Re: trying to figure out why mail is bouncing

2003-11-06 Thread bscott

  Please don't top-quote.

On Fri, 31 Oct 2003, at 10:08am, [EMAIL PROTECTED] wrote:
>> Following the delegation chain from the roots, I see your ISP says
>> <4.38.232.199.in-addr.arpa.> is a CNAME for <4.threeofus.com.>.  If you
>> put a PTR record in for that name with RHS , that should
>> fix things up.  That, and fixing  to have an A
>> record, rather then a CNAME.
>
> I think I have to make changes in a few places.. help me figure this
> out... there's /etc/named.conf ... then, there's
> /var/named/38.232.199.hosts and /var/named/threeofus.com.hosts ... any
> idea where I should be making changes?

  I presume /var/named/threeofus.com/hosts is the zone database file which
named loads for the  zone?  If so, you need to
add/change/verify the following records:

4.threeofus.com.IN  PTR mail.threeofus.com.
mail.threeofus.com. IN  A   199.232.38.4
threeofus.com.  IN  MX  mail.threeofus.com.

-- 
Ben Scott <[EMAIL PROTECTED]>
| The opinions expressed in this message are those of the author and do  |
| not represent the views or policy of any other person or organization. |
| All information is provided without warranty of any kind.  |


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Joshua S. Freeman
So, Ben,

I think I have to make changes in a few places.. help me figure this
out...

there's /etc/named.conf

then, there's /var/named/38.232.199.hosts
and
/var/named/threeofus.com.hosts


any idea where I should be making changes?

J.
On Fri, 31 Oct 2003 [EMAIL PROTECTED] wrote:

> On Fri, 31 Oct 2003, at 9:19am, [EMAIL PROTECTED] wrote:
> >> When I did a lookup on the IP address, I got an NXDOMAIN error. There is
> >> apparently no reversae lookup for your mail server.
> >
> > would someone kindly let me know what changes I need to make to my host
> > file in order to fix this?
>
>   The /etc/hosts file has nothing to do with it.  You need to have your ISP
> put a PTR (pointer) entry in the DNS for your IP address.  Or have them
> delegate your IP subnet to DNS nameservers you control.
>
>   Hmmm, I notice that the MX for the domain  is
> , and that  is a CNAME for
> .  Per the RFCs, the right-hand side of an MX record can only
> be the canonical name.  That can cause trouble, too.
>
>   Anyhows, I see you have IP address <199.232.38.4>.  That reverses to
> <4.38.232.199.in-addr.arpa.>.  Following the delegation chain from the
> roots, I see your ISP says <4.38.232.199.in-addr.arpa.> is a CNAME for
> <4.threeofus.com.>.  If you put a PTR record in for that name with RHS
> , that should fix things up.  That, and fixing
>  to have an A record, rather then a CNAME.
>
>

-- 
--
Joshua S. Freeman
[EMAIL PROTECTED]

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Joshua S. Freeman
Thanks there Ben,

I think I getcha...

I run DNS for 199.232.38.4 and all the domains associated with it...

Obviously, I'm not doing too good a job of it...

:-)

J>

 On
Fri, 31 Oct 2003 [EMAIL PROTECTED] wrote:

> On Fri, 31 Oct 2003, at 9:19am, [EMAIL PROTECTED] wrote:
> >> When I did a lookup on the IP address, I got an NXDOMAIN error. There is
> >> apparently no reversae lookup for your mail server.
> >
> > would someone kindly let me know what changes I need to make to my host
> > file in order to fix this?
>
>   The /etc/hosts file has nothing to do with it.  You need to have your ISP
> put a PTR (pointer) entry in the DNS for your IP address.  Or have them
> delegate your IP subnet to DNS nameservers you control.
>
>   Hmmm, I notice that the MX for the domain  is
> , and that  is a CNAME for
> .  Per the RFCs, the right-hand side of an MX record can only
> be the canonical name.  That can cause trouble, too.
>
>   Anyhows, I see you have IP address <199.232.38.4>.  That reverses to
> <4.38.232.199.in-addr.arpa.>.  Following the delegation chain from the
> roots, I see your ISP says <4.38.232.199.in-addr.arpa.> is a CNAME for
> <4.threeofus.com.>.  If you put a PTR record in for that name with RHS
> , that should fix things up.  That, and fixing
>  to have an A record, rather then a CNAME.
>
>

-- 
--
Joshua S. Freeman
[EMAIL PROTECTED]

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread bscott
On Thu, 30 Oct 2003, at 10:20pm, [EMAIL PROTECTED] wrote:
> Below is a message I tried to send to my wife's assistant who is obviously
> using Verizon

  One should not use Verizon for email if one wants to have trouble-free
email.  I realize it is somebody you're trying to send *to* who is using
Verizon, but that does change the fact that Verizon equals email trouble.  
There is very little you can do to change the behavior of somebody *else's*
mail exchanger.

