On 1-Feb-2007, at 06:50, Stefan Schmidt wrote:
Well...
reject-all.vix.com. 3600 IN NS ns.lah1.vix.com.
reject-all.vix.com. 3600 IN NS ns.sql1.vix.com.
dig any 2.0.0.127.reject-all.vix.com @ns.sql1.vix.com gives
status: REFUSED
and as ns.lah1.vix.com does alike all authorative nameservers for this
zone are some kind of hmm 'unreachable' thus resulting in a
SERVFAIL from
your recursive nameserver.
It seems like your MTA is not very gracious to SERVFAILs from DNSRBLs.
... or alternatively, that this is a private DNSRBL which has access
restrictions.
Joe