Print Page | Close Window

Invalid MX

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5252
Printed Date: 31 July 2025 at 11:18am


Topic: Invalid MX
Posted By: kspare
Subject: Invalid MX
Date Posted: 04 July 2005 at 1:43pm
i'm seeing this error on some messages coming in, and doing a simple query with nslookup gives the proper results. Any ideas??



Replies:
Posted By: LogSat
Date Posted: 04 July 2005 at 2:14pm
Could you post an example, including possibly the section of SpamFilter's logfile that shows the error (inluding all of the entries relative to that connection starting from the "Connection From" entry point)?

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: kspare
Date Posted: 04 July 2005 at 3:20pm

07/04/05 10:31:52:417 -- (4608) Connection from: 204.83.142.27  -  Originating country : Canada
07/04/05 10:31:52:495 -- (4608) Resolving 204.83.142.27 - mailout1.accesscomm.ca
07/04/05 10:32:09:542 -- (4608) - Invalid MX record - Socket Error # 11001 Host not found.
07/04/05 10:32:09:542 -- (4608) 204.83.142.27 - Mail from: mailto:user@dragonorb.ca - user@dragonorb.ca To: mailto:user@ksphosting.com - user@ksphosting.com will be rejected
07/04/05 10:32:09:651 -- (4608) EMail from mailto:user@dragonorb.ca - user@dragonorb.ca to mailto:mwaters@ksphosting.com - mwaters@ksphosting.com was received and quarantined. Size: 5 KB, 5120 bytes

I've seen some others fail as well....but shouldn't



Posted By: LogSat
Date Posted: 04 July 2005 at 3:32pm
I agree, it should not have stopped. Are *all* emails from that domain showing that they failed the MX test? We were not able to replicate the issue with that domain, so if you do have other entries form that site can you please zip and email them to us?

I'll send you a private message to go in further details on how the MX test is performed. There's some information we don't want to make public as we don't want spammers to find out what criteria are used in these tests.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: kspare
Date Posted: 04 July 2005 at 3:34pm
Ok, i'll await your email to begin talking via email.


Posted By: mbrusl
Date Posted: 05 December 2005 at 3:52am

Originally posted by LogSat LogSat wrote:

Could you post an example, including possibly the section of SpamFilter's logfile that shows the error (inluding all of the entries relative to that connection starting from the "Connection From" entry point)?

Here is the MX issue I'm having.

12/05/05 03:23:18:883 -- (4320) Connection from: 67.18.255.34  -  Originating country : United States
12/05/05 03:23:19:764 -- (4320) Resolving 67.18.255.34 - janes.addicti0n.net
12/05/05 03:23:19:834 -- (4320) - Invalid MX record -
12/05/05 03:23:19:834 -- (4320) 67.18.255.34 - Mail from: mailto:nobody@janes.addicti0n.net - nobody@janes.addicti0n.net To: mailto:ironmax@spacequad.com - ironmax@spacequad.com will be disconnected
12/05/05 03:23:19:834 -- (4320) Disconnect

This is only from one of the connections that I get.  However, this next one is I think obvious...

12/04/05 04:37:27:317 -- (3792) Connection from: 194.204.29.110  -  Originating country : Estonia
12/04/05 04:37:29:851 -- (3792) Resolving 194.204.29.110 - dsl29-110.uninet.ee
12/04/05 04:37:30:432 -- (3792) - Invalid MX record -
12/04/05 04:37:30:432 -- (3792) 194.204.29.110 - Mail from: mailto:larjet@addvaluegroup.com - larjet@addvaluegroup.com To: mailto:mbrusl@spacequad.com - mbrusl@spacequad.com will be disconnected
12/04/05 04:37:30:432 -- (3792) Disconnect

This one is the same as the first one, any ideas?

12/04/05 05:12:48:729 -- (4884) Resolving 72.11.147.116 - dickens.freeimagine.com
12/04/05 05:12:48:839 -- (4884) - Invalid MX record -
12/04/05 05:12:48:839 -- (4884) 72.11.147.116 - Mail from: mailto:Gault.llwr@denedia.freeimagine.com - Gault.llwr@denedia.freeimagine.com To: mailto:amsbrusl@spacequad.com - amsbrusl@spacequad.com will be disconnected
12/04/05 05:12:48:839 -- (4884) Disconnect

Michaael

 



Posted By: LogSat
Date Posted: 05 December 2005 at 8:36am
Michaael,

Actually the MX filter is doing its job, as none of the following 3 email domains have valid MX records:

mailto:nobody@janes.addicti0n.net - janes.addicti0n.net
mailto:larjet@addvaluegroup.com - addvaluegroup.com
mailto:Gault.llwr@denedia.freeimagine.com - denedia.freeimagine.com

SpamFilter will check the email domain on the right of the "@" symbol to see if it has a valid MX record. From an MSDOS command prompt you can try to issue the commands:

NSLOOKUP
SET TYPE=MX
mailto:nobody@janes.addicti0n.net - janes.addicti0n.net
mailto:larjet@addvaluegroup.com - addvaluegroup.com
mailto:Gault.llwr@denedia.freeimagine.com - denedia.freeimagine.com

For each of the domains you should be able to see that none of the results displayed will show an MX (mail exchanger) DNS record.
If you however for example try addicti0n.net without the "janes." you'll see that the parent domain does have a record. You probably will want to contact the administrators for those domains to inform them about the incorrect configuration of their DNS. Should this be impossible if you receive emails from dozens/hundreds of incorrectly configured domains, then I'm afraid you will have to disable that filter.




-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: mbrusl
Date Posted: 06 December 2005 at 2:37am

Originally posted by LogSat LogSat wrote:

Michaael,

Actually the MX filter is doing its job, as none of the following 3 email domains have valid MX records:

mailto:nobody@janes.addicti0n.net - janes.addicti0n.net
mailto:larjet@addvaluegroup.com - addvaluegroup.com
mailto:Gault.llwr@denedia.freeimagine.com - denedia.freeimagine.com

SpamFilter will check the email domain on the right of the "@" symbol to see if it has a valid MX record. From an MSDOS command prompt you can try to issue the commands:

NSLOOKUP
SET TYPE=MX
mailto:nobody@janes.addicti0n.net - janes.addicti0n.net
mailto:larjet@addvaluegroup.com - addvaluegroup.com
mailto:Gault.llwr@denedia.freeimagine.com - denedia.freeimagine.com

For each of the domains you should be able to see that none of the results displayed will show an MX (mail exchanger) DNS record.
If you however for example try addicti0n.net without the "janes." you'll see that the parent domain does have a record. You probably will want to contact the administrators for those domains to inform them about the incorrect configuration of their DNS. Should this be impossible if you receive emails from dozens/hundreds of incorrectly configured domains, then I'm afraid you will have to disable that filter.


I really appriciate the fast respose and forgot about using the nslookup to varify the records.

Thanks again

Mike




Print Page | Close Window