config error: why sendmail concatenates my own domain and domain found mail address?

restart.localhost.localdomain

unread,

May 7, 2013, 3:31:30 PM5/7/13

to

Hi,
I have problems trying send mail via sendmail (.forward) to cf...@wp.pl, my domain is dorotamama.eu. (not real name) and I get following:

May 6 17:55:47 myubuntu sm-mta[3856]: r46FrhNl003854: to=cf...@wp.pl,
delay=00:02:03, xdelay=00:00:01, mailer=esmtp, pri=91761,
relay=wp.pl.dorotamama.eu. [89.75.41.50], dsn=5.3.5, stat=Local
configuration error May 6 17:55:47 myubuntu sm-mta[3856]:
r46FrhNl003854: r46FtlNl003856: DSN: Local configuration error May 6
17:55:48 myubuntu sm-mta[3856]: r46FtlNl003856: to=<cf...@gmail.com,
delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=60000,
relay=gmail-smtp-in.l.google.com. [173.194.70.27], dsn=2.0.0,
stat=Sent (OK 1367855748 i8si29208219eem.229 - gsmtp) May 6 17:55:48
myubuntu sm-mta[3856]: r46FtlNl003856: to=me, delay=00:00:01,
xdelay=00:00:00, mailer=local, pri=60000, dsn=2.0.0, stat=Sent

with gmail there is No PROBLEM, onet.pl No Problem, wp.pl PROBLEM. additionally here from mail.err:

May 6 17:55:47 myubuntu sm-mta[3856]: r46FrhNl003854: SYSERR(me):
wp.pl.dorotamama.eu. config error: mail loops back to me (MX
problem?)

so I tried `cf...@wp.pl` (it is correct address) but it concatenates to be: `cf...@wp.pl.dorotamama.eu.` ?????????

**why?** other domain are working OK. (at least few that I checked till this moment)

**so, does it means wp.pl wasn't resolved?** why it concatenates domains, then tries to send mail to cf...@wp.pl.dorotamama.eu. instead of cf...@wp.pl
----------

additionally:

dig @192.168.1.1 fghj.com

; << DiG 9.9.2-P2 << @192.168.1.1 fghj.com
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

and +tcp:

dig @192.168.1.1 fghj.com +tcp
;; Connection to 192.168.1.1#53(192.168.1.1) for fghj.com failed: connection refused.

I have this added in sendmail.mc:
#my own added features
dnl # Masquerading options
FEATURE(`always_add_domain')dnl
MASQUERADE_AS(`dorotamama.eu')dnl
FEATURE(`allmasquerade')dnl
FEATURE(`masquerade_entire_domain')dnl
FEATURE(`masquerade_envelope')dnl
FEATURE(`accept_unresolvable_domains')
define(`confBIND_OPTS',`WorkAroundBrokenAAAA')dnl

and result of DEBUG is:

