Strange issue

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

Strange issue

Simba
Mail service is working except for delivery to a single host, which is
reporting a strange error:

postfix/smtp[13722]: 629D7A7DF9: to=<[hidden email]>,
relay=none, delay=1099, delays=1097/0/1.5/0, dsn=4.4.3, status=deferred
(Host or domain name not found. Name service error for
name=mx4.kpbsd.k12.ak.us type=A: Host not found, try again)

root:# host kpbsd.k12.ak.us
kpbsd.k12.ak.us has address 74.123.240.28
kpbsd.k12.ak.us mail is handled by 30 mx3.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 20 mail-gw.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 40 mx4.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 10 mx1.kpbsd.k12.ak.us.

root:# host mx4.kpbsd.k12.ak.us
mx4.kpbsd.k12.ak.us has address 74.123.240.23

Any help is appreciated!

--
Simba Lion - https://tailpuff.net
https://keybase.io/simbalion

"Why is a raven like a writing desk?"

simbalion.vcf (406 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Strange issue

Wietse Venema
Simba:
> Mail service is working except for delivery to a single host, which is
> reporting a strange error:
>
> postfix/smtp[13722]: 629D7A7DF9: to=<[hidden email]>,
> relay=none, delay=1099, delays=1097/0/1.5/0, dsn=4.4.3, status=deferred
> (Host or domain name not found. Name service error for
> name=mx4.kpbsd.k12.ak.us type=A: Host not found, try again)

Some DNS server replied to the MX request, with a list of
servers that include mx4.kpbsd.k12.ak.us.

> root:# host kpbsd.k12.ak.us
> kpbsd.k12.ak.us has address 74.123.240.28
> kpbsd.k12.ak.us mail is handled by 30 mx3.kpbsd.k12.ak.us.
> kpbsd.k12.ak.us mail is handled by 20 mail-gw.kpbsd.k12.ak.us.
> kpbsd.k12.ak.us mail is handled by 40 mx4.kpbsd.k12.ak.us.
> kpbsd.k12.ak.us mail is handled by 10 mx1.kpbsd.k12.ak.us.

Some DNS server replied to the MX request, with a list of
servers that does not include mx4.kpbsd.k12.ak.us.

> root:# host mx4.kpbsd.k12.ak.us
> mx4.kpbsd.k12.ak.us has address 74.123.240.23
>
> Any help is appreciated!

$ host -t ns kpbsd.k12.ak.us
kpbsd.k12.ak.us name server ns1.acsalaska.net.
kpbsd.k12.ak.us name server xdns.kpbsd.k12.ak.us.
kpbsd.k12.ak.us name server ns2.acsalaska.net.
$ host -t mx kpbsd.k12.ak.us ns1.acsalaska.net.
Using domain server:
Name: ns1.acsalaska.net.
Address: 204.17.139.1#53
Aliases:

kpbsd.k12.ak.us mail is handled by 40 mx4.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 30 mx3.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 20 mail-gw.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 10 mx1.kpbsd.k12.ak.us.
$ host -t mx kpbsd.k12.ak.us ns2.acsalaska.net.
Using domain server:
Name: ns2.acsalaska.net.
Address: 209.112.128.1#53
Aliases:

kpbsd.k12.ak.us mail is handled by 30 mx3.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 10 mx1.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 20 mail-gw.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 40 mx4.kpbsd.k12.ak.us.

        Wietse
Reply | Threaded
Open this post in threaded view
|

RE: Strange issue

Kevin Miller
I didn't see the errors Wietse did, but when I ran your domain through the report at www.dnsstuff.com it noted this (among a few other minor things):
  transitioning domain of kpbsd.k12.ak.us does not designate 74.123.240.23 as permitted sender | softfail | 74.123.240.23

Need to update your SPF record...

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357


-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf Of Wietse Venema
Sent: Tuesday, November 06, 2018 8:05 AM
To: Simba
Cc: [hidden email]
Subject: Re: Strange issue

Simba:
> Mail service is working except for delivery to a single host, which is
> reporting a strange error:
>
> postfix/smtp[13722]: 629D7A7DF9: to=<[hidden email]>,
> relay=none, delay=1099, delays=1097/0/1.5/0, dsn=4.4.3, status=deferred
> (Host or domain name not found. Name service error for
> name=mx4.kpbsd.k12.ak.us type=A: Host not found, try again)

Some DNS server replied to the MX request, with a list of
servers that include mx4.kpbsd.k12.ak.us.

