Re: Domain KPMG.AN - Sendmail 8.13.5 - Resolved

Thanks to all that submited a response.

The issue was not with my servers receiveing the Emails (since it was
on my servers already), but with a downstream Sendmail system.

I was able to better diagnose the problems with the sendmail Queue by
running it manually:

sendmail -q -v | tee <someplace special>

Best Regards,

On Fri, 20 Apr 2007 09:55:57 -0400, "Albert E. Whale, CHS CISA CISSP"
<aewhale@xxxxxxxxxxxxxxxx> wrote:

Thanks for the reply Bill.

I've investigated the DNS Issue, and while I am not seeing this as a
problem for my Servers, or other Emails, the response does take some
time to resolve.

On Fri, 20 Apr 2007 13:40:09 GMT, Bill Cole <bill@xxxxxxxxxxxxx>
wrote:

stat=Deferred: 451 4.1.8 Domain of sender address kort.tania@xxxxxxx
does not resolve

That's an interesting sort of error message. It indicates a 'soft' DNS
failure, such as a timeout. It points at a DNS problem that might not be
really a sender-side issue and might not be true after a typical requeue
interval.

I have a few messages in place for more than several days.

If this is a DNS Issue on my side, then I am unaware of the cause,
because other Emails are flowing fine.




Given that DNS, I see no reason for Sendmail to to seeing the domain as
not resolving. A Sendmail system I manage has no special treatment for
that domain, but is not rejecting mail from it as having an unresolvable
domain.

Combine that valid and adequate MX resolution with the fact that your
Sendmail was giving a temporary error, and I think you have to look
closer to home for an answer. Is this happening for other domains? Is
your DNS server healthy?

So far I have no other issues, but I am perplexed on the cause of this
problem.

I am running sendmail-8.13.5 (or.8), Bind is version
bind-9.3.1-4.2.20060mdk, the latest for Mandriva 2006.

Is there s DNS Timeout that may be expiring in Sendmail/DNS.

I get an answer, although it is an extended period of time.




This is nothing KPMG can do better about their regiostration of that
domain, because the .an TLD simply isn't managed competently. They can
either have no .an domain or have kpmg.an without a whois server.
Presumably they have the .an domain because they have a netherlands
Antilles unit. No one with a .an domain has whois service, because the
people managing domains for the Netherlands Antilles are irresponsible
and incompetent.


Having worked in the Caribbean, I understand Very well. Your comment
is accurate, as I have had several other issues with other domains
from the Curacao ISP.

That would be the wrong approach. Adding an access map entry makes a lot
more sense and doesn't require a Sendmail restart or a sendmail.cf
rebuild, unless you are not already supporting the access map.

I have added an access map entry, several in fact. None seem to
permit the emails to pass. Here they are:

# Updates for WebAruba to receive from KPMG.an - 4/20/07
kpmg.an OK
From:kpmg.an OK
From:anthony.aisha@xxxxxxx OK
From:quant.lieshaira@xxxxxxx OK
From:yarzagaray.marc@xxxxxxx OK
From:kort.tania@xxxxxxx OK
ns01-server.curinfo.an. OK
kadushi.curinfo.an. OK

What did I miss here?


But I think there's something going on here that is not particular to
kpmg.an, but rather is in your DNS resolving capability.


DNS has not been an issue before. However, if there is a timeout
value for DNS, I would be willing to increase it. Is this in the
sendmail.mc file or in named.conf?

TIA
--
Albert E. Whale, CHS CISA CISSP
Sr. Security, Network, Risk Assessment and Systems Consultant
-------------------------------------------------------------------
ABS Computer Technology, Inc. - www.ABS-CompTech.com
SPAM Zapper - No-JunkMail.com - Spam-Zapper.com - SPAM Stops Here.

Posted Via Usenet.com Premium Usenet Newsgroup Services
----------------------------------------------------------
** SPEED ** RETENTION ** COMPLETION ** ANONYMITY **
----------------------------------------------------------
http://www.usenet.com
.

Relevant Pages

  • Re: urgent sendmail question
    ... Just recently started consolidating servers by virtual hosting apache, ... automated emails to users, and now they're getting bounced back because ... mail servers are rejecting these emails from my servers. ... thread is also running Sendmail on 127.0.0.1 only. ...
    (freebsd-questions)
  • Re: Redirected emails causing SMTP connection to drop
    ... I've had to revert to send through DNS rather than relaying through them. ... forward these messages through SHAW's smtp servers the connection gets ... dropped and these emails get stuck in the queue (non-redirected emails ... The redirected emails have a different FROM than your domain and are ...
    (microsoft.public.exchange.admin)
  • Re: How to route system email to an outbound server
    ... managed by sendmail. ... These servers send emails to other account ... In addition to anti-spam, you lose almost any powers against spam ...
    (comp.mail.sendmail)
  • Re: recipient validation with smtplib
    ... quite happily to send emails using the locahost's sendmail, ... I know some smtp setups do enforce recipient ... the address is valid at sending time to those servers. ...
    (comp.lang.python)
  • Re: using procmail with mailertable / virtualuser
    ... >> on to other servers / domains. ... >> My problem is trying to get spamassassin / procmail to check all emails. ... When i try and set up local users, ... But I am slowly trying to move everything over to our sendmail ...
    (comp.mail.sendmail)