Re: SMTP failure [solved]

2010-03-19 Thread Glenn English
On Mar 19, 2010, at 9:44 AM, Victor Duchovni wrote: > Your DNS server is a bit odd: The problem turned out to be the PIX. By default, it blocks T_ANY queries on the outside port. But not the others. "ip audit signature 6053 disable" turns that off. Why Cisco and qmail would do things that gua

Re: SMTP failure

2010-03-19 Thread Victor Duchovni
On Fri, Mar 19, 2010 at 01:26:03PM -0700, brian moore wrote: > On Fri, 19 Mar 2010 14:27:29 -0400 (EDT) > Wietse Venema wrote: > > > Just to clarify, this DNS server is likely to create the same > > problem with other sites that run a version of the qmail MTA. > > That sounds like a feature to

Re: SMTP failure

2010-03-19 Thread Glenn English
On Mar 19, 2010, at 2:26 PM, brian moore wrote: > On Fri, 19 Mar 2010 14:27:29 -0400 (EDT) > Wietse Venema wrote: > >> Just to clarify, this DNS server is likely to create the same >> problem with other sites that run a version of the qmail MTA. > > That sounds like a feature to me. Soon as I

Re: SMTP failure

2010-03-19 Thread brian moore
On Fri, 19 Mar 2010 14:27:29 -0400 (EDT) Wietse Venema wrote: > Just to clarify, this DNS server is likely to create the same > problem with other sites that run a version of the qmail MTA. That sounds like a feature to me.

Re: SMTP failure

2010-03-19 Thread Wietse Venema
Victor Duchovni: > On Fri, Mar 19, 2010 at 12:32:13PM -0400, Wietse Venema wrote: > > > > > And why would Yahoo be doing a CNAME lookup? > > > > > > Their MTA does that for all destinations, among other lookups. > > > > > > Your DNS server is a bit odd: > > > > > > $ dig +trace -t any slsware.c

Re: SMTP failure

2010-03-19 Thread Victor Duchovni
On Fri, Mar 19, 2010 at 12:32:13PM -0400, Wietse Venema wrote: > > > And why would Yahoo be doing a CNAME lookup? > > > > Their MTA does that for all destinations, among other lookups. > > > > Your DNS server is a bit odd: > > > > $ dig +trace -t any slsware.com > > > > ;; connection timed

Re: SMTP failure

2010-03-19 Thread Glenn English
On Mar 19, 2010, at 10:32 AM, Wietse Venema wrote: > Yahoo runs a modified qmail, and indeed: > > int dns_cname(sa) > stralloc *sa; > { > int r; > int loop; > for (loop = 0;loop < 10;++loop) > { > if (!sa->len) return loop; > if (sa->s[sa->len - 1] == ']') return loop; > if (sa->s[sa->len

Re: SMTP failure

2010-03-19 Thread Glenn English
On Mar 19, 2010, at 9:44 AM, Victor Duchovni wrote: > Your DNS server is a bit odd: > > $ dig +trace -t any slsware.com > >... >slsware.com. 172800 IN NS ns1.richeyrentals.com. >slsware.com. 172800 IN NS ns1.slsware.com. >slsware

Re: SMTP failure

2010-03-19 Thread Wietse Venema
Victor Duchovni: > On Fri, Mar 19, 2010 at 06:08:12AM -0600, Glenn English wrote: > > > It looks to me like the problem has something to do with DNS, not > > SMTP, right? > > Yes. > > > And why would Yahoo be doing a CNAME lookup? > > Their MTA does that for all destinations, among other lookup

Re: SMTP failure

2010-03-19 Thread Victor Duchovni
On Fri, Mar 19, 2010 at 06:08:12AM -0600, Glenn English wrote: > It looks to me like the problem has something to do with DNS, not > SMTP, right? Yes. > And why would Yahoo be doing a CNAME lookup? Their MTA does that for all destinations, among other lookups. > (I checked > from a remote site