Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Invalid MX
  FAQ FAQ  Forum Search   Register Register  Login Login

Invalid MX

 Post Reply Post Reply
Author
kspare View Drop Down
Senior Member
Senior Member


Joined: 26 January 2005
Location: Canada
Status: Offline
Points: 334
Post Options Post Options   Thanks (0) Thanks(0)   Quote kspare Quote  Post ReplyReply Direct Link To This Post Topic: Invalid MX
    Posted: 04 July 2005 at 1:43pm
i'm seeing this error on some messages coming in, and doing a simple query with nslookup gives the proper results. Any ideas??
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 04 July 2005 at 2:14pm
Could you post an example, including possibly the section of SpamFilter's logfile that shows the error (inluding all of the entries relative to that connection starting from the "Connection From" entry point)?
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
kspare View Drop Down
Senior Member
Senior Member


Joined: 26 January 2005
Location: Canada
Status: Offline
Points: 334
Post Options Post Options   Thanks (0) Thanks(0)   Quote kspare Quote  Post ReplyReply Direct Link To This Post Posted: 04 July 2005 at 3:20pm

07/04/05 10:31:52:417 -- (4608) Connection from: 204.83.142.27  -  Originating country : Canada
07/04/05 10:31:52:495 -- (4608) Resolving 204.83.142.27 - mailout1.accesscomm.ca
07/04/05 10:32:09:542 -- (4608) - Invalid MX record - Socket Error # 11001 Host not found.
07/04/05 10:32:09:542 -- (4608) 204.83.142.27 - Mail from: user@dragonorb.ca To: user@ksphosting.com will be rejected
07/04/05 10:32:09:651 -- (4608) EMail from user@dragonorb.ca to mwaters@ksphosting.com was received and quarantined. Size: 5 KB, 5120 bytes

I've seen some others fail as well....but shouldn't

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 04 July 2005 at 3:32pm
I agree, it should not have stopped. Are *all* emails from that domain showing that they failed the MX test? We were not able to replicate the issue with that domain, so if you do have other entries form that site can you please zip and email them to us?

I'll send you a private message to go in further details on how the MX test is performed. There's some information we don't want to make public as we don't want spammers to find out what criteria are used in these tests.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
kspare View Drop Down
Senior Member
Senior Member


Joined: 26 January 2005
Location: Canada
Status: Offline
Points: 334
Post Options Post Options   Thanks (0) Thanks(0)   Quote kspare Quote  Post ReplyReply Direct Link To This Post Posted: 04 July 2005 at 3:34pm
Ok, i'll await your email to begin talking via email.
Back to Top
mbrusl View Drop Down
Groupie
Groupie
Avatar

Joined: 05 December 2005
Location: Thunder Bay Ont
Status: Offline
Points: 61
Post Options Post Options   Thanks (0) Thanks(0)   Quote mbrusl Quote  Post ReplyReply Direct Link To This Post Posted: 05 December 2005 at 3:52am

Originally posted by LogSat LogSat wrote:

Could you post an example, including possibly the section of SpamFilter's logfile that shows the error (inluding all of the entries relative to that connection starting from the "Connection From" entry point)?

Here is the MX issue I'm having.

12/05/05 03:23:18:883 -- (4320) Connection from: 67.18.255.34  -  Originating country : United States
12/05/05 03:23:19:764 -- (4320) Resolving 67.18.255.34 - janes.addicti0n.net
12/05/05 03:23:19:834 -- (4320) - Invalid MX record -
12/05/05 03:23:19:834 -- (4320) 67.18.255.34 - Mail from: nobody@janes.addicti0n.net To: ironmax@spacequad.com will be disconnected
12/05/05 03:23:19:834 -- (4320) Disconnect

This is only from one of the connections that I get.  However, this next one is I think obvious...

12/04/05 04:37:27:317 -- (3792) Connection from: 194.204.29.110  -  Originating country : Estonia
12/04/05 04:37:29:851 -- (3792) Resolving 194.204.29.110 - dsl29-110.uninet.ee
12/04/05 04:37:30:432 -- (3792) - Invalid MX record -
12/04/05 04:37:30:432 -- (3792) 194.204.29.110 - Mail from: larjet@addvaluegroup.com To: mbrusl@spacequad.com will be disconnected
12/04/05 04:37:30:432 -- (3792) Disconnect

This one is the same as the first one, any ideas?

12/04/05 05:12:48:729 -- (4884) Resolving 72.11.147.116 - dickens.freeimagine.com
12/04/05 05:12:48:839 -- (4884) - Invalid MX record -
12/04/05 05:12:48:839 -- (4884) 72.11.147.116 - Mail from: Gault.llwr@denedia.freeimagine.com To: amsbrusl@spacequad.com will be disconnected
12/04/05 05:12:48:839 -- (4884) Disconnect

Michaael

 

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 05 December 2005 at 8:36am
Michaael,

Actually the MX filter is doing its job, as none of the following 3 email domains have valid MX records:

janes.addicti0n.net
addvaluegroup.com
denedia.freeimagine.com

SpamFilter will check the email domain on the right of the "@" symbol to see if it has a valid MX record. From an MSDOS command prompt you can try to issue the commands:

NSLOOKUP
SET TYPE=MX
janes.addicti0n.net
addvaluegroup.com
denedia.freeimagine.com

For each of the domains you should be able to see that none of the results displayed will show an MX (mail exchanger) DNS record.
If you however for example try addicti0n.net without the "janes." you'll see that the parent domain does have a record. You probably will want to contact the administrators for those domains to inform them about the incorrect configuration of their DNS. Should this be impossible if you receive emails from dozens/hundreds of incorrectly configured domains, then I'm afraid you will have to disable that filter.


Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
mbrusl View Drop Down
Groupie
Groupie
Avatar

Joined: 05 December 2005
Location: Thunder Bay Ont
Status: Offline
Points: 61
Post Options Post Options   Thanks (0) Thanks(0)   Quote mbrusl Quote  Post ReplyReply Direct Link To This Post Posted: 06 December 2005 at 2:37am

Originally posted by LogSat LogSat wrote:

Michaael,

Actually the MX filter is doing its job, as none of the following 3 email domains have valid MX records:

janes.addicti0n.net
addvaluegroup.com
denedia.freeimagine.com

SpamFilter will check the email domain on the right of the "@" symbol to see if it has a valid MX record. From an MSDOS command prompt you can try to issue the commands:

NSLOOKUP
SET TYPE=MX
janes.addicti0n.net
addvaluegroup.com
denedia.freeimagine.com

For each of the domains you should be able to see that none of the results displayed will show an MX (mail exchanger) DNS record.
If you however for example try addicti0n.net without the "janes." you'll see that the parent domain does have a record. You probably will want to contact the administrators for those domains to inform them about the incorrect configuration of their DNS. Should this be impossible if you receive emails from dozens/hundreds of incorrectly configured domains, then I'm afraid you will have to disable that filter.


I really appriciate the fast respose and forgot about using the nslookup to varify the records.

Thanks again

Mike

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.156 seconds.