Re: [Declude.JunkMail] REVERSE DNS TEST BROKEN
Mark, That line looks just fine. I would spend some time trying to find if there are any other duplicates lying around in both your Global.cfg and JunkMail files. Also, in your Global.cfg file, make sure that you have the following line: XINHEADERX-Note: This E-mail was sent from %REVDNS% ([%REMOTEIP%]). Or whatever it was that you had in there for this function. I'm guessing that you might have done a search and replace and messed up the variable. Matt marc catuogno wrote: I foolishly was creating a test and called it REVDNS - then realized that it was a duplicate test - I changed the name. Now the REVDNS test doesn't work. REVDNS revdnsexistsx x 10 0 That is the line in my global config And this is line in an e-mail this morning: X-Note: This E-mail was sent from ([205.188.157.38]). And there hasn't been a REVDNS failure since I broke it with the duplicate test. How do I get it to work again??? --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] REVERSE DNS TEST BROKEN
I don't know what it was but I had named the test REVDNS and it looked like this: REVDNS filter D:\REVDNS.txtx 0 0 This caused a dupe test and didn't work: I then changed it to: DNS filter D:\DNS.txt x 0 0 And the regular REVDNS test didn't run - nothing in the log at normal log level - just wasn't checking REVDNS. Then I changed it to: reverse filter D:\reverse.txt x 0 0 And now Declude is scanning the Reverse DNS. Weird ~ but as long as it is working, I'd just suggest that no one define a test called DNS. not that anyone else would make that silly mistake. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of marc catuogno Sent: Friday, September 17, 2004 8:34 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] REVERSE DNS TEST BROKEN I foolishly was creating a test and called it REVDNS - then realized that it was a duplicate test - I changed the name. Now the REVDNS test doesn't work. REVDNS revdnsexistsx x 10 0 That is the line in my global config And this is line in an e-mail this morning: X-Note: This E-mail was sent from ([205.188.157.38]). And there hasn't been a REVDNS failure since I broke it with the duplicate test. How do I get it to work again??? --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Reverse dns help
I asked Ameritech - oops SBC to add a reverse dns entry for me, instead it appears they have delegated rdns to me. I tried http://www.dnsstuff.com/tools/ptr.ch?ip=65.42.199.3 to see what is happening. I don't quite understand the Got CNAME referral to ns2.ostgaard.com (zone 3.0.199.42.65.in-addr.arpa) should this not return (zone 3.199.42.65.in-addr.arpa) ? What is happening here is that Ameritech/SBC is using CNAMEs to delegate on other than Class A/B/C boundaries. Is this the correct response, or have they not quite done the delegation correctly? They actually have done it correctly. In this case, you would set up a PTR record for 3.0.199.42.65.in-addr.arpa, which would be the reverse DNS entry for 65.42.199.3. It's a bit confusing, but works. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Reverse dns help
Thanks! got it working. Just never saw that before. -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Friday, December 19, 2003 6:49 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Reverse dns help I asked Ameritech - oops SBC to add a reverse dns entry for me, instead it appears they have delegated rdns to me. I tried http://www.dnsstuff.com/tools/ptr.ch?ip=65.42.199.3 to see what is happening. I don't quite understand the Got CNAME referral to ns2.ostgaard.com (zone 3.0.199.42.65.in-addr.arpa) should this not return (zone 3.199.42.65.in-addr.arpa) ? What is happening here is that Ameritech/SBC is using CNAMEs to delegate on other than Class A/B/C boundaries. Is this the correct response, or have they not quite done the delegation correctly? They actually have done it correctly. In this case, you would set up a PTR record for 3.0.199.42.65.in-addr.arpa, which would be the reverse DNS entry for 65.42.199.3. It's a bit confusing, but works. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. *** appended by declude *** To: [EMAIL PROTECTED] FROM: [EMAIL PROTECTED] WEIGHT: -3 HEADERCODE: e REMOTEHOST: declude.com REMOTEIP: 24.107.232.14 SENDERHOST declude.com REVDNS: cpe-24-107-232-14.ma.charter.com QUEUENAME: Df7fd033700fa8e02.SMD TESTSFAILED: WEIGHTCOPY --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Reverse DNS...