> All messages that we send to her, no matter which smtp server we use, are
> bouncing.

  Now this is interesting:

$ host -t MX verizon.net 
verizon.net mail is handled by 0 relay.verizon.net.
$ telnet relay.verizon.net smtp
Trying 206.46.170.12...
Connected to relay.gte.net (206.46.170.12).
Escape character is '^]'.
220 sc008.verizon.net MailPass SMTP server v1.0.6 - 103003062626JY ready 
Fri, 31 Oct 2003 08:44:15 -0600
EHLO localhost
250-sc008.verizon.net
250-8BITMIME
250 SIZE 20971520
MAIL FROM:<[EMAIL PROTECTED]>
250 Sender <[EMAIL PROTECTED]> OK
RSET
250 Ok resetting state
MAIL FROM:<[EMAIL PROTECTED]>
550 You are not allowed to send mail:sc008.verizon.net

  It appears that Verizon is probing the listed MX for the domain given in
the SMTP reverse-path to see if the sending email address is valid.

-- 
Ben Scott <[EMAIL PROTECTED]>
| The opinions expressed in this message are those of the author and do  |
| not represent the views or policy of any other person or organization. |
| All information is provided without warranty of any kind.  |

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread bscott
On Fri, 31 Oct 2003, at 9:19am, [EMAIL PROTECTED] wrote:
>> When I did a lookup on the IP address, I got an NXDOMAIN error. There is
>> apparently no reversae lookup for your mail server.
>
> would someone kindly let me know what changes I need to make to my host
> file in order to fix this?

  The /etc/hosts file has nothing to do with it.  You need to have your ISP
put a PTR (pointer) entry in the DNS for your IP address.  Or have them
delegate your IP subnet to DNS nameservers you control.

  Hmmm, I notice that the MX for the domain  is
, and that  is a CNAME for
.  Per the RFCs, the right-hand side of an MX record can only
be the canonical name.  That can cause trouble, too.

  Anyhows, I see you have IP address <199.232.38.4>.  That reverses to
<4.38.232.199.in-addr.arpa.>.  Following the delegation chain from the
roots, I see your ISP says <4.38.232.199.in-addr.arpa.> is a CNAME for
<4.threeofus.com.>.  If you put a PTR record in for that name with RHS
, that should fix things up.  That, and fixing
 to have an A record, rather then a CNAME.

-- 
Ben Scott <[EMAIL PROTECTED]>
| The opinions expressed in this message are those of the author and do  |
| not represent the views or policy of any other person or organization. |
| All information is provided without warranty of any kind.  |




___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Kenneth E. Lussier
On Fri, 2003-10-31 at 09:19, Joshua S. Freeman wrote:
> would someone kindly let me know what changes I need to make to my host
> file in order to fix this?
> 
> J.

It may not be your DNS servers fault. If your ISP is not forwarding
reverse lookups to your DNS server, but trying to answer them
themselves, then that would be the problem. On your DNS server, you
should have have a reverse file (either a rev.x.x.x or db.x.x.x, or
whatever you file aming scheme is). That should have the numbers that
you have in your IP lock. In your named.conf fle, you should have a
section like this:

zone "x.x.x.in-addr.arpa" {
  notify yes;
  type master;
  file "db.x.x.x";
};

Where x.x.x is is the network numbers that you use. The corresponding
file should have:

1   PTR mail.threeofus.com.
2   PTR server.threeofus.com.

etc. etc. etc.

C-Ya,
enny

-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Joshua S. Freeman
would someone kindly let me know what changes I need to make to my host
file in order to fix this?

J.


On 31 Oct 2003, Bruce Dawson wrote:

> On Fri, 2003-10-31 at 08:45, Kenneth E. Lussier wrote:
> > On Fri, 2003-10-31 at 08:22, Joshua S. Freeman wrote:
> > > alright, but why is it also bouncing when sent using my own smtp server
> > > which, afaik, is not blacklisted anywhere...
> > > > >- The following addresses had permanent fatal errors -
> > > > > <[EMAIL PROTECTED]>
> > > > >
> > > > >- Transcript of session follows -
> > > > > ... while talking to relay.verizon.net.:
> > > > > >>> MAIL From:<[EMAIL PROTECTED]> SIZE=456
> > > > > <<< 550 You are not allowed to send mail:sc019.verizon.net
> > > > > 554 <[EMAIL PROTECTED]>... Service unavailable
> > > > > 
> > I just did an nslookup on the MX record for your domain, threeofus.com.
> > I got the IP address of mail.threeofus.com. When I did a lookup on the
> > IP address, I got an NXDOMAIN error. There is apparently no reversae
> > lookup for your mail server. Some people configure their mail servers to
> > only accept mail from servers that can be reversed. I recently had the
> > same problem at work when our ISP mysteriously pointed reverse lookups
> > to the wrong place.
>
> Bingo. The above will certainly trigger a lot of denials.
>
> > This, plus optonline being a spammers haven may explain everything.
>
>

