Spam Filter ISP Forums : VALID MD CHECK https://www.logsat.com/spamfilter/forums/ Wed, 11 Mar 2026 06:06:43 +0000 Mon, 11 May 2009 23:49:50 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=6639 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[VALID MD CHECK : rudaf, We verified that the patch...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12884&title=valid-md-check#12884 Author: LogSat
Subject: 6639
Posted: 11 May 2009 at 11:49pm

rudaf,

We verified that the patch that addressed your issue in build 806 is still present and working in build 808. It is possible that there is a different kind of issue/error being sent by the DNS server(s). Could you please zip and email us SpamFilter's logfile for a day (and the to/from of at least 2-3 emails blocked due to this so we may locate them in the logs?]]> Mon, 11 May 2009 23:49:50 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12884&title=valid-md-check#12884 <![CDATA[VALID MD CHECK : Hello Roberto, in order to...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12881&title=valid-md-check#12881 Author: rudaf
Subject: 6639
Posted: 11 May 2009 at 7:53pm

Hello Roberto,
 
in order to solve the "Invalid MX record - DNS Server Reports Query Refused Error" issue we installed .806 and then 808, but now we are facing again such an issue: (i) DNS are ok, (ii)domains filtered have regular MX entries in their DNS
 
Any idea?
]]> Mon, 11 May 2009 19:53:38 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12881&title=valid-md-check#12881 <![CDATA[VALID MD CHECK : Fritz,Your DNS server is *sometimes*...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12787&title=valid-md-check#12787 Author: LogSat
Subject: 6639
Posted: 01 April 2009 at 12:05am

Fritz,

Your DNS server is *sometimes* reporting an error when queried as follows:

03.30.09 10:19:05:992 -- (5304) - Invalid MX record - DNS Server Reports Query Server Error

SpamFilter is supposed to recognize when there is a DNS server erratic response, but was not able to do so in this case. This is thus filed as a bug.

We've created a patch that should address this - it's build 4.1.2.806 and we've just made it available in the user area on the website. Please do note that it is considered to be a beta, as it still has not gone thru more strict QA as we wanted to make it available to you as soon as possible. Please let us know if it does solve your issues should you wish to use it.
]]> Wed, 01 Apr 2009 00:05:26 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12787&title=valid-md-check#12787 <![CDATA[VALID MD CHECK : DONE!I&#039;ve added a textfile...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12786&title=valid-md-check#12786 Author: rach
Subject: 6639
Posted: 31 March 2009 at 12:22pm

DONE!
I've added a textfile with some.

regards, Fritz
]]> Tue, 31 Mar 2009 12:22:15 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12786&title=valid-md-check#12786 <![CDATA[VALID MD CHECK : Fritz, Yes, absolutely, please...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12783&title=valid-md-check#12783 Author: LogSat
Subject: 6639
Posted: 30 March 2009 at 11:28pm

Fritz,

Yes, absolutely, please send us the zipped log for the day it happened (and please indicate which to/from email addresses are involved so we may locate the email in the log). If the file is over 7MB in size, please send the file to our FTP site, for which I'l send a PM with the login info.]]> Mon, 30 Mar 2009 23:28:59 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12783&title=valid-md-check#12783 <![CDATA[VALID MD CHECK : Roberto, look at this: C:\Documents...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12780&title=valid-md-check#12780 Author: rach
Subject: 6639
Posted: 30 March 2009 at 5:14am

Roberto,
 
look at this:
C:\Documents and Settings\Administrator>nslookup
Default Server:  service1.netdepot.eu
Address:  193.33.21.200
> set type=mx
> hirschvogel.eu
Server:  service1.netdepot.eu
Address:  193.33.21.200
Non-authoritative answer:
hirschvogel.eu  MX preference = 20, mail exchanger = mail.hirschvogel-online.de
hirschvogel.eu  MX preference = 30, mail exchanger = mx.odn.de
mx.odn.de       internet address = 212.34.160.79
mail.hirschvogel-online.de      internet address = 212.77.180.58
>
 
so, you can see, the resolver works like a charm.
what's now?
 
BTW: i now the subdomain-problem, but in this case it wasn't a subdomain.
 
Is it helpful, to have a look at the logging? I checked this, but i can't find any hint. 
 