> root:# host kpbsd.k12.ak.us
> kpbsd.k12.ak.us has address 74.123.240.28
> kpbsd.k12.ak.us mail is handled by 30 mx3.kpbsd.k12.ak.us.
> kpbsd.k12.ak.us mail is handled by 20 mail-gw.kpbsd.k12.ak.us.
> kpbsd.k12.ak.us mail is handled by 40 mx4.kpbsd.k12.ak.us.
> kpbsd.k12.ak.us mail is handled by 10 mx1.kpbsd.k12.ak.us.

Some DNS server replied to the MX request, with a list of
servers that does not include mx4.kpbsd.k12.ak.us.

> root:# host mx4.kpbsd.k12.ak.us
> mx4.kpbsd.k12.ak.us has address 74.123.240.23
>
> Any help is appreciated!

$ host -t ns kpbsd.k12.ak.us
kpbsd.k12.ak.us name server ns1.acsalaska.net.
kpbsd.k12.ak.us name server xdns.kpbsd.k12.ak.us.
kpbsd.k12.ak.us name server ns2.acsalaska.net.
$ host -t mx kpbsd.k12.ak.us ns1.acsalaska.net.
Using domain server:
Name: ns1.acsalaska.net.
Address: 204.17.139.1#53
Aliases:

kpbsd.k12.ak.us mail is handled by 40 mx4.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 30 mx3.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 20 mail-gw.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 10 mx1.kpbsd.k12.ak.us.
$ host -t mx kpbsd.k12.ak.us ns2.acsalaska.net.
Using domain server:
Name: ns2.acsalaska.net.
Address: 209.112.128.1#53
Aliases:

kpbsd.k12.ak.us mail is handled by 30 mx3.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 10 mx1.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 20 mail-gw.kpbsd.k12.ak.us.
kpbsd.k12.ak.us mail is handled by 40 mx4.kpbsd.k12.ak.us.

        Wietse
Reply | Threaded
Open this post in threaded view
|

Re: Strange issue

Wietse Venema
In reply to this post by Wietse Venema
Wietse Venema:

> Simba:
> > Mail service is working except for delivery to a single host, which is
> > reporting a strange error:
> >
> > postfix/smtp[13722]: 629D7A7DF9: to=<[hidden email]>,
> > relay=none, delay=1099, delays=1097/0/1.5/0, dsn=4.4.3, status=deferred
> > (Host or domain name not found. Name service error for
> > name=mx4.kpbsd.k12.ak.us type=A: Host not found, try again)
>
> Some DNS server replied to the MX request, with a list of
> servers that include mx4.kpbsd.k12.ak.us.
>
> > root:# host kpbsd.k12.ak.us
> > kpbsd.k12.ak.us has address 74.123.240.28
> > kpbsd.k12.ak.us mail is handled by 30 mx3.kpbsd.k12.ak.us.
> > kpbsd.k12.ak.us mail is handled by 20 mail-gw.kpbsd.k12.ak.us.
> > kpbsd.k12.ak.us mail is handled by 40 mx4.kpbsd.k12.ak.us.
> > kpbsd.k12.ak.us mail is handled by 10 mx1.kpbsd.k12.ak.us.
>
> Some DNS server replied to the MX request, with a list of
> servers that does not include mx4.kpbsd.k12.ak.us.

Sorry, I missed that it was listed in the response.

> > root:# host mx4.kpbsd.k12.ak.us
> > mx4.kpbsd.k12.ak.us has address 74.123.240.23
> >
> > Any help is appreciated!
>
> $ host -t ns kpbsd.k12.ak.us
> kpbsd.k12.ak.us name server ns1.acsalaska.net.
> kpbsd.k12.ak.us name server xdns.kpbsd.k12.ak.us.
> kpbsd.k12.ak.us name server ns2.acsalaska.net.

