Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.