me@ubuntu:/etc/mail# /etc/init.d/sendmail reload
* Reloading Mail Transport Agent (MTA) sendmail [ OK ]
me@ubuntu:/etc/mail# echo '3,0 cf...@wp.pl' | /usr/sbin/sendmail -bt -d8.20
dns_getcanonname(ubuntu, trymx=1)
dns_getcanonname: trying ubuntu.chello.pl (AAAA)
NO: errno=0, h_errno=1
dns_getcanonname: trying ubuntu.dorotamama.eu (AAAA)
NO: errno=0, h_errno=4
dns_getcanonname: trying ubuntu.dorotamama.eu (A)
YES
dns_getcanonname: ubuntu.dorotamama.eu
_res.options = 812c3, HasWildcardMX = 0
ADDRESS TEST MODE (ruleset 3 NOT automatically invoked)
Enter <ruleset <address
canonify input: cf16r @ wp . pl
Canonify2 input: cf16r < @ wp . pl
dns_getcanonname(wp.pl, trymx=1)
dns_getcanonname: trying wp.pl. (AAAA)
NO: errno=110, h_errno=2
dns_getcanonname: trying wp.pl. (A)
NO: errno=110, h_errno=2
dns_getcanonname: trying wp.pl. (MX)
NO: errno=110, h_errno=2
dns_getcanonname: trying wp.pl.chello.pl (AAAA)
NO: errno=0, h_errno=1
dns_getcanonname: trying wp.pl.dorotamama.eu (AAAA)
NO: errno=0, h_errno=4
dns_getcanonname: trying wp.pl.dorotamama.eu (A)
YES
dns_getcanonname: wp.pl.dorotamama.eu
Canonify2 returns: cf16r < @ wp . pl . dorotamama . eu .
canonify returns: cf16r < @ wp . pl . dorotamama . eu .
parse input: cf16r < @ wp . pl . dorotamama . eu .
Parse0 input: cf16r < @ wp . pl . dorotamama . eu .
Parse0 returns: cf16r < @ wp . pl . dorotamama . eu .
Parse1 input: cf16r < @ wp . pl . dorotamama . eu .
MailerToTriple input: < cf16r < @ wp . pl . dorotamama . eu .
MailerToTriple returns: cf16r < @ wp . pl . dorotamama . eu .
Parse1 returns: $# esmtp $@ wp . pl . dorotamama . eu . $: cf16r < @ wp . pl . dorotamama . eu .
parse returns: $# esmtp $@ wp . pl . dorotamama . eu . $: cf16r < @ wp . pl . dorotamama . eu .

Carl Byington

unread,

May 8, 2013, 11:33:59 AM5/8/13

to

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 07 May 2013 12:31:30 -0700, restart.localhost.localdomain wrote:

> dig @192.168.1.1 fghj.com

> ; << DiG 9.9.2-P2 << @192.168.1.1 fghj.com ; (1 server found)
> ;; global options: +cmd ;; connection timed out; no servers could
> be
> reached

If your mail server is using 192.168.1.1 as a recursive resolver, then
that error needs to be fixed.

If you cannot resolve fghj.com, but have a 'search' name in
/etc/resolv.conf, then the resolver will try fghj.com.dorotagregor.eu.,
and if that resolves locally you end up trying to send mail to
localhost.

;; ANSWER SECTION:
*.dorotagregor.eu. 3340 IN A 89.75.41.50

you might want to remove that wildcard record unless you need it for
something else. But you need to get external dns resolution working
properly first.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEARECAAYFAlGKcEIACgkQL6j7milTFsFSFgCfVUIpv3NRtwcVOilymh5hKdJc
YxMAnRXMMAWbIckGblSQ5NARgxF0QX1I
=SJqZ
-----END PGP SIGNATURE-----

restart.localhost.localdomain

unread,

May 9, 2013, 12:14:12 PM5/9/13

to

thank you very much,
so which DNS should sendmail be looking for?
192.168.1.1 is my router NetGear which has ISP DNS servers set.
What do I have to change?

regards,
cf16

restart.localhost.localdomain

unread,

May 9, 2013, 1:41:22 PM5/9/13

to

additionally I have to menrioned I have some problems with DNS, only from Ubuntu 12.10, Wondows on same network works OK. I have them pointed to 192.168.1.1 as this is my NetGear router, it has ISP's DNS set. On Ubuntu I have also dnsmasq process running and when I dig it directly from terminal (127.0.1.1) I have response, but dig @192.168.1.1 is possible only with +tcp flag set.

Carl Byington

unread,

May 9, 2013, 11:37:48 PM5/9/13

to

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Since you have Ubuntu, run a real dns server like Bind on it, and point
all your machines to that one.

