John Peacock wrote:
Robin Bowes wrote:
I've just noticed that the require_resolvable_fromhost is not working
correctly.
It's working fine here (on two different networks, albeit both AT&T netblocks).
[EMAIL PROTECTED] service]# dnsmx newsletter.nectar.com
40 bak2smtp1.edc.dartmail.net
10 inc2smtp1.edc.dartmail.net
30 bak1smtp1.edc.dartmail.net
The same query here hangs, but if I try it again, I get an answer right away
(which means that it was cached by my other query). That's why your dnsmx
worked right away, because the previous query had eventually succeeded (but
probably after qpsmtpd had timed out).
If you want to really see what is going on, get a copy of dnstracer here:
http://www.mavetju.org/unix/general.php
and do the following query from the root servers.
$ dnstracer -oq mx -s . newsletter.nectar.com
You'll see that something very weird is going on with that domain; are you
responsible for it? All of these servers are very slow responding:
ns1.data-link.co.uk
ns2.data-link.co.uk
ns0.centri.net
and this host:
bb1dns1.tdc.dartmail.net
is listed as authoritative for nectar.com but it doesn't have an address itself.
There is major dainbramage in the delegation for that domain...
Plus, notice anything weird here?
$ dnsmx cwjobsmail.co.uk
1 gatekeeper04.totaljobsmail.co.uk
1 gatekeeper05.totaljobsmail.co.uk
1 gatekeeper08.totaljobsmail.co.uk
1 gatekeeper09.totljobsmail.co.uk
1 gatekeeper10.totaljobsmail.co.uk
1 gatekeeper06.totaljobsmail.co.uk
1 gatekeeper07.totaljobsmail.co.uk
1 gatekeeper03.totaljobsmail.co.uk
Don't assume the plugin is bad based on these two domains, that's for sure...
John
Before I installed tinydns and dnscache with dnscache
behind the firewall, I got into a state with another
nameserver where I was exposing my dns cache. I
had to use iptables "recent" table to keep dartmail.net
from hitting my dns cache for lookups thousands of
times per second. Of course I just needed to pull my
dns cache behind the firewall, but dartmail.net must
be scanning and using other people's resources--
would they also like to find open relays?! I should
thank them for showing me the weakness.
-Bob
