--On Tuesday, May 27, 2003 9:03 PM -0400 Matt Kettler <[EMAIL PROTECTED]> wrote:

At 04:41 PM 5/27/2003 -0700, Alan Leghart wrote:
2. You don't have proper reverse DNS:
adsl-66-143-181-9.dsl.austtx.swbell.net

Where's the RFC stating that this is invalid? AFAIK it is perfectly acceptable for forward and reverse DNS to mismatch if there are multiple names associated with a given IP.. in fact, this is very common in web-server farms were 200+ domains all live on the same server.

There isn't. I never said that lack of forward/reverse DNS mismatch was invalid. Original poster stated that he had proper reverse DNS, but I found that to be incorrect. I was stating that in case he was unaware.



3. Your domain does not exist; DNS lookup of "cynistar.net" gives
"Non-existent host/domain"

I believe that's only because you were attempting to look up an A record, instead of an MX record, like you should.

try dig mx cynistar.net instead. I get 3 valid mail exchangers.

It should be noted that as per RFC standards, it is preferred that
mailing domains have MX records, and that using an A record is
acceptable, but not the "true proper way". All mail exchangers MUST
attempt MX resolution before trying A record resolution, and MUST only
try to use the A record if no MX is found.

Associating an A record with the root of a domain with no host name
specified is common practice, but is not a requirement of RFCs.

Yes, it does have an MX record, and the A record is perfectly acceptable. Having never used DNS lookups (verification/validation?) on an SMTP relay, I do not know if the lookup is for the A record or MX. If the rejecting relay was doing a lookup for the domain "cynistar.net", it would not find it. I'll have to learn more about this so I keep my own domains and MX records useable.


4. DNS exist for your subdomain "soyokaze.cynistar.net", but we cannot
see  how you are introducing yourself, because those lines from the log
are missing.

That's not a subdomain, its a single host... It has an A record, and no MX record. It is also the authoritative nameserver for the cynistar.net domain, thus it cannot be a subdomain.

Important semantics. However, my point was _not_ that it was a sub-domain. My point was that he offered only part of the log. He could've been saying "HELO microsoft.com" for all we know. I will work harder to clarify my wording and understand DNS terminology. Saying one wrong word can cause confusion or misunderstanding.


But, all are a moot points here, since the postmaster at that domain was blocking all of swbell.net. The original poster has a small block of IPs from SWBell (ADSL). To my understanding the postmaster removed that block.

Thanks for the reply correcting me. It's a never-ending learning process. I'm glad that there are so many admins willing to lend a hand to others.

Regards,
Alan Leghart



-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to