[Dovecot] is reverse dns down ?
Hi guys, is that a genuine email from the list, I'm getting it rejected as it's missing reverse hostname:
May 2 21:21:41 postfix/smtpd[18033]: NOQUEUE: reject: RCPT from unknown[194.89.34.45]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [194.89.34.45]; from=<dovecot-bounces@dovecot.org> to=<voytek@sbt.net.au> proto=ESMTP helo=<mkentta.iki.fi>
# host mkentta.iki.fi mkentta.iki.fi has address 194.89.34.45 mkentta.iki.fi mail is handled by 10 mkentta.iki.fi. mkentta.iki.fi mail is handled by 100 smtp.menturagroup.com.
# host 194.89.34.45 Host 45.34.89.194.in-addr.arpa. not found: 3(NXDOMAIN)
-- Voytek
Hi Voytek,
I am not having any problem:
# host mkentta.iki.fi mkentta.iki.fi has address 194.89.34.45 mkentta.iki.fi mail is handled by 100 smtp.menturagroup.com. mkentta.iki.fi mail is handled by 10 mkentta.iki.fi.
# host 194.89.34.45 45.34.89.194.in-addr.arpa domain name pointer mkentta.iki.fi.
Maybe it's a local problem with your NS server.
On 02/05/11 13:30, Voytek Eymont wrote:
Hi guys, is that a genuine email from the list, I'm getting it rejected as it's missing reverse hostname:
May 2 21:21:41 postfix/smtpd[18033]: NOQUEUE: reject: RCPT from unknown[194.89.34.45]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [194.89.34.45]; from=<dovecot-bounces@dovecot.org> to=<voytek@sbt.net.au> proto=ESMTP helo=<mkentta.iki.fi>
# host mkentta.iki.fi mkentta.iki.fi has address 194.89.34.45 mkentta.iki.fi mail is handled by 10 mkentta.iki.fi. mkentta.iki.fi mail is handled by 100 smtp.menturagroup.com.
# host 194.89.34.45 Host 45.34.89.194.in-addr.arpa. not found: 3(NXDOMAIN)
--
Esther Yébenes esther.yebenes@conzentra.com <mailto:esther.yebenes@conzentra.com> Tel. +34 93 412 3750. Ext. 306 Fax. +34 902 889 440 .............................................................................................
Síguenos en:
<http://www.conzentra.com/blog> <http://twitter.com/conzentra> <http://www.linkedin.com/companies/299378/CONZENTRA> <http://www.facebook.com/search/?q=conzentra#/pages/Conzentra/61708633849>
Conzentra your internet bussines partner www.conzentra.com <http://www.conzentra.com>
Barcelona c/ Sancho de Ávila 52, 5º 4ª, Distrito 22@. 08009 Barcelona Conzentra BCN en Google Maps! <http://maps.google.es/maps?f=q&source=s_q&hl=es&geocode=&q=sancho+%C3%A1vila+52,+barcelona&sll=41.394872,2.171559&sspn=0.011815,0.019226&g=diputaci%C3%B3+306,+barcelona&ie=UTF8&ll=41.396723,2.184541&spn=0.011815,0.019226&z=16&iwloc=addr>
Madrid c/ Alcalá 85, 3º izq. 28009 Madrid Conzentra Madrid en Google Maps! <http://maps.google.es/maps?f=q&source=s_q&hl=es&geocode=&q=alcala+85,+madrid&sll=40.420726,-3.685797&sspn=0.01199,0.019226&g=alcala+85,+madrid&ie=UTF8&z=16&iwloc=addr&layer=c&cbll=40.420781,-3.685894&panoid=mJZObLBW_Cfrl59LgJfNpg&cbp=12,126.67804002460021,,0,5>
Girona P.º Olot 68-70, bajos. 17006 Girona Conzentra Girona en Google Maps! <http://maps.google.es/maps?f=q&source=s_q&hl=es&geocode=&q=Passeig+Olot+68,+17006,+Girona&sll=42.187497,2.497172&sspn=0.01167,0.019226&g=Passeig+Olot+68,+Girona&ie=UTF8&z=16&iwloc=addr>
Tandil c/ 9 de Julio 388, 5ª 2000 Tandil (Argentina) Conzentra Tandil en Google Maps! <http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=c%2F+9+de+Julio+388,+2000++Tandil+%28Buenos+Aires%29&sll=-37.328656,-59.133825&sspn=0.006526,0.013862&g=c%2F+9+de+Julio+388,+2000++Tandil&ie=UTF8&ll=-37.328553,-59.133825&spn=0.006526,0.013862&z=17&iwloc=addr> .............................................................................................