Fritz
]]> Mon, 30 Mar 2009 05:14:08 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12780&title=valid-md-check#12780 <![CDATA[VALID MD CHECK : Fritz,Time-outs should not be...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12775&title=valid-md-check#12775 Author: LogSat
Subject: 6639
Posted: 28 March 2009 at 2:06pm

Fritz,

Time-outs should not be an issue, as SpamFilter will not cause the DNS-based tests in case of time-outs, it will rather simply skip the test and move on with the others. If there is a timeout issue with one or more DNS servers, SpamFilter's activity logfile will contain a large number of events similar to:

03/24/09 08:48:48:163 -- (5072) DNS Error:TimedOut
03/24/09 08:48:48:163 -- (5072) DNS Server will rotate after query. New server will be 66.181.198.2
03/24/09 08:48:53:163 -- (5072) DNS Error:TimedOut
03/24/09 08:48:53:163 -- (5072) DNS Server will rotate after query. New server will be 66.181.198.4

In our own specific case on the 26th here at LogSat, where emails were being rejected due to MX record failures, the DNS server that was behaving erratically appeared to work normally, but sometimes would return "no records found" on queries for the MX record on a domain. We tested this via nslookup commands from command-line, and received the same (incorrect) response for multiple domains. We attributed this to a corrupted DNS cache, and as I mentioned restarting the DNS service and clearing the cache (we're using Microsoft DNS) solved the issue immediately.

Could you try to verify this on your own server, by issuing the following commands in bold from a DOS/Unix prompt, replacing the aa.bb.cc.dd with the IP of your DNS servers, and ensuring that for each you receive the accurate reply in italic? Please replace the domain hirschvogel.eu with one that was recently stopped incorrectly:


c:\>nslookup
> server 66.181.198.2
Default server: 66.181.198.2
Address: 66.181.198.2#53
> set type=mx
> hirschvogel.eu
Server:         66.181.198.2
Address:        66.181.198.2#53

Non-authoritative answer:
hirschvogel.eu  mail exchanger = 30 mx.odn.de.
hirschvogel.eu  mail exchanger = 20 mail.hirschvogel-online.de.

Authoritative answers can be found from:
mx.odn.de       internet address = 212.34.160.79
>


Please also ensure that the MX record lookup is performed for the exact domain in the "from" email address. For example "john@hirschvogel.eu" or "john@mail.hirschvogel.eu". In some cases administrators will "forget" to add MX records for child domains, and often the second type of email address above with the "mail.hirschvogel.eu" may not contain an MX record.
]]> Sat, 28 Mar 2009 14:06:48 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12775&title=valid-md-check#12775 <![CDATA[VALID MD CHECK : Roberto, the DNS is workking...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12769&title=valid-md-check#12769 Author: rach
Subject: 6639
Posted: 27 March 2009 at 11:55am

Roberto,
 
the DNS is workking very well. BTW, we are using a main-resolver in our datacenter. 
Maybe it is a NS request-timeout problem?
 
Here are the next problem-domains from today:
hirschvogel.eu
wackerbauer-architekt.de
planet49.com
samsung.com
The mx-check is a very important filter, but it should work precisely.
This error causes since 3.0. But now more an more. 
 
Regards, Fritz
]]> Fri, 27 Mar 2009 11:55:02 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12769&title=valid-md-check#12769 <![CDATA[VALID MD CHECK : Fritz, You are correct, the domain...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12765&title=valid-md-check#12765 Author: LogSat
Subject: 6639
Posted: 26 March 2009 at 8:08pm

Fritz,

You are correct, the domain dbvi.de does indeed have a valid DNS record. If the problem occurs on and off, there may be an issue with the DNS server SpamFilter uses to perform DNS queries. As a matter of fact, we here at LogSat had the same exact issue this morning with one (just one - the other was fine) of our own DNS servers . Restarting the DNS services solved the problem.]]> Thu, 26 Mar 2009 20:08:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12765&title=valid-md-check#12765 <![CDATA[VALID MD CHECK : Hi, SpamFilter said: 557...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12762&title=valid-md-check#12762 Author: rach
Subject: 6639
Posted: 25 March 2009 at 12:18pm

Hi,
 
SpamFilter said:
557 Your domain dbvi.de does not have a valid MX DNS record. Disconnecting...
 
But a check with http://www.mxtoolbox.com/index.aspx gives this result:
PreferenceHost NameIP AddressTTL
5mailin.web-shuttle.de217.64.172.2183600
 
Why ?
What's the problem?
 
We do have this problem very often.
 
Regards, Fritz
 
]]> Wed, 25 Mar 2009 12:18:49 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6639&PID=12762&title=valid-md-check#12762