Got some new info. I read this https://lists.isc.org/pipermail/bind-users/2006-August/063528.html Perhaps, the problem because our MS DNS server returns SERVFAIL on AAAA query. It happens in case of often AAAA queries. It's 9.2-RC1: .... 14:59:50.973445 IP reticulum.xxx.ru.29244 > hercules.xxx.ru.domain: 53419+ MX? xxx.ru. (24) 14:59:50.973754 IP hercules.xxx.ru.domain > reticulum.xxx.ru.29244: 53419* 1/0/1 MX kalmar.xxx.ru. 10 (63) 14:59:50.974061 IP reticulum.xxx.ru.56461 > hercules.xxx.ru.domain: 53420+ AAAA? kalmar.xxx.ru. (31) 14:59:50.974340 IP hercules.xxx.ru.domain > reticulum.xxx.ru.56461: 53420* 0/1/0 (82) 14:59:50.974570 IP reticulum.xxx.ru.28332 > hercules.xxx.ru.domain: 53421+ AAAA? kalmar.xxx.ru. (31) 14:59:50.974887 IP hercules.xxx.ru.domain > reticulum.xxx.ru.28332: 53421* 0/1/0 (82) 14:59:50.974919 IP reticulum.xxx.ru.21453 > hercules.xxx.ru.domain: 53422+ AAAA? kalmar. (24) 14:59:50.975290 IP hercules.xxx.ru.domain > reticulum.xxx.ru.21453: 53422 ServFail 0/0/0 (24) .... At third time MS DNS returned SERVFAIL. Why sendmail asks AAAA for 3 times? Something wrong with bind libraries? I think if there was no SERVFAIL on AAAA it would ask for A record then.
The opposite situation on 9.1-RELEASE. Here sendmail asks AAAA only for 1 time. Then it asks A. ... 14:30:45.061950 IP 10.0.2.15.30979 > hercules.xxx.ru.domain: 62684+ MX? xxx.ru. (24) 14:30:45.063064 IP hercules.xxx.ru.domain > 10.0.2.15.30979: 62684* 1/0/1 MX kalmar.xxx.ru. 10 (63) 14:30:45.063624 IP 10.0.2.15.39212 > hercules.xxx.ru.domain: 62685+ AAAA? kalmar.xxx.ru. (31) 14:30:45.064460 IP hercules.xxx.ru.domain > 10.0.2.15.39212: 62685* 0/1/0 (82) 14:30:45.064766 IP 10.0.2.15.44381 > hercules.xxx.ru.domain: 62686+ A? kalmar.xxx.ru. (31) 14:30:45.065530 IP hercules.xxx.ru.domain > 10.0.2.15.44381: 62686* 1/0/0 A 192.168.31.190 (47) ... I will continue investigation. 2013/8/4 Pavel Timofeev <tim...@gmail.com>: > Same thing on RELENG/9.2 > > 2013/8/3 Pavel Timofeev <tim...@gmail.com>: >> 2013/8/2 Ruben de Groot <mai...@bzerk.org>: >>> On Wed, Jul 31, 2013 at 04:54:08PM +0400, Pavel Timofeev typed: >>>> I've just installed new fresh 9.2-BETA2 amd64 on another machine. >>>> Same behaviour - Sendmail asks DNS only for AAAA record of mx server. >>>> We don't use IPv6 in our company. >>>> >>>> 2013/7/31 Pavel Timofeev <tim...@gmail.com>: >>>> > I wanted to say that sendmail asks only AAAA (IPv6) record of mx >>>> > server, but not A (IPv4). >>>> > Any ideas? >>>> > >>>> > 2013/7/31 Pavel Timofeev <tim...