Advertencia: Este correo electrónico contiene información privada y confidencial. Si usted no es el destinatario del presente mensaje no está autorizado a leerlo, retenerlo o difundirlo.
Warning: This e-mail is privileged, confidential and contains private information. Any reading, retention, distribution or copying of this communication by any person other than its intended recipient is prohibited.
On 5/2/2011 6:30 AM, Voytek Eymont wrote:
# host 194.89.34.45 Host 45.34.89.194.in-addr.arpa. not found: 3(NXDOMAIN)
~$ host 194.89.34.45 45.34.89.194.in-addr.arpa domain name pointer mkentta.iki.fi.
~$ prdns.pl 194.89.34.45/32 194.89.34.45: mkentta.iki.fi
~$ rdns-tool.pl 194.89.34.45/32 using mask 32 194.89.34.45: mkentta.iki.fi
Looks like there's a DNS issue on your end. Try flushing your cache. For obvious reasons Postfix returns a 450 in this case, so the list server will attempt delivery for a few days.
If you don't run your own resolver on your Postfix MX I suggest you do so. I use PowerDNS recursor on my MX MTAs. Works great. Setup takes less than 5 minutes. Caching is in memory only, not disk, so a restart clears everything.
-- Stan
Quoting Stan Hoeppner <stan@hardwarefreak.com>:
On 5/2/2011 6:30 AM, Voytek Eymont wrote:
# host 194.89.34.45 Host 45.34.89.194.in-addr.arpa. not found: 3(NXDOMAIN)
~$ host 194.89.34.45 45.34.89.194.in-addr.arpa domain name pointer mkentta.iki.fi.
~$ prdns.pl 194.89.34.45/32 194.89.34.45: mkentta.iki.fi
~$ rdns-tool.pl 194.89.34.45/32 using mask 32 194.89.34.45: mkentta.iki.fi
Looks like there's a DNS issue on your end. Try flushing your
cache. For obvious reasons Postfix returns a 450 in this case, so
the list server will attempt delivery for a few days.If you don't run your own resolver on your Postfix MX I suggest you
do so. I use PowerDNS recursor on my MX MTAs. Works great. Setup
takes less than 5 minutes. Caching is in memory only, not disk, so
a restart clears everything.-- Stan
got a mail from sonera today which says it's fixed.
Helga
Helga Mayer Universität Hohenheim Kommunikations-, Informations- und Medienzentrum (630) IT-Dienste | Mail
Schloss-Westhof-Süd | 70599 Stuttgart Tel.: +49 711 459-22838 | Fax: +49 711 459-23449 https://kim.uni-hohenheim.de
On Mon, May 02, 2011 at 10:30:44PM +1100, Voytek Eymont wrote:
Hi guys, is that a genuine email from the list, I'm getting it rejected as it's missing reverse hostname:
May 2 21:21:41 postfix/smtpd[18033]: NOQUEUE: reject: RCPT from unknown[194.89.34.45]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [194.89.34.45]; from=<dovecot-bounces@dovecot.org> to=<voytek@sbt.net.au> proto=ESMTP helo=<mkentta.iki.fi>
# host mkentta.iki.fi mkentta.iki.fi has address 194.89.34.45 mkentta.iki.fi mail is handled by 10 mkentta.iki.fi. mkentta.iki.fi mail is handled by 100 smtp.menturagroup.com.
# host 194.89.34.45 Host 45.34.89.194.in-addr.arpa. not found: 3(NXDOMAIN)
We discussed this the other day under Timo's thread about dovecot.org. It seems that ns.ripe.net., one of the NS hosts for 89.194.in-addr.arpa., is not returning the PTR for 45.34.89.194.in-addr.arpa. AFAICS the other NS hosts seem to be working fine, but if your resolver was unlucky enough to hit ns.ripe.net., you have a host with no PTR.
It's like Russian roulette with rDNS. I suspect it might be a casualty of DNSSEC, but I get the same "noerror" response when querying with +dnssec and +nodnssec.
At this point those who use the normally safe and reasonable reject_unknown_reverse_client_hostname restriction should consider whitelisting mkentta.iki.fi[194.89.34.45] in the MTA.
And Timo needs to scream louder at the ISP. ;)
Offlist mail to this address is discarded unless
"/dev/rob0" or "not-spam" is in Subject: header
participants (5)
-
/dev/rob0
-
Esther Yébenes --Conzentra--
-
Helga Mayer
-
Stan Hoeppner
-
Voytek Eymont