Do what I do I have a rule defined that subtracts the points my REVDNS rule adds, and put the domains I ned to get through in that list. Kind of clunky and mna-power intensive, but it works for me. I couldnt imagine doing it for hundreds of domains Karl Drugge -Original Message- From: Kami Razvan [mailto:[EMAIL PROTECTED]] Sent: Friday, December 05, 2003 10:11 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Reverse DNS... What can we do when the likes of Amazon don't have reverse DNS? == X-Declude-Sender: [EMAIL PROTECTED] [12.32.32.130] X-Declude-Spoolname: D938c00b8023227dd.SMD X-Note: This E-mail was scanned filtered by Declude [1.77] for SPAM virus. X-Weight: 57 X-Note: Sent from Reverse DNS: [No Reverse DNS] X-Hello: boi1-app-101.amazon.com X-Spam-Tests-Failed: HELOBOGUS, IPNOTINMX, NOLEGITCONTENT, REVDNS, FILTER-HEADER-XMAIL, FILTER-SPAM-HTML, FILTER-BODY-GIBBERISH, FILTER-BODY-ANTIGIBBERISH, SPAMDOMAINS, WEIGHT20s, WEIGHT20r X-Note: Recipient(s): [EMAIL PROTECTED] X-Country-Chain: UNITED STATES-destination X-RCPT-TO: [EMAIL PROTECTED] Incredible... Regards, Kami
Re: [Declude.JunkMail] Reverse DNS and mail issues
1.) We are failing to receive mail from some places; one being verizon and some within our group are questioning if Declude is somehow preventing the mail from getting through. I do not think that is the case. This should be relatively easy to determine. First, see if you can find the E-mail in the IMail SMTP log files. If there are SMTPD lines for the E-mail, and one of them includes a spool file name, IMail accepted the E-mail. If not, IMail did not accept the E-mail. Then, you can check the Declude JunkMail log file to see what happened to the E-mail. Finally, you can check the IMail SMTP log file for SMTP- or SMTP log file entries, which would indicate IMail attempting to deliver the E-mail. 2.) I got a note from ARIN that our name server for reverse DNS is a lame name server. I was able to verify this using www.DNSreport.com I have looked into this and undertand that the primary name server for 194.242.199.in-adr.arpa (dns.inet911.com) is not answering authoritatiively. I have checked the configuraton and believe the delegation to be set up correctly. This can get very confusing, and depends on what type of DNS server you are using. However, http://192.168.0.3/tools/lookup.ch?ip=70.194.242.199.in-addr.arpa.type=PTRserver=dns.inet911.com and http://192.168.0.3/tools/lookup.ch?ip=70.194.242.199.in-addr.arpa.type=PTRserver=dns2.inet911.com show that your DNS servers are reporting authoritatively for the reverse DNS for 199.242.194.70. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Reverse DNS and mail issues
Murphy's Law -- as soon as I write to the list, I find the DNS prob. One of my PTR records had a typo -- was PRE instead of PTR and that did it.. Donna -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Donna Walsh Sent: Monday, March 24, 2003 3:58 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Reverse DNS and mail issues Hi all - I am having a set of problems that I am wondering if there is any relationship between as I know reverse reverse DNS can effect mail delivery. 1.) We are failing to receive mail from some places; one being verizon and some within our group are questioning if Declude is somehow preventing the mail from getting through. I do not think that is the case. 2.) I got a note from ARIN that our name server for reverse DNS is a lame name server. I was able to verify this using www.DNSreport.com I have looked into this and undertand that the primary name server for 194.242.199.in-adr.arpa (dns.inet911.com) is not answering authoritatiively. I have checked the configuraton and believe the delegation to be set up correctly. Is there something I'm missing in the zone file set up (see below)? Any other ideas of where else to look. Here is (part of) my zone file for reverse DNS ; ; Zone file for Reverse DNS records, file 194.242.199.IN-ADDR.ARPA ; $ORIGIN 194.242.199.IN-ADDR.ARPA. ; ; Authority record ; @ IN SOA dns.inet911.com. fred.inet911.com. ( 2003032301 ; serial 3600 ; refresh 7200 ; retry 1728000 ; expire 43200 ; default_ttl ) ; ; Name Server records ; @ IN NS dns.inet911.com. @ IN NS dns2.inet911.com. ; ; Address records ; 1 IN PTR star.inet911.com. 2 IN PTR dns2.inet911.com. 3 IN PTR monitor.inet911.com. truncated rest of address record Donna Walsh iNET911.com www.inet911.com 617-787-5513 office 617-875-4496 mobile [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Reverse DNS and mail issues
Murphy's Law -- as soon as I write to the list, I find the DNS prob. One of my PTR records had a typo -- was PRE instead of PTR and that did it.. At least it is fixed. :)) John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Reverse DNS and Classless Delegation?
