outlook.com outgoing blacklists?

Thu Sep 10 13:45:47 UTC 2015

Hi Matthew,

I'm pretty sure your 'gkstream.com' is wrong and that he means qkstream.com (see https://www.robtex.com/en/advisory/ip/66/171/128/130/ ). That does not seem broken. 

I do wonder if this domain qkstream.com used to be squatted? 

David Hofstee

Deliverability Management
MailPlus B.V. Netherlands (ESP)

-----Oorspronkelijk bericht-----
Van: NANOG [mailto:nanog-bounces at nanog.org] Namens Matthew Petach
Verzonden: Thursday, September 10, 2015 3:20 PM
Aan: Todd K Grand
CC: nanog at nanog.org
Onderwerp: Re: outlook.com outgoing blacklists?

On Wed, Sep 9, 2015 at 9:49 AM, Todd K Grand <tgrand at tgrand.com> wrote:
> I have an email server which hosts 3 domains.
> I have reason to believe that microsoft maintains an outgoing blacklist and would like confirmation on this.
>
> I have had many a report that people on domains hosted on hotmail/outlook are getting messages bounced back stating that our server was unreachable.
> This only happens for one of the three domains hosted on our server.
>
> I went to outlook.com and setup an account.
> When I create a new message and enter the recipient at that affected 
> domain, the address immediately turns red, and when I hover over it states that the address may not be valid.
> This happens without ever sending a packet to our servers.
> The affected domain can send emails to hotmail/outlook accounts just fine.
>
> Anybody have some recommendations on how I resolve this, as Microsoft support seems to be under technical.
>
> Thanks,
>
> Todd K. Grand
>

Certainly looks to be broken to me:

mpetach at hinotori:~> nslookup -q=any gkstream.com
Server:         8.8.8.8
Address:        8.8.8.8#53

Non-authoritative answer:
Name:   gkstream.com
Address: 185.53.179.7
gkstream.com    nameserver = ns1.parkingcrew.net.
gkstream.com    text = "v=spf1 ip6:fd1b:212c:a5f9::/48 -all"
gkstream.com    nameserver = ns2.parkingcrew.net.
gkstream.com
        origin = ns1.parkingcrew.net
        mail addr = hostmaster.gkstream.com
        serial = 1441890000
        refresh = 28800
        retry = 7200
        expire = 604800
        minimum = 86400

Authoritative answers can be found from:

mpetach at hinotori:~>

mpetach at hinotori:~> traceroute gkstream.com traceroute to gkstream.com (185.53.179.7), 64 hops max, 40 byte packets
 1  ws1 (69.36.244.130)  1 ms  1 ms  1 ms
 2  s0-0-0-2.core1.sjc.layer42.net (69.36.238.33)  4 ms  4 ms  4 ms
 3  ge2-48.core1.sv1.layer42.net (65.50.198.5)  4 ms  4 ms  4 ms
 4  te0-0-0-18.ccr21.sjc04.atlas.cogentco.com (38.104.141.145)  6 ms
41 ms  73 ms
 5  be2015.ccr21.sfo01.atlas.cogentco.com (154.54.7.173)  47 ms
(TOS=40!)  7 ms  7 ms
 6  be2132.ccr21.mci01.atlas.cogentco.com (154.54.30.54)  57 ms  57 ms  57 ms
 7  be2156.ccr41.ord01.atlas.cogentco.com (154.54.6.86)  57 ms  70 ms  57 ms
 8  be2351.ccr21.cle04.atlas.cogentco.com (154.54.44.86)  75 ms  64 ms  67 ms
 9  be2596.ccr21.yyz02.atlas.cogentco.com (154.54.31.54)  71 ms  71 ms  71 ms
10  be2090.ccr21.ymq02.atlas.cogentco.com (154.54.30.206)  84 ms  121 ms  161 ms
11  be2384.ccr21.lpl01.atlas.cogentco.com (154.54.44.138)  150 ms  150 ms  151 ms
12  be2182.ccr41.ams03.atlas.cogentco.com (154.54.77.245)  170 ms  170 ms  169 ms
13  be2261.ccr41.fra03.atlas.cogentco.com (154.54.37.30)  164 ms  164 ms  164 ms
14  be2228.ccr21.muc03.atlas.cogentco.com (154.54.38.50)  174 ms  174 ms  174 ms
15  te0-0-0-2.agr12.muc03.atlas.cogentco.com (154.54.56.222)  173 ms te0-0-0-2.agr11.muc03.atlas.cogentco.com (154.54.56.206)  191 ms te0-0-0-2.agr12.muc03.atlas.cogentco.com (154.54.56.222)  174 ms
16  154.25.8.26 (154.25.8.26)  170 ms 154.25.8.22 (154.25.8.22)  175 ms 154.25.8.26 (154.25.8.26)  170 ms
17  149.6.156.195 (149.6.156.195)  175 ms 149.6.156.202
(149.6.156.202)  173 ms  174 ms
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  *^C *
26 ^C
mpetach at hinotori:~>
mpetach at hinotori:~> telnet gkstream.com 25 Trying 185.53.179.7...

telnet: Unable to connect to remote host: Connection timed out mpetach at hinotori:~>

Matt