$ host mx4.kpbsd.k12.ak.us xdns.kpbsd.k12.ak.us.
Using domain server:
Name: xdns.kpbsd.k12.ak.us.
Address: 74.123.240.3#53
Aliases:

mx4.kpbsd.k12.ak.us has address 74.123.240.23

This took a several seconds to respond to my
query from NY state. Not sure what is going on.

        Wietse

Reply | Threaded
Open this post in threaded view
|

RE: Strange issue

Kevin Miller
Doing a couple of quick "digs" on the MX records, I noticed that in the "ADDITIONAL SECTION" that the ACS servers report more hosts than the kpbsd.k12.ak.us entry.  Do you have access to that DNS server?  I suspect the SOA may be a bit off from the others.  I presume that one of the three is your "master" and the other two are slaves?  I'd make sure they're all in sync and all name servers are listed in the SOA.  Also, ask ACS tech support to add glue records for your servers.  That could explain some of the latency.

Run the report at https://www.dnsstuff.com/tools#dnsReport|type=domain&&value=kpbsd.k12.ak.us and fix the things it notes.

mkm@mis-mkm-lnx:~$ dig  MX kpbsd.k12.ak.us @xdns.kpbsd.k12.ak.us

; <<>> DiG 9.10.3-P4-Debian <<>> MX kpbsd.k12.ak.us @xdns.kpbsd.k12.ak.us
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41461
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 3, ADDITIONAL: 6
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;kpbsd.k12.ak.us.               IN      MX

;; ANSWER SECTION:
kpbsd.k12.ak.us.        300     IN      MX      10 mx1.kpbsd.k12.ak.us.
kpbsd.k12.ak.us.        300     IN      MX      20 mail-gw.kpbsd.k12.ak.us.
kpbsd.k12.ak.us.        300     IN      MX      40 mx4.kpbsd.k12.ak.us.
kpbsd.k12.ak.us.        300     IN      MX      30 mx3.kpbsd.k12.ak.us.

;; AUTHORITY SECTION:
kpbsd.k12.ak.us.        300     IN      NS      ns1.acsalaska.net.
kpbsd.k12.ak.us.        300     IN      NS      xdns.kpbsd.k12.ak.us.
kpbsd.k12.ak.us.        300     IN      NS      ns2.acsalaska.net.

;; ADDITIONAL SECTION:
mx1.kpbsd.k12.ak.us.    300     IN      A       74.123.240.23
mail-gw.kpbsd.k12.ak.us. 300    IN      A       74.123.240.22
mx3.kpbsd.k12.ak.us.    300     IN      A       74.123.240.23
mx4.kpbsd.k12.ak.us.    300     IN      A       74.123.240.23
xdns.kpbsd.k12.ak.us.   300     IN      A       74.123.240.3

;; Query time: 20 msec
;; SERVER: 74.123.240.3#53(74.123.240.3)
;; WHEN: Tue Nov 06 09:24:49 AKST 2018
;; MSG SIZE  rcvd: 276

mkm@mis-mkm-lnx:~$
mkm@mis-mkm-lnx:~$
mkm@mis-mkm-lnx:~$ dig  MX kpbsd.k12.ak.us @ns2.acsalaska.neT

; <<>> DiG 9.10.3-P4-Debian <<>> MX kpbsd.k12.ak.us @ns2.acsalaska.neT
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55133
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 3, ADDITIONAL: 8
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;kpbsd.k12.ak.us.               IN      MX

;; ANSWER SECTION:
kpbsd.k12.ak.us.        300     IN      MX      20 mail-gw.kpbsd.k12.ak.us.
kpbsd.k12.ak.us.        300     IN      MX      40 mx4.kpbsd.k12.ak.us.
kpbsd.k12.ak.us.        300     IN      MX      30 mx3.kpbsd.k12.ak.us.
kpbsd.k12.ak.us.        300     IN      MX      10 mx1.kpbsd.k12.ak.us.

;; AUTHORITY SECTION:
kpbsd.k12.ak.us.        300     IN      NS      ns1.acsalaska.net.
kpbsd.k12.ak.us.        300     IN      NS      xdns.kpbsd.k12.ak.us.
kpbsd.k12.ak.us.        300     IN      NS      ns2.acsalaska.net.

