Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - VALID MD CHECK
  FAQ FAQ  Forum Search   Register Register  Login Login

VALID MD CHECK

 Post Reply Post Reply
Author
rach View Drop Down
Newbie
Newbie


Joined: 13 October 2006
Location: Germany
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote rach Quote  Post ReplyReply Direct Link To This Post Topic: VALID MD CHECK
    Posted: 25 March 2009 at 12:18pm
Hi,
 
SpamFilter said:
557 Your domain dbvi.de does not have a valid MX DNS record. Disconnecting...
 
But a check with http://www.mxtoolbox.com/index.aspx gives this result:
Preference Host Name IP Address TTL
5 mailin.web-shuttle.de 217.64.172.218 3600
 
Why ?
What's the problem?
 
We do have this problem very often.
 
Regards, Fritz
 
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4065
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 26 March 2009 at 8:08pm
Fritz,

You are correct, the domain dbvi.de does indeed have a valid DNS record. If the problem occurs on and off, there may be an issue with the DNS server SpamFilter uses to perform DNS queries. As a matter of fact, we here at LogSat had the same exact issue this morning with one (just one - the other was fine) of our own DNS servers . Restarting the DNS services solved the problem.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
rach View Drop Down
Newbie
Newbie


Joined: 13 October 2006
Location: Germany
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote rach Quote  Post ReplyReply Direct Link To This Post Posted: 27 March 2009 at 11:55am
Roberto,
 
the DNS is workking very well. BTW, we are using a main-resolver in our datacenter. 
Maybe it is a NS request-timeout problem?
 
Here are the next problem-domains from today:
hirschvogel.eu
wackerbauer-architekt.de
planet49.com
samsung.com
The mx-check is a very important filter, but it should work precisely.
This error causes since 3.0. But now more an more. 
 
Regards, Fritz
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4065
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 28 March 2009 at 2:06pm
Fritz,

Time-outs should not be an issue, as SpamFilter will not cause the DNS-based tests in case of time-outs, it will rather simply skip the test and move on with the others. If there is a timeout issue with one or more DNS servers, SpamFilter's activity logfile will contain a large number of events similar to:

03/24/09 08:48:48:163 -- (5072) DNS Error:TimedOut
03/24/09 08:48:48:163 -- (5072) DNS Server will rotate after query. New server will be 66.181.198.2
03/24/09 08:48:53:163 -- (5072) DNS Error:TimedOut
03/24/09 08:48:53:163 -- (5072) DNS Server will rotate after query. New server will be 66.181.198.4


In our own specific case on the 26th here at LogSat, where emails were being rejected due to MX record failures, the DNS server that was behaving erratically appeared to work normally, but sometimes would return "no records found" on queries for the MX record on a domain. We tested this via nslookup commands from command-line, and received the same (incorrect) response for multiple domains. We attributed this to a corrupted DNS cache, and as I mentioned restarting the DNS service and clearing the cache (we're using Microsoft DNS) solved the issue immediately.

Could you try to verify this on your own server, by issuing the following commands in bold from a DOS/Unix prompt, replacing the aa.bb.cc.dd with the IP of your DNS servers, and ensuring that for each you receive the accurate reply in italic? Please replace the domain hirschvogel.eu with one that was recently stopped incorrectly:


c:\>nslookup
> server 66.181.198.2
Default server: 66.181.198.2
Address: 66.181.198.2#53
> set type=mx
> hirschvogel.eu
Server:         66.181.198.2
Address:        66.181.198.2#53

Non-authoritative answer:
hirschvogel.eu  mail exchanger = 30 mx.odn.de.
hirschvogel.eu  mail exchanger = 20 mail.hirschvogel-online.de.


Authoritative answers can be found from:
mx.odn.de       internet address = 212.34.160.79
>


Please also ensure that the MX record lookup is performed for the exact domain in the "from" email address. For example "john@hirschvogel.eu" or "john@mail.hirschvogel.eu". In some cases administrators will "forget" to add MX records for child domains, and often the second type of email address above with the "mail.hirschvogel.eu" may not contain an MX record.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
rach View Drop Down
Newbie
Newbie


Joined: 13 October 2006
Location: Germany
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote rach Quote  Post ReplyReply Direct Link To This Post Posted: 30 March 2009 at 5:14am
Roberto,
 
look at this:
C:\Documents and Settings\Administrator>nslookup
Default Server:  service1.netdepot.eu
Address:  193.33.21.200
> set type=mx
> hirschvogel.eu
Server:  service1.netdepot.eu
Address:  193.33.21.200
Non-authoritative answer:
hirschvogel.eu  MX preference = 20, mail exchanger = mail.hirschvogel-online.de
hirschvogel.eu  MX preference = 30, mail exchanger = mx.odn.de
mx.odn.de       internet address = 212.34.160.79
mail.hirschvogel-online.de      internet address = 212.77.180.58
>
 
so, you can see, the resolver works like a charm.
what's now?
 
BTW: i now the subdomain-problem, but in this case it wasn't a subdomain.
 
Is it helpful, to have a look at the logging? I checked this, but i can't find any hint. 
 
Fritz
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4065
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 30 March 2009 at 11:28pm
Fritz,

Yes, absolutely, please send us the zipped log for the day it happened (and please indicate which to/from email addresses are involved so we may locate the email in the log). If the file is over 7MB in size, please send the file to our FTP site, for which I'l send a PM with the login info.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
rach View Drop Down
Newbie
Newbie


Joined: 13 October 2006
Location: Germany
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote rach Quote  Post ReplyReply Direct Link To This Post Posted: 31 March 2009 at 12:22pm
DONE!
I've added a textfile with some.

regards, Fritz
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4065
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 01 April 2009 at 12:05am
Fritz,

Your DNS server is *sometimes* reporting an error when queried as follows:

03.30.09 10:19:05:992 -- (5304) - Invalid MX record - DNS Server Reports Query Server Error

SpamFilter is supposed to recognize when there is a DNS server erratic response, but was not able to do so in this case. This is thus filed as a bug.

We've created a patch that should address this - it's build 4.1.2.806 and we've just made it available in the user area on the website. Please do note that it is considered to be a beta, as it still has not gone thru more strict QA as we wanted to make it available to you as soon as possible. Please let us know if it does solve your issues should you wish to use it.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
rudaf View Drop Down
Newbie
Newbie


Joined: 04 July 2007
Location: Italy
Status: Offline
Points: 38
Post Options Post Options   Thanks (0) Thanks(0)   Quote rudaf Quote  Post ReplyReply Direct Link To This Post Posted: 11 May 2009 at 7:53pm
Hello Roberto,
 
in order to solve the "Invalid MX record - DNS Server Reports Query Refused Error" issue we installed .806 and then 808, but now we are facing again such an issue: (i) DNS are ok, (ii)domains filtered have regular MX entries in their DNS
 
Any idea?
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4065
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 11 May 2009 at 11:49pm
rudaf,

We verified that the patch that addressed your issue in build 806 is still present and working in build 808. It is possible that there is a different kind of issue/error being sent by the DNS server(s). Could you please zip and email us SpamFilter's logfile for a day (and the to/from of at least 2-3 emails blocked due to this so we may locate them in the logs?
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.141 seconds.