@gmail.com>: >>>> >> Looks like my sendmail uses only IPv6 to resolve mx server dns name to >>>> >> ip address. >>>> >> >>>> >> 14:59:50.793338 IP reticulum.xxx.ru.19032 > hercules.xxx.ru.domain: >>>> >> 53417+ AAAA? xxx.ru. (24) >>>> >> [13/98] >>>> >> 14:59:50.793662 IP hercules.xxx.ru.domain > reticulum.xxx.ru.19032: >>>> >> 53417* 0/1/0 (75) >>>> >> 14:59:50.793696 IP reticulum.xxx.ru.55299 > hercules.xxx.ru.domain: >>>> >> 53418+ A? xxx.ru. (24) >>> >>> Here it is definately asking an A record. >> >> And? It's not A record of mx server. >> >>>> >> 14:59:50.794087 IP hercules.xxx.ru.domain > reticulum.xxx.ru.55299: >>>> >> 53418* 7/0/0 A 192.168.2.11, A 192.168.2.12, A 192.168.41.4, A >>>> >> 192.168.14.12, A 192.168.34.100, A 192.168.34.110, A 192.168.44.19 >>>> >> (136) >>> >>> And here is the reply. The quetion is more why is it repeating the same >>> query (below) over and over. >> >> Yes, reply about xxx.ru, not about mx server's IP which is kalmar.xxx.ru >> >>> >>> Ruben >>> >>>> >> 14:59:50.973445 IP reticulum.xxx.ru.29244 > hercules.xxx.ru.domain: >>>> >> 53419+ MX? xxx.ru. (24) >>>> >> 14:59:50.973754 IP hercules.xxx.ru.domain > reticulum.xxx.ru.29244: >>>> >> 53419* 1/0/1 MX kalmar.xxx.ru. 10 (63) >>>> >> 14:59:50.974061 IP reticulum.xxx.ru.56461 > hercules.xxx.ru.domain: >>>> >> 53420+ AAAA? kalmar.xxx.ru. (31) >>>> >> 14:59:50.974340 IP hercules.xxx.ru.domain > reticulum.xxx.ru.56461: >>>> >> 53420* 0/1/0 (82) >>>> >> 14:59:50.974570 IP reticulum.xxx.ru.28332 > hercules.xxx.ru.domain: >>>> >> 53421+ AAAA? kalmar.xxx.ru. (31) >>>> >> 14:59:50.974887 IP hercules.xxx.ru.domain > reticulum.xxx.ru.28332: >>>> >> 53421* 0/1/0 (82) >>>> >> 14:59:50.974919 IP reticulum.xxx.ru.21453 > hercules.xxx.ru.domain: >>>> >> 53422+ AAAA? kalmar. (24) >>>> >> 14:59:50.975290 IP hercules.xxx.ru.domain > reticulum.xxx.ru.21453: >>>> >> 53422 ServFail 0/0/0 (24) >>>> >> 14:59:50.975314 IP reticulum.xxx.ru.63038 > hercules.xxx.ru.domain: >>>> >> 53422+ AAAA? kalmar. (24) >>>> >> 14:59:50.975674 IP hercules.xxx.ru.domain > reticulum.xxx.ru.63038: >>>> >> 53422 ServFail 0/0/0 (24) >>>> >> 14:59:50.975749 IP reticulum.xxx.ru.38393 > hercules.xxx.ru.domain: >>>> >> 53423+ AAAA? kalmar.xxx.ru. (31) >>>> >> 14:59:50.976105 IP hercules.xxx.ru.domain > reticulum.xxx.ru.38393: >>>> >> 53423* 0/1/0 (82) >>>> >> 14:59:50.976176 IP reticulum.xxx.ru.45558 > hercules.xxx.ru.domain: >>>> >> 53424+ AAAA? kalmar. (24) >>>> >> 14:59:50.976483 IP hercules.xxx.ru.domain > reticulum.xxx.ru.45558: >>>> >> 53424 ServFail 0/0/0 (24) >>>> >> 14:59:50.976512 IP reticulum.xxx.ru.45297 > hercules.xxx.ru.domain: >>>> >> 53424+ AAAA? kalmar. (24) >>>> >> 14:59:50.976864 IP hercules.xxx.ru.domain > reticulum.xxx.ru.45297: >>>> >> 53424 ServFail 0/0/0 (24) >>>> >> >>>> >> How to force it to use IPv4? >>>> _______________________________________________ >>>> freebsd-stable@freebsd.org mailing list >>>> http://lists.freebsd.org/mailman/listinfo/freebsd-stable >>>> To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org" _______________________________________________ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"