Hmm. SERVFAIL comes because of not full dns name. Kalmar. instead of kalmar.ocs.ru.
2013/8/5 Pavel Timofeev <tim...@gmail.com>: > Got some new info. I read this > https://lists.isc.org/pipermail/bind-users/2006-August/063528.html > Perhaps, the problem because our MS DNS server returns SERVFAIL on AAAA query. > It happens in case of often AAAA queries. It's 9.2-RC1: > .... > 14:59:50.973445 IP reticulum.xxx.ru.29244 > hercules.xxx.ru.domain: > 53419+ MX? xxx.ru. (24) > 14:59:50.973754 IP hercules.xxx.ru.domain > reticulum.xxx.ru.29244: > 53419* 1/0/1 MX kalmar.xxx.ru. 10 (63) > 14:59:50.974061 IP reticulum.xxx.ru.56461 > hercules.xxx.ru.domain: > 53420+ AAAA? kalmar.xxx.ru. (31) > 14:59:50.974340 IP hercules.xxx.ru.domain > reticulum.xxx.ru.56461: > 53420* 0/1/0 (82) > 14:59:50.974570 IP reticulum.xxx.ru.28332 > hercules.xxx.ru.domain: > 53421+ AAAA? kalmar.xxx.ru. (31) > 14:59:50.974887 IP hercules.xxx.ru.domain > reticulum.xxx.ru.28332: > 53421* 0/1/0 (82) > 14:59:50.974919 IP reticulum.xxx.ru.21453 > hercules.xxx.ru.domain: > 53422+ AAAA? kalmar. (24) > 14:59:50.975290 IP hercules.xxx.ru.domain > reticulum.xxx.ru.21453: > 53422 ServFail 0/0/0 (24) > .... > At third time MS DNS returned SERVFAIL. Why sendmail asks AAAA for 3 times? > Something wrong with bind libraries? I think if there was no SERVFAIL > on AAAA it would ask for A record then. > > The opposite situation on 9.1-RELEASE. Here sendmail asks AAAA only > for 1 time. Then it asks A. > ... > 14:30:45.061950 IP 10.0.2.15.30979 > hercules.xxx.ru.domain: 62684+ > MX? xxx.ru. (24) > 14:30:45.063064 IP hercules.xxx.ru.domain > 10.0.2.15.30979: 62684* > 1/0/1 MX kalmar.xxx.ru. 10 (63) > 14:30:45.063624 IP 10.0.2.15.39212 > hercules.xxx.ru.domain: 62685+ > AAAA? kalmar.xxx.ru. (31) > 14:30:45.064460 IP hercules.xxx.ru.domain > 10.0.2.15.39212: 62685* 0/1/0 (82) > 14:30:45.064766 IP 10.0.2.15.44381 > hercules.xxx.ru.domain: 62686+ A? > kalmar.xxx.ru. (31) > 14:30:45.065530 IP hercules.xxx.ru.domain > 10.0.2.15.44381: 62686* > 1/0/0 A 192.168.31.190 (47) > ... > > I will continue investigation. > > > > 2013/8/4 Pavel Timofeev <tim...@gmail.com>: >> Same thing on RELENG/9.2 >> >> 2013/8/3 Pavel Timofeev <tim...@gmail.com>: >>> 2013/8/2 Ruben de Groot <mai...@bzerk.org>: >>>> On Wed, Jul 31, 2013 at 04:54:08PM +0400, Pavel Timofeev typed: >>>>> I've just installed new fresh 9.2-BETA2 amd64 on another machine. >>>>> Same behaviour - Sendmail asks DNS only for AAAA record of mx server. >>>>> We don't use IPv6 in our company. >>>>> >>>>> 2013/7/31 Pavel Timofeev <tim...@gmail.com>: >>>>> > I wanted to say that sendmail asks only AAAA (IPv6) record of mx >>>>> > server, but not A (IPv4). >>>>> > Any ideas? >>>>> > >>>>> > 2013/7/31 Pavel Timofeev <tim...