-- 
--
Joshua S. Freeman
[EMAIL PROTECTED]

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Bruce Dawson
On Fri, 2003-10-31 at 08:45, Kenneth E. Lussier wrote:
> On Fri, 2003-10-31 at 08:22, Joshua S. Freeman wrote:
> > alright, but why is it also bouncing when sent using my own smtp server
> > which, afaik, is not blacklisted anywhere...
> > > >- The following addresses had permanent fatal errors -
> > > > <[EMAIL PROTECTED]>
> > > >
> > > >- Transcript of session follows -
> > > > ... while talking to relay.verizon.net.:
> > > > >>> MAIL From:<[EMAIL PROTECTED]> SIZE=456
> > > > <<< 550 You are not allowed to send mail:sc019.verizon.net
> > > > 554 <[EMAIL PROTECTED]>... Service unavailable
> > > > 
> I just did an nslookup on the MX record for your domain, threeofus.com.
> I got the IP address of mail.threeofus.com. When I did a lookup on the
> IP address, I got an NXDOMAIN error. There is apparently no reversae
> lookup for your mail server. Some people configure their mail servers to
> only accept mail from servers that can be reversed. I recently had the
> same problem at work when our ISP mysteriously pointed reverse lookups
> to the wrong place. 

Bingo. The above will certainly trigger a lot of denials.

> This, plus optonline being a spammers haven may explain everything.



signature.asc
Description: This is a digitally signed message part


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Kenneth E. Lussier
On Fri, 2003-10-31 at 08:22, Joshua S. Freeman wrote:
> alright, but why is it also bouncing when sent using my own smtp server
> which, afaik, is not blacklisted anywhere...


> > >- The following addresses had permanent fatal errors -
> > > <[EMAIL PROTECTED]>
> > >
> > >- Transcript of session follows -
> > > ... while talking to relay.verizon.net.:
> > > >>> MAIL From:<[EMAIL PROTECTED]> SIZE=456
> > > <<< 550 You are not allowed to send mail:sc019.verizon.net
> > > 554 <[EMAIL PROTECTED]>... Service unavailable
> > > 

I just did an nslookup on the MX record for your domain, threeofus.com.
I got the IP address of mail.threeofus.com. When I did a lookup on the
IP address, I got an NXDOMAIN error. There is apparently no reversae
lookup for your mail server. Some people configure their mail servers to
only accept mail from servers that can be reversed. I recently had the
same problem at work when our ISP mysteriously pointed reverse lookups
to the wrong place. 

This, plus optonline being a spammers haven may explain everything.

HTH,
Kenny


-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Joshua S. Freeman
alright, but why is it also bouncing when sent using my own smtp server
which, afaik, is not blacklisted anywhere...

On 31 Oct 2003, Bruce Dawson
wrote:

