infra-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Stian Soiland-Reyes (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (INFRA-18302) CRITICAL: MX servers mx1-lw-us.apache.org are on private 10.x.x.x network
Date Mon, 29 Apr 2019 10:12:00 GMT

    [ https://issues.apache.org/jira/browse/INFRA-18302?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16829098#comment-16829098
] 

Stian Soiland-Reyes commented on INFRA-18302:
---------------------------------------------

Apologies for not checking from a different network. It seems someone clever is intercepting
ALL dns traffic at the University of Manchester.

{code}
(base) stain@biggie:~$ dig @example.com mx1-lw-eu.apache.org

; <<>> DiG 9.11.3-1ubuntu1.5-Ubuntu <<>> @example.com mx1-lw-eu.apache.org
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46796
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;mx1-lw-eu.apache.org.		IN	A

;; ANSWER SECTION:
mx1-lw-eu.apache.org.	1	IN	A	10.255.250.254

{code}

> CRITICAL: MX servers mx1-lw-us.apache.org are on private 10.x.x.x network
> -------------------------------------------------------------------------
>
>                 Key: INFRA-18302
>                 URL: https://issues.apache.org/jira/browse/INFRA-18302
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: DNS, Mail (postfix), Mail (qmail)
>            Reporter: Stian Soiland-Reyes
>            Priority: Critical
>
> **Critical** the DNS entries for the mail servers (MX) for *.apache.org (including apache.org)
point to an unreachable machine on a private 10.x.x.x network.
> That means mail delivery to any @*.apache.org address  **fail** or be rerouted to a different
machine on other private networks.
> {code}
> (base) stain@biggie:~$ dig @8.8.8.8 apache.org MX
> ;; QUESTION SECTION:
> ;apache.org.			IN	MX
> ;; ANSWER SECTION:
> apache.org.		317	IN	MX	10 mx1-lw-us.apache.org.
> apache.org.		317	IN	MX	10 mx1-lw-eu.apache.org.
> (base) stain@biggie:~$ dig @8.8.8.8 mx1-lw-us.apache.org.
> ;; QUESTION SECTION:
> ;mx1-lw-us.apache.org.		IN	A
> ;; ANSWER SECTION:
> mx1-lw-us.apache.org.	1	IN	A	10.255.250.254
> (base) stain@biggie:~$ dig @8.8.8.8 mx1-lw-eu.apache.org.
> ;; QUESTION SECTION:
> ;mx1-lw-eu.apache.org.		IN	A
> ;; ANSWER SECTION:
> mx1-lw-eu.apache.org.	1	IN	A	10.255.250.254
> {code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message