get.comcastbusiness.com fails DNSSEC validation

Hi,

I've been wondering why my mail server keeps rejecting email from @get.comcastbusiness.com. The domain lookup fails. I dug deeper and saw there were DNSSEC validation errors in the log files... the DNSSEC validation chain fails. A simple domain lookup even even fails with Comcast's DNS servers.

dig get.comcastbusiness.com @75.75.75.75

But it succeeds with any non-DNSSEC validating resolver, like Google Public DNS and OpenDNS.

dig get.comcastbusiness.com @8.8.4.4

dig get.comcastbusiness.com @208.67.222.222

To see the full details of why it fails, see:

http://dnsviz.net/d/get.comcastbusiness.com/dnssec/

Please fix the DNSSEC validation for get.comcastbusiness.com.

Thanks,

--Steve

Responses

Accepted Solution

CC_John

Retired Employee

•

1.9K Messages

11 years ago

Welcome Bitblaster. Thank you for highlighting this issue. Our DNS Support team reports this as resolved. Please let us know if you need further assistance.

Thank You

0

Accepted Solution

bitblaster

New problem solver

•

11 Messages

11 years ago

By the way, if someone sees a similar DNS/DNSSEC problem in the future, post the issue through the Comcast DNS contact page. They had this fixed pretty quickly. http://dns.comcast.net/index.php/contactus

0

Comcast_Jon

Administrator

•

1.5K Messages

11 years ago

Hello bitblaster,

Thank you for sharing this information with the community.

We appreciate it and look forward to your future contribution to engage your fellow community members.

Thank you

0