Below is a header of an email processed by Declude today - it sees the RDNS as: 202.112.78.63.in-addr.arpa [63.78.112.202] However, your own http://www.dnsstuff.com/tools/ptr.ch?ip=63.78.112.202 correctly reports: smtp.hhbrown.com. Seems as if Declude doesn't follow the classless delegation and applies different logic than DNSSTUFF? That is correct. The reverse DNS lookup in Declude JunkMail was designed just to check for the presence of a reverse DNS entry (which would count a CNAME as having the reverse DNS, whether or not the CNAME resolved). Now that it is possible to filter on the reverse DNS entries, though, it sounds like we will need to add support for the CNAMEs. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Reverse DNS
I've just included the reverse DNS test WARN in the $default$.JunkMail file later I received an email from a software vendor that had the X header warning: X-RBL-Warning: REVDNS: This E-mail was sent from a mail server 207.33.16.83 with no reverse DNS entry. When I checked 207.33.16.83 using the Declude web tools I found that it did have a PTR record. Am I missing something? It looks like 207.33.16.83 definitely has a correct reverse DNS entry set up (sometimes one DNS server will return a response, while another says there is no entry). Is this happening for other IPs, or just this one? There's always a chance that the reverse DNS entry was just added, but that's a long shot. If it is happening with other domains as well, it could be that your DNS server is always returning does not exist to PTR queries (quite a few DNS servers are broken and do this). If you give me the IP address of your DNS server (the first one listed in the IMail SMTP settings, unless you have a DNS line in your global.cfg file), I can take a look to make sure that it is responding properly. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
Scott, This is also marked as failing REVDNS check 194.82.139.3 but it has a PTR record 194.82.139.3 PTR record: mail.stokecoll.ac.uk. [TTL = 270984 seconds] Our primary DNS is 213.210.8.110 Thanks David -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED]] Sent: 17 May 2002 13:15 To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Reverse DNS I've just included the reverse DNS test WARN in the $default$.JunkMail file later I received an email from a software vendor that had the X header warning: X-RBL-Warning: REVDNS: This E-mail was sent from a mail server 207.33.16.83 with no reverse DNS entry. When I checked 207.33.16.83 using the Declude web tools I found that it did have a PTR record. Am I missing something? It looks like 207.33.16.83 definitely has a correct reverse DNS entry set up (sometimes one DNS server will return a response, while another says there is no entry). Is this happening for other IPs, or just this one? There's always a chance that the reverse DNS entry was just added, but that's a long shot. If it is happening with other domains as well, it could be that your DNS server is always returning does not exist to PTR queries (quite a few DNS servers are broken and do this). If you give me the IP address of your DNS server (the first one listed in the IMail SMTP settings, unless you have a DNS line in your global.cfg file), I can take a look to make sure that it is responding properly. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
I had a similar problem and had to specify the DNS server used by Junkmail rather than having Junkmail use the one that iMail used. Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, May 17, 2002 8:15 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Reverse DNS I've just included the reverse DNS test WARN in the $default$.JunkMail file later I received an email from a software vendor that had the X header warning: X-RBL-Warning: REVDNS: This E-mail was sent from a mail server 207.33.16.83 with no reverse DNS entry. When I checked 207.33.16.83 using the Declude web tools I found that it did have a PTR record. Am I missing something? It looks like 207.33.16.83 definitely has a correct reverse DNS entry set up (sometimes one DNS server will return a response, while another says there is no entry). Is this happening for other IPs, or just this one? There's always a chance that the reverse DNS entry was just added, but that's a long shot. If it is happening with other domains as well, it could be that your DNS server is always returning does not exist to PTR queries (quite a few DNS servers are broken and do this). If you give me the IP address of your DNS server (the first one listed in the IMail SMTP settings, unless you have a DNS line in your global.cfg file), I can take a look to make sure that it is responding properly. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
Our primary DNS is 213.210.8.110 That's the problem. You DNS server is saying that nothing exists (reverse DNS lookups, MX record lookups, etc.). That's a serious problem that needs to be fixed. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
FWIW, If that server is W2k and DNS was configured without an active Internet connection, then DNS will not download the root servers and nothing will work. You might want to try un-installing the W2k DNS service and re-installing with an active Internet Connection. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, May 17, 2002 9:09 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Reverse DNS Our primary DNS is 213.210.8.110 That's the problem. You DNS server is saying that nothing exists (reverse DNS lookups, MX record lookups, etc.). That's a serious problem that needs to be fixed. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
