It was not a DNS issue. It was SMTP VRFY ----- Original Message ----- From: "Sanford Whiteman" <[EMAIL PROTECTED]> To: "Len Conrad" <[EMAIL PROTECTED]> Sent: Tuesday, March 30, 2004 2:08 AM Subject: Re[3]: [IMail Forum] IMGate
> > It's not broken at all... > > His domain looks fine to me and others via direct queries from the > root on down, but not to you. How you can say _unequivocally_ that > your DNS is functioning correctly, though it reports that the domain > does not exist, is bewildering. > > > ...and that is only one possible explanation in a long list of > > possible causes for DNS queries to timeout. > > Your DNS queries timing out when the domain's nameservers are proper > and running, when properly functioning resolvers have no trouble > talking to his domain = your DNS is broken. Hey, _why_ it's broken > could be a bad NIC or a bad T1 or what-have-you, but it _is_ broken at > this time: it apparently cannot be trusted to return good results for > a correctly configured non-authoritative domain. (Or else that error > is not being reported correctly, and it's actually a euphemism for a > proprietary anti-spam technique which will _always_ fail for > dantor.com's current configuration, but you don't want to tell him > why.) > > > On my MX, his domain resolved when he posted the error, so the 450 > > error msg was temporary. > > His posts indicate that he received the same rejection a couple of > hours ago. In other words--again, if that error message is > literal--PostFix still thinks the domain doesn't exist, even if in > your initial test the host seemed to think it did. I haven't had any > trouble reaching the domain for the past four hours, testing every 10 > minutes. > > > SAV is not the reason for his rejection. > > reject_unknown_sender_domain is a separate test from > > reject_unverified_sender > > Whatever, man. Mailservers that verify the reachability of sender > addresses (tactics collectively called sender address verification; I > never used a PostFix-specific term, so there's no reason to throw them > in) must judge nonexistent domains as a hard fail, just as would occur > on a standard message to that domain. In other words, > reject_unverified_sender encapsulates a nonexistent domain, does it > not? > > --Sandy > > > ------------------------------------ > Sanford Whiteman, Chief Technologist > Broadleaf Systems, a division of > Cypress Integrated Systems, Inc. > e-mail: [EMAIL PROTECTED] > > SpamAssassin plugs into Declude! > http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
