On Wed, Feb 12, 2014 at 10:04:15PM +0200, Dave Johnson wrote:
> Any ideas on how I can sort sort below?
>
> Feb 12 10:24:48 mail postfix/smtpd[17207]: NOQUEUE: reject: RCPT from
> unknown[196.14.170.132]: 450 4.7.1 <SALES@xxxx>: Recipient address
> rejected: SPF-Result=medscheme.co.za: 'SERVFAIL' error on DNS 'MX'
> lookup of 'cluster1a.sa.messagelabs.com';
> from=<[email protected]> to=<SALES@xxxxxx> proto=ESMTP
> helo=<mail1.bemta18.messagelabs.com>
>
> It does not appear that cluster1a.sa.messagelabs.com does not have an IP
> when I do a dig.
The IP address is irrelevant, it fails when you do an MX lookup:
$ dig -t mx cluster1a.sa.messagelabs.com
; <<>> DiG 9.8.0rc1 <<>> -t mx cluster1a.sa.messagelabs.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 30517
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;cluster1a.sa.messagelabs.com. IN MX
;; Query time: 444 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Feb 12 20:40:15 2014
;; MSG SIZE rcvd: 46
The SPF records in question are broken (use an MX name that is not
supported by messagelabs). Likely the DNS for this name is handled
by a DNS load-balancing appliance that is poorly prepared to handle
unexpected RR types (i.e. is a broken hack that works only in the
expected case).
--
Viktor.