@gmail.com>: >>>>> >> Looks like my sendmail uses only IPv6 to resolve mx server dns name to >>>>> >> ip address. >>>>> >> >>>>> >> 14:59:50.793338 IP reticulum.xxx.ru.19032 > hercules.xxx.ru.domain: >>>>> >> 53417+ AAAA? xxx.ru. (24) >>>>> >> [13/98] >>>>> >> 14:59:50.793662 IP hercules.xxx.ru.domain > reticulum.xxx.ru.19032: >>>>> >> 53417* 0/1/0 (75) >>>>> >> 14:59:50.793696 IP reticulum.xxx.ru.55299 > hercules.xxx.ru.domain: >>>>> >> 53418+ A? xxx.ru. (24) >>>> >>>> Here it is definately asking an A record. >>> >>> And? It's not A record of mx server. >>> >>>>> >> 14:59:50.794087 IP hercules.xxx.ru.domain > reticulum.xxx.ru.55299: >>>>> >> 53418* 7/0/0 A 192.168.2.11, A 192.168.2.12, A 192.168.41.4, A >>>>> >> 192.168.14.12, A 192.168.34.100, A 192.168.34.110, A 192.168.44.19 >>>>> >> (136) >>>> >>>> And here is the reply. The quetion is more why is it repeating the same >>>> query (below) over and over. >>> >>> Yes, reply about xxx.ru, not about mx server's IP which is kalmar.xxx.ru >>> >>>> >>>> Ruben >>>> >>>>> >> 14:59:50.973445 IP reticulum.xxx.ru.29244 > hercules.xxx.ru.domain: >>>>> >> 53419+ MX? xxx.ru. (24) >>>>> >> 14:59:50.973754 IP hercules.xxx.ru.domain > reticulum.xxx.ru.29244: >>>>> >> 53419* 1/0/1 MX kalmar.xxx.ru. 10 (63) >>>>> >> 14:59:50.974061 IP reticulum.xxx.ru.56461 > hercules.xxx.ru.domain: >>>>> >> 53420+ AAAA? kalmar.xxx.ru. (31) >>>>> >> 14:59:50.974340 IP hercules.xxx.ru.domain > reticulum.xxx.ru.56461: >>>>> >> 53420* 0/1/0 (82) >>>>> >> 14:59:50.974570 IP reticulum.xxx.ru.28332 > hercules.xxx.ru.domain: >>>>> >> 53421+ AAAA? kalmar.xxx.ru. (31) >>>>> >> 14:59:50.974887 IP hercules.xxx.ru.domain > reticulum.xxx.ru.28332: >>>>> >> 53421* 0/1/0 (82) >>>>> >> 14:59:50.974919 IP reticulum.xxx.ru.21453 > hercules.xxx.ru.domain: >>>>> >> 53422+ AAAA? kalmar. (24) >>>>> >> 14:59:50.975290 IP hercules.xxx.ru.domain > reticulum.xxx.ru.21453: >>>>> >> 53422 ServFail 0/0/0 (24) >>>>> >> 14:59:50.975314 IP reticulum.xxx.ru.63038 > hercules.xxx.ru.domain: >>>>> >> 53422+ AAAA? kalmar. (24) >>>>> >> 14:59:50.975674 IP hercules.xxx.ru.domain > reticulum.xxx.ru.63038: >>>>> >> 53422 ServFail 0/0/0 (24) >>>>> >> 14:59:50.975749 IP reticulum.xxx.ru.38393 > hercules.xxx.ru.domain: >>>>> >> 53423+ AAAA? kalmar.xxx.ru. (31) >>>>> >> 14:59:50.976105 IP hercules.xxx.ru.domain > reticulum.xxx.ru.38393: >>>>> >> 53423* 0/1/0 (82) >>>>> >> 14:59:50.976176 IP reticulum.xxx.ru.45558 > hercules.xxx.ru.domain: >>>>> >> 53424+ AAAA? kalmar. (24) >>>>> >> 14:59:50.976483 IP hercules.xxx.ru.domain > reticulum.xxx.ru.45558: >>>>> >> 53424 ServFail 0/0/0 (24) >>>>> >> 14:59:50.976512 IP reticulum.xxx.ru.45297 > hercules.xxx.ru.domain: >>>>> >> 53424+ AAAA? kalmar. (24) >>>>> >> 14:59:50.976864 IP hercules.xxx.ru.domain > reticulum.xxx.ru.45297: >>>>> >> 53424 ServFail 0/0/0 (24) >>>>> >> >>>>> >> How to force it to use IPv4? >>>>> _______________________________________________ >>>>> freebsd-stable@freebsd.org mailing list >>>>> http://lists.freebsd.org/mailman/listinfo/freebsd-stable >>>>> To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org" _______________________________________________ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"