We're not running win2k DNS, we're using Simply DNS. I am puzzled by this as this DNS server is hosting 300-400 domains without any apparent problems. If you run a DNS report agaisnt any of the hosted domains it responds correctly. -Original Message- From: Mark Smith [mailto:[EMAIL PROTECTED]] Sent: 17 May 2002 14:20 To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Reverse DNS FWIW, If that server is W2k and DNS was configured without an active Internet connection, then DNS will not download the root servers and nothing will work. You might want to try un-installing the W2k DNS service and re-installing with an active Internet Connection. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, May 17, 2002 9:09 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Reverse DNS Our primary DNS is 213.210.8.110 That's the problem. You DNS server is saying that nothing exists (reverse DNS lookups, MX record lookups, etc.). That's a serious problem that needs to be fixed. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
Instead of going through all of that, you can just delete the root zone indicated with a . and Win2K will start using the root servers as it already has them configured. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Friday, May 17, 2002 9:20 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Reverse DNS FWIW, If that server is W2k and DNS was configured without an active Internet connection, then DNS will not download the root servers and nothing will work. You might want to try un-installing the W2k DNS service and re-installing with an active Internet Connection. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, May 17, 2002 9:09 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Reverse DNS Our primary DNS is 213.210.8.110 That's the problem. You DNS server is saying that nothing exists (reverse DNS lookups, MX record lookups, etc.). That's a serious problem that needs to be fixed. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
We're not running win2k DNS, we're using Simply DNS. I am puzzled by this as this DNS server is hosting 300-400 domains without any apparent problems. If you run a DNS report agaisnt any of the hosted domains it responds correctly. The key is realizing that (like an SMTP server), DNS goes two ways. The DNS for those 100's of domains is similar to incoming E-mail: Anyone can look up those DNS entries. However, what you are trying to do (looking up any DNS entry, even if it isn't a local domain) is like relaying mail through a server: In some cases, only certain people are allowed to do it. Something definitely isn't working correctly, as your DNS server is claiming that the DNS entries do not exist (if it was acting properly, Declude would see that no access was allowed to the DNS server, and would not fail the REVDNS test). But, that may be a new security feature (kind of like accepting relayed mail, but then deleting it instead of delivering it). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
I does appear that that DNS isn't responding corectly, the other two are - so thanks for the detective work. Now to find out why... -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED]] Sent: 17 May 2002 14:37 To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Reverse DNS We're not running win2k DNS, we're using Simply DNS. I am puzzled by this as this DNS server is hosting 300-400 domains without any apparent problems. If you run a DNS report agaisnt any of the hosted domains it responds correctly. The key is realizing that (like an SMTP server), DNS goes two ways. The DNS for those 100's of domains is similar to incoming E-mail: Anyone can look up those DNS entries. However, what you are trying to do (looking up any DNS entry, even if it isn't a local domain) is like relaying mail through a server: In some cases, only certain people are allowed to do it. Something definitely isn't working correctly, as your DNS server is claiming that the DNS entries do not exist (if it was acting properly, Declude would see that no access was allowed to the DNS server, and would not fail the REVDNS test). But, that may be a new security feature (kind of like accepting relayed mail, but then deleting it instead of delivering it). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Reverse DNS Lookup.htm
Country: UNITED STATES How I am searching: Searching for 162.89.86.65.in-addr.arpa PTR at f.root-servers.net: Got unknown result, sorry! Thanks for pointing this out. We made a change yesterday to the DNS engine, after discovering that it could leak handles (which may have contributed to why it stops responding to all web requests occasionally). With a complete lack of QA, that same fix ended up breaking most of the DNS tools, as they were referencing the old DNS engine. Needless to say, it's fixed now (although there is still the issue of the classless reverse DNS entries). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS Lookup.htm
Hi Eje: Yes, this is the correct WHOIS information. I was reporting a problem with the DNSSTUFF reverse DNS lookup. Scott has since found the problem and corrected it. Best Regards Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Eje Gustafsson Sent: Saturday, April 06, 2002 04:50 PM To: Andy Schmidt Subject: Re: [Declude.JunkMail] Reverse DNS Lookup.htm Hello Andy, DSL.net, Inc. (NETBLK-DSLNET-6) DSLNET-6 65.84.0.0 - 65.86.255.255 H M SYSTEMS SOFTWARE INC. (NETBLK-DSLNET-20020211-6) DSLNET-20020211-6 65.86.89.160 - 65.86.89.191 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Reverse DNS