;; ADDITIONAL SECTION:
mx1.kpbsd.k12.ak.us.    300     IN      A       74.123.240.23
mail-gw.kpbsd.k12.ak.us. 300    IN      A       74.123.240.22
mx3.kpbsd.k12.ak.us.    300     IN      A       74.123.240.23
mx4.kpbsd.k12.ak.us.    300     IN      A       74.123.240.23
ns1.acsalaska.net.      600     IN      A       204.17.139.1
ns2.acsalaska.net.      600     IN      A       209.112.128.1
xdns.kpbsd.k12.ak.us.   300     IN      A       74.123.240.3

;; Query time: 118 msec
;; SERVER: 209.112.128.1#53(209.112.128.1)
;; WHEN: Tue Nov 06 09:25:00 AKST 2018
;; MSG SIZE  rcvd: 308


...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357


-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf Of Wietse Venema
Sent: Tuesday, November 06, 2018 8:53 AM
To: Postfix users
Subject: Re: Strange issue

Wietse Venema:

> Simba:
> > Mail service is working except for delivery to a single host, which is
> > reporting a strange error:
> >
> > postfix/smtp[13722]: 629D7A7DF9: to=<[hidden email]>,
> > relay=none, delay=1099, delays=1097/0/1.5/0, dsn=4.4.3, status=deferred
> > (Host or domain name not found. Name service error for
> > name=mx4.kpbsd.k12.ak.us type=A: Host not found, try again)
>
> Some DNS server replied to the MX request, with a list of
> servers that include mx4.kpbsd.k12.ak.us.
>
> > root:# host kpbsd.k12.ak.us
> > kpbsd.k12.ak.us has address 74.123.240.28
> > kpbsd.k12.ak.us mail is handled by 30 mx3.kpbsd.k12.ak.us.
> > kpbsd.k12.ak.us mail is handled by 20 mail-gw.kpbsd.k12.ak.us.
> > kpbsd.k12.ak.us mail is handled by 40 mx4.kpbsd.k12.ak.us.
> > kpbsd.k12.ak.us mail is handled by 10 mx1.kpbsd.k12.ak.us.
>
> Some DNS server replied to the MX request, with a list of
> servers that does not include mx4.kpbsd.k12.ak.us.

Sorry, I missed that it was listed in the response.

> > root:# host mx4.kpbsd.k12.ak.us
> > mx4.kpbsd.k12.ak.us has address 74.123.240.23
> >
> > Any help is appreciated!
>
> $ host -t ns kpbsd.k12.ak.us
> kpbsd.k12.ak.us name server ns1.acsalaska.net.
> kpbsd.k12.ak.us name server xdns.kpbsd.k12.ak.us.
> kpbsd.k12.ak.us name server ns2.acsalaska.net.

$ host mx4.kpbsd.k12.ak.us xdns.kpbsd.k12.ak.us.
Using domain server:
Name: xdns.kpbsd.k12.ak.us.
Address: 74.123.240.3#53
Aliases:

mx4.kpbsd.k12.ak.us has address 74.123.240.23

This took a several seconds to respond to my
query from NY state. Not sure what is going on.

        Wietse

Reply | Threaded
Open this post in threaded view
|

Re: Strange issue

Viktor Dukhovni
In reply to this post by Simba

> On Nov 6, 2018, at 10:37 AM, Simba <[hidden email]> wrote:
>
> postfix/smtp[13722]: 629D7A7DF9: to=<[hidden email]>,
> relay=none, delay=1099, delays=1097/0/1.5/0, dsn=4.4.3, status=deferred
> (Host or domain name not found. Name service error for
> name=mx4.kpbsd.k12.ak.us type=A: Host not found, try again)

There is no evidence of systemic DNS issues with that domain:

   http://dnsviz.net/d/kpbsd.k12.ak.us/dnssec/

This looks like an issue at the OP's local resolver.  Perhaps
flushing the cache will help.  This assumes there's no dedicated
transport for this domain, with its master.cf entry specifying
chroot, while other domains use a non-chroot transport.

--
        Viktor.