This is a discussion on a al owens within the Bind Users forums, part of the DNS and Related Forums category; a al owens Barry Margolin <barry.margolin@level3.com> wrote in message news:<be1r80$1kl9$1@sf1....
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
a al owens
Barry Margolin <barry.margolin@level3.com> wrote in message news:<be1r80$1kl9$1@sf1.isc.org>... > In article <be1q4d$1jk4$1@sf1.isc.org>, > Sang-yong Suh <sysuh@kigam.re.kr> wrote: > >Browsing my maillog, I found that an outside mail server, where I have > >an account and forwards to me, accepted mail from an unresolvable domain > >and has been rejected by my mail server. This caught my eye. > > > > Jul 3 10:18:53 news sendmail[26771]: h631FqVl026771: > > ruleset=check_mail, arg1=<freed_av@worldonline.fr>, > > relay=xxxxxx.xxxxxxx.re.kr [xxx.xx.30.253], > > reject=451 4.1.8 Domain of sender address > > freed_av@worldonline.fr does not resolve > > > >The relay mail server uses bind 8.3.3-REL. > >My internal mail server runs bind-9.2.2. > > > >The problem is that the sender address freed_av@worldonline.fr is > >unresolvable on bind-9.2.2 but is resolvable on 8.3.3-REL. > .... > > host version dig dig +trace > > > > 134.75.144.201 9.2.2 unresolvable timedout > > 134.75.144.204 9.2.2 unresolvable timedout > > These two servers don't have recursion enabled. You shouldn't be using > them to try to look up domains they're not authoritative for. > > Check the "flags" section of the response from your other 9.2.2 servers, > and make sure it has "ra" (Recursion Available). |