> optonline is a notorious spam site.
>
> On Thu, 2003-10-30 at 22:20, Joshua S. Freeman wrote:
> > Hi all,
> >
> > I live in NY now... I still have a server on my network in Boston and
> > that's what my wife and I use for *receiving* our mail.
> >
> > My wife uses outlook for email on her mac laptop and uses optonline.net
> > (cablevision), our ISP here at home in NY, and their smtp server(s) for
> > outgoing mail.
> >
> > I am writing this using pine sshed into my server there in Boston and
> > using the localhost as an smtp server.. the ISP here on this machine is
> > gnaps.com (global naps in quincy, MA).
> >
> > Below is a message I tried to send to my wife's assistant who is obviously
> > using Verizon
> >
> > All messages that we send to her, no matter which smtp server we use, are
> > bouncing.  She reports that other mail is getting to her just fine.  What
> > is it about our setup that's making Verizon's servers reject mail sent by
> > both MY smtp server AND optonline.net's smtp servers?
> >
> > TIA for any insights.
> >
> > J.
> >
> >
> > --
> > --
> > Joshua S. Freeman
> > [EMAIL PROTECTED]
> >
> > -- Forwarded message --
> > Date: Thu, 30 Oct 2003 22:13:18 -0500
> > From: Mail Delivery Subsystem <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> > Subject: Returned mail: Service unavailable
> >
> > The original message was received at Thu, 30 Oct 2003 22:12:41 -0500
> > from [EMAIL PROTECTED]
> >
> >- The following addresses had permanent fatal errors -
> > <[EMAIL PROTECTED]>
> >
> >- Transcript of session follows -
> > ... while talking to relay.verizon.net.:
> > >>> MAIL From:<[EMAIL PROTECTED]> SIZE=456
> > <<< 550 You are not allowed to send mail:sc019.verizon.net
> > 554 <[EMAIL PROTECTED]>... Service unavailable
> > 
>
> The above usually means that port 25 was blocked or at least didn't
> allow the connection.
>
> > Reporting-MTA: dns; localhost.localdomain
> > Arrival-Date: Thu, 30 Oct 2003 22:12:41 -0500
> >
> > Final-Recipient: RFC822; [EMAIL PROTECTED]
> > Action: failed
> > Status: 5.0.0
> > Remote-MTA: DNS; relay.verizon.net
> > Diagnostic-Code: SMTP; 550 You are not allowed to send mail:sc019.verizon.net
> > Last-Attempt-Date: Thu, 30 Oct 2003 22:13:18 -0500
> > 
> >
>
> I would call verizon on this one - it appears that they're blocking
> outgoing connections too.
>
> > From: Joshua S. Freeman <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> > Subject: test
> > Date: 30 Oct 2003 22:12:41 -0500
> >
> > Hi Deanna.. I'm trying to see why Monica's mail is not getting to you.
> >
> > J.
> >
> > --
> > --
> > Joshua S. Freeman
> > [EMAIL PROTECTED]
> >
>
>

-- 
--
Joshua S. Freeman
[EMAIL PROTECTED]

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: trying to figure out why mail is bouncing

2003-10-31 Thread Bruce Dawson
optonline is a notorious spam site. 

On Thu, 2003-10-30 at 22:20, Joshua S. Freeman wrote:
> Hi all,
> 
> I live in NY now... I still have a server on my network in Boston and
> that's what my wife and I use for *receiving* our mail.
> 
> My wife uses outlook for email on her mac laptop and uses optonline.net
> (cablevision), our ISP here at home in NY, and their smtp server(s) for
> outgoing mail.
> 
> I am writing this using pine sshed into my server there in Boston and
> using the localhost as an smtp server.. the ISP here on this machine is
> gnaps.com (global naps in quincy, MA).
> 
> Below is a message I tried to send to my wife's assistant who is obviously
> using Verizon
> 
> All messages that we send to her, no matter which smtp server we use, are
> bouncing.  She reports that other mail is getting to her just fine.  What
> is it about our setup that's making Verizon's servers reject mail sent by
> both MY smtp server AND optonline.net's smtp servers?
> 
> TIA for any insights.
> 
> J.
> 
> 
> -- 
> --
> Joshua S. Freeman
> [EMAIL PROTECTED]
> 
> -- Forwarded message --
> Date: Thu, 30 Oct 2003 22:13:18 -0500
> From: Mail Delivery Subsystem <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Returned mail: Service unavailable
> 
> The original message was received at Thu, 30 Oct 2003 22:12:41 -0500
> from [EMAIL PROTECTED]
> 
>- The following addresses had permanent fatal errors -
> <[EMAIL PROTECTED]>
> 
>- Transcript of session follows -
> ... while talking to relay.verizon.net.:
> >>> MAIL From:<[EMAIL PROTECTED]> SIZE=456
> <<< 550 You are not allowed to send mail:sc019.verizon.net
> 554 <[EMAIL PROTECTED]>... Service unavailable
> 

The above usually means that port 25 was blocked or at least didn't
allow the connection.

> Reporting-MTA: dns; localhost.localdomain
> Arrival-Date: Thu, 30 Oct 2003 22:12:41 -0500
> 
> Final-Recipient: RFC822; [EMAIL PROTECTED]
> Action: failed
> Status: 5.0.0
> Remote-MTA: DNS; relay.verizon.net
> Diagnostic-Code: SMTP; 550 You are not allowed to send mail:sc019.verizon.net
> Last-Attempt-Date: Thu, 30 Oct 2003 22:13:18 -0500
> 
> 

I would call verizon on this one - it appears that they're blocking
outgoing connections too.

> From: Joshua S. Freeman <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: test
> Date: 30 Oct 2003 22:12:41 -0500
> 
> Hi Deanna.. I'm trying to see why Monica's mail is not getting to you.
> 
> J.
> 
> -- 
> --
> Joshua S. Freeman
> [EMAIL PROTECTED]
> 



signature.asc
Description: This is a digitally signed message part