Hello,
Besides potential Email issues is there any security signficance to Quad9's resolvers reflecting an error when hovering your cursor over the ptr resolver address that is underlined in red with the error reading "PTR record (reverse DNS) for this IP Warning: The claimed hostname does not resolve to this IP." See the attached image.
I run all internet traffic through a VPN using my Asus's router's WAN settings to have all DNS queries provided by Quad9 using DoT with Quad9's malware protection. The errors are generated when I browse to the URL of "https://dnscheck.tools/" to check that my router's settings are functioning as intended. I have submitted info to Quad9's support. There reply is enclosed in the CODE below:
I've already verified that my Linux maching is running DoT by using Quad9's Protocol Test which returns "dot." when their command is run from terminal. I've already checked with my email service which stated there is no problem with the Quad9's resolvers showing the PTR error as it pertains to my email client on my PCs. So I'm thinking I'm okay. I'm simplying trying to reduce my risk while browing the internet, and thought that I'd ask the question above.
Thanks for the help!
Regards,
GoldWing
Besides potential Email issues is there any security signficance to Quad9's resolvers reflecting an error when hovering your cursor over the ptr resolver address that is underlined in red with the error reading "PTR record (reverse DNS) for this IP Warning: The claimed hostname does not resolve to this IP." See the attached image.
I run all internet traffic through a VPN using my Asus's router's WAN settings to have all DNS queries provided by Quad9 using DoT with Quad9's malware protection. The errors are generated when I browse to the URL of "https://dnscheck.tools/" to check that my router's settings are functioning as intended. I have submitted info to Quad9's support. There reply is enclosed in the CODE below:
Code:
Hello,
As the message indicates, it's a "warning", not an "error", which is a generous log level assignment and is probably more like "info"
It's stating that the forward and reverse zones don't match for that IP. Getting those matching globally is on our list of things to do, but not in the next few months.
Since our network partners own the Unicast IP space, we cannot set this ourselves and have to ask for them to change it.
That is a project that will take dozens of hours to sync up globally between us and our network partners, which is a formidable task for our small nonprofit run by 8, full-time staff.
Appreciate you bringing this to our attention, and we appreciate dnscheck.tools' attention to detail.
I've already verified that my Linux maching is running DoT by using Quad9's Protocol Test which returns "dot." when their command is run from terminal. I've already checked with my email service which stated there is no problem with the Quad9's resolvers showing the PTR error as it pertains to my email client on my PCs. So I'm thinking I'm okay. I'm simplying trying to reduce my risk while browing the internet, and thought that I'd ask the question above.
Thanks for the help!
Regards,
GoldWing