I have been playing with my Declude settings only to realize my own reverse DNS was not configured. My DNS provider told me that he can't provide reverse DNS: in order to provide a reverse lookup, the nameservers have to have a delegation for the entire netblock that IP address resides in. Thus, my ISP has provided reverse DNS for my domain. That's all correct; your ISP is the one that has to either host the reverse DNS entry, or delegate authority for it to your DNS servers. But, there can only be one reverse DNS entry per IP address, so how do I enable reverse DNS for my virtual domain customers? All you need is a single reverse DNS entry. Technically, you can have more, but very few programs (if any) can handle more than one reverse DNS entry. There should be no problem sending mail from virtual.example.com even though the reverse DNS entry is mail.example.com. Just so long as a reverse DNS entry exists, there should be no problem. If a remote host doesn't like virtual.example.com in this case, it will just check to see if it has an MX/A record. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, January 31, 2002 2:12 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Reverse DNS I have been playing with my Declude settings only to realize my own reverse DNS was not configured. My DNS provider told me that he can't provide reverse DNS: in order to provide a reverse lookup, the nameservers have to have a delegation for the entire netblock that IP address resides in. Thus, my ISP has provided reverse DNS for my domain. That's all correct; your ISP is the one that has to either host the reverse DNS entry, or delegate authority for it to your DNS servers. But, there can only be one reverse DNS entry per IP address, so how do I enable reverse DNS for my virtual domain customers? All you need is a single reverse DNS entry. Technically, you can have more, but very few programs (if any) can handle more than one reverse DNS entry. There should be no problem sending mail from virtual.example.com even though the reverse DNS entry is mail.example.com. Just so long as a reverse DNS entry exists, there should be no problem. If a remote host doesn't like virtual.example.com in this case, it will just check to see if it has an MX/A record. -Scott Either my situation is different, or I'm not understanding. Let's say my domain is example.com with an MX of mail.example.com and a reverse DNS of 1.1.1.1.in-addr.arpa mail.example.com. Great, works and is RFC compliant. My customer, a virtual host on my Imail server, is customerexample.com, with an MX of mail.customerexample.com and no reverse DNS. I can't solve the reverse DNS issue for mail.customerexample.com. I guess I have to change the MX to mail.example.com, my server. Is this correct? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
Ok, thanks for the help Scott. I guess it is confusing to me. As long as I have a reverse DNS, it is compliant. My first thought was that the reverse DNS had to be for the same domain name. I used the DNS report tool for my virtual domain, and indeed I no longer fail the reverse DNS test. This isn't so difficult after all, why doesn't everyone do it? :) Keep up the good work. Paul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, January 31, 2002 2:44 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Reverse DNS Either my situation is different, or I'm not understanding. Your situation is the same -- I was just using the proper examples. If you substitute customer_example.com for virtual.example.com in my example, you'll see what I mean. My customer, a virtual host on my Imail server, is customerexample.com, with an MX of mail.customerexample.com and no reverse DNS. It *does* have a reverse DNS. The reverse DNS entry takes an IP address and returns a host name. In this case, both the main domain and the virtual domain will use the same IP address, so they will both have a reverse DNS entry. I can't solve the reverse DNS issue for mail.customerexample.com. I guess I have to change the MX to mail.example.com, my server. Is this correct? No. Just so long as mail.customer_example.com's MX record points to a host that has an IP address with a reverse DNS entry there is no problem. For example: customer_example.com. MX 10 mail.customer_example.com mail.customer_example.com A 192.168.100.12 Just so long as 192.168.100.12 has a reverse DNS entry, there will be no problem. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
Ok, thanks for the help Scott. I guess it is confusing to me. That's OK -- DNS itself is tricky enough, but reverse DNS makes it much more complex. As long as I have a reverse DNS, it is compliant. That's correct. My first thought was that the reverse DNS had to be for the same domain name. That's what a lot of people assume, but it isn't so. Otherwise, it would be impossible to have virtual domains. I used the DNS report tool for my virtual domain, and indeed I no longer fail the reverse DNS test. This isn't so difficult after all, why doesn't everyone do it? :) G You'd be surprised how many people have reverse DNS entries in their DNS servers, but since they didn't have their ISP delegate the reverse DNS entries to their DNS servers, nobody will find the reverse DNS entries. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
