> It's not broken at all...
His domain looks fine to me and others via direct queries from the
root on down, but not to you. How you can say _unequivocally_ that
your DNS is functioning correctly, though it reports that the domain
does not exist, is bewildering.
> ...and that is only one possible explanation in a long list of
> possible causes for DNS queries to timeout.
Your DNS queries timing out when the domain's nameservers are proper
and running, when properly functioning resolvers have no trouble
talking to his domain = your DNS is broken. Hey, _why_ it's broken
could be a bad NIC or a bad T1 or what-have-you, but it _is_ broken at
this time: it apparently cannot be trusted to return good results for
a correctly configured non-authoritative domain. (Or else that error
is not being reported correctly, and it's actually a euphemism for a
proprietary anti-spam technique which will _always_ fail for
dantor.com's current configuration, but you don't want to tell him
why.)
> On my MX, his domain resolved when he posted the error, so the 450
> error msg was temporary.
His posts indicate that he received the same rejection a couple of
hours ago. In other words--again, if that error message is
literal--PostFix still thinks the domain doesn't exist, even if in
your initial test the host seemed to think it did. I haven't had any
trouble reaching the domain for the past four hours, testing every 10
minutes.
> SAV is not the reason for his rejection.
> reject_unknown_sender_domain is a separate test from
> reject_unverified_sender
Whatever, man. Mailservers that verify the reachability of sender
addresses (tactics collectively called sender address verification; I
never used a PostFix-specific term, so there's no reason to throw them
in) must judge nonexistent domains as a hard fail, just as would occur
on a standard message to that domain. In other words,
reject_unverified_sender encapsulates a nonexistent domain, does it
not?
--Sandy
------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]
SpamAssassin plugs into Declude!
http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
