Dear Filisko,

Thank you for reaching out. But I’m not sure AFRINIC has anything to do with 
this, as our role is limited to maintaining reverse DNS.

The client IPs do not use AFRINIC DNS server to resolve the CNAME, they might 
want to talk to their operator, which I suppose maintains a resolver.

Hope that helps.

Regards,
Amreesh



> On 19 Jul 2018, at 11:11, Filisko, Steven V <[email protected]> wrote:
> 
> To Whom It May Concern:
>  
> I'm from PNC Bank in the US.  We swapped a CNAME in our DNS on 2018-06-27 to 
> move clients to new DataCenters for our Mobile Banking App.
>  
> I am seeing a small number of customer client IPs hitting our old Datacenter 
> -- All are IPs registered to AfriNic.
>  
> I believe there is a bad cache within your DNS systems.  The TTL should have 
> expired in 300s.
> The following are the affected names.
>  
> PROPER RESOLUTION:
>  
> servicelink1.pnc.com    canonical name = servicelink.glbo.pnc.com.
> servicelink2.pnc.com    canonical name = servicelink.glbo.pnc.com.
>  
> PREVIOUS RESOLUTION:
>  
> servicelink1.pnc.com    canonical name = servicelink1.glbo.pnc.com.
> servicelink2.pnc.com    canonical name = servicelink2.glbo.pnc.com.
>  
> AfriNic Client IPs:
>  
> 197.177.160.3
> 105.165.192.13
>  
>  
> Please let me know what can be done about this and let me know if you require 
> additional information!!!
>  
> Thanks!
>  
> Steve
>  
> Steven V. Filisko
> Lead Security Engineer / DataPower ATL | PS&A
> Product Security & Assurance | Cyber Security
> PNC Financial Services Group | Cleveland
> [email protected]
>  
> 
> The contents of this email are the property of PNC. If it was not addressed 
> to you, you have no legal right to read it. If you think you received it in 
> error, please notify the sender. Do not forward or copy without permission of 
> the sender. This message may be considered a commercial electronic message 
> under Canadian law or this message may contain an advertisement of a product 
> or service and thus may constitute a commercial electronic mail message under 
> US law. You may unsubscribe at any time from receiving commercial electronic 
> messages from PNC at http://pages.e.pnc.com/globalunsub/
> PNC, 249 Fifth Avenue, Pittsburgh, PA 15222; pnc.com
> 
> _______________________________________________
> DNSSEC-Ops mailing list
> [email protected]
> https://lists.afrinic.net/mailman/listinfo/dnssec-ops


_______________________________________________
DNSSEC-Ops mailing list
[email protected]
https://lists.afrinic.net/mailman/listinfo/dnssec-ops

Reply via email to