net. 75490 IN NS use4.akadns.net.
;; ADDITIONAL SECTION:
za.akadns.org. 7090 IN A 96.6.112.198
zb.akadns.org. 7090 IN A 64.211.42.194
zc.akadns.org. 7090 IN A 124.40.52.133
zd.akadns.org. 7090 IN A 72.246.46.4
eur1.akadns.net. 75490 IN A 195.59.44.134
use3.akadns.net. 75490 IN A 72.246.46.4
use4.akadns.net. 75490 IN A 208.44.108.137
usw2.akadns.net. 75490 IN A 64.211.42.194
asia9.akadns.net. 75490 IN A 222.122.64.133
;; Query time: 254 msec
;; SERVER: ::1#53(::1)
;; WHEN: Fri Jun 17 17:41:16 2011
;; MSG SIZE rcvd: 402
What do you get doing a 'dig +trace nhs.uk' from your recursive
nameserver? Could it be a firewall or routing problem stopping you
contacting the authoritative nameservers for nhs.uk -- can you
traceroute / mtr to 194.176.105.223 and 80.2.101.230 ? Can you
dig @80.2.101.230 www.nhs.uk
and similarly for the other nameserver address?
Cheers,
Matthew
--
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
JID: matt...@infracaninophile.co.uk Kent, CT11 9PW
signature.asc
Description: OpenPGP digital signature
--- End Message ---
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