If the Ubuntu machine is not running 24/7, see if you can

dig @8.8.8.8 fghj.com

and get proper answers. If so, point all your machines to Google's open
DNS servers.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEARECAAYFAlGMa3oACgkQL6j7milTFsEIggCfWUlqh9ZyuhA+H1CAakDhG3r6
QhkAn3phBnLuPpxZytzxy/HM4IkWEMau
=2oAZ
-----END PGP SIGNATURE-----

Message has been deleted

restart.localhost.localdomain

unread,

May 10, 2013, 8:15:12 AM5/10/13

to

thank you very much, this is some new light.
well no, I will summarize here what I can do and what can't:

dig @8.8.8.8 fghj.com > FAIL (connection time out, no servers could be reached)
dig @8.8.8.8 fghj.com +tcp > OK, response from 8.8.8.8
dig fghj.com > OK, response from 127.0.1.1
dig fghj.com +tcp > OK, response from 127.0.1.1
dig @127.0.1.1 fghj.com > OK, response from 127.0.1.1
dig @127.0.1.1 fghj.com +tcp > OK, response from 127.0.1.1
dig @192.168.1.1 fghj.com > FAIL (connection time out, no servers could be reached)
dig @192.168.1.1 fghj.com +tcp > FAIL (Connection to 192.168.1.1#53(192.168.1.1) for fghj.com failed: connection refused.)

So,
do you think installing bind and pointing 127.0.1.1 as my DNS could solve the problem? (maybe you have idea what is the problem? I should be able to dig 192.168.1.1 directly, and 8.8.8.8)

Carl Byington

unread,

May 10, 2013, 11:33:01 AM5/10/13

to

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 10 May 2013 05:13:16 -0700, restart.localhost.localdomain wrote:

> dig @8.8.8.8 fghj.com > FAIL (connection time out, no servers
> could be reached)

That does not look good.

Pick a selection of domain names, ibm.com, att.com, etc.

Find their authoritative name servers:

dig att.com ns
ns1.attdns.com. 148360 IN A 144.160.112.22

Do a non-recursive query to them:

dig att.com @144.160.112.22 +norecur
;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 5

Note the aa authoritative response flag. If you can *reliably* get the
proper authoritative answers from those servers, you might be able to
run DNS locally.

My guess is that your Netgear is blocking/modifying dns answers, and it
does not understand modern dns.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEARECAAYFAlGNExYACgkQL6j7milTFsFLuQCcD1Szwb8RDkNpBPsKXfoyK9jC
xloAn0M3a6doxAq02zyi3DHdnrDX/osK
=I18P
-----END PGP SIGNATURE-----

cf16r...@gmail.com

unread,

May 10, 2013, 3:28:27 PM5/10/13

to

thank you. So it seems like I can only query DNS directly with +tcp flag set.

# dig @144.160.112.22 att.com
; <<>> DiG 9.9.2-P2 <<>> @144.160.112.22 att.com

; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

# dig @144.160.112.22 att.com +tcp
; <<>> DiG 9.9.2-P2 <<>> @144.160.112.22 att.com +tcp

; (1 server found)
;; global options: +cmd

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24085
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 5
;; WARNING: recursion requested but not available

however I can do all these queries on Windows machine, on same LAN, and can query directly even 192.168.1.1
So does it seems like NetGear is blocking Ubuntu? Or maybe Ubuntu is misconfigured, maybe firewall issue?

Joe Zeff

unread,

May 11, 2013, 3:13:52 AM5/11/13

to

On Fri, 10 May 2013 12:28:27 -0700, cf16rocket wrote:

> however I can do all these queries on Windows machine, on same LAN, and
> can query directly even 192.168.1.1 So does it seems like NetGear is
> blocking Ubuntu? Or maybe Ubuntu is misconfigured, maybe firewall issue?

You might want to check this out on the Ubuntu support forum. If there's
a configuration issue, you're probably not the only person affected by it.

--
Joe Zeff -- The Guy With The Sideburns:
http://www.zeff.us http://www.lasfs.info
Talk is cheap because the supply
always exceeds the demand.

restart.localhost.localdomain

unread,

May 12, 2013, 10:50:46 AM5/12/13

to

OK, thank you very much for your replies

regards,
cf16