check_mail problem

Andre Addicks

unread,

Jun 15, 1998, 3:00:00 AM6/15/98

to

Hello,

I recently installed sendmail 8.9.0. When I'm looking in de logfiles I often
see the message "...Sender domain must exists".
In many cases when I'm trying to resolve the domain, it exists.
Does anybody know why sendmail is rejecting the domain ? (maby a DNS timeout ?)

grtx
Andre Addicks

Ralf Hildebrandt

unread,

Jun 15, 1998, 3:00:00 AM6/15/98

to

Temporary DNS failures are supported (in case of timeout et al.); the error code
is different then (451 instead of 550 - on my system)

--
Ralf Hildebrandt, R.Hild...@tu-bs.de
http://www.stahl.bau.tu-bs.de/~hildeb
NT vs UNIX, why UNIX: It doesn't matter how big or hot your
thing is at the moment if it doesn't stay up or perform.

Wolfgang Rupprecht

unread,

Jun 15, 1998, 3:00:00 AM6/15/98

to

A.Ad...@KPN-Telecom.NL (Andre Addicks) writes:
> I recently installed sendmail 8.9.0. When I'm looking in de logfiles I often
> see the message "...Sender domain must exists".
> In many cases when I'm trying to resolve the domain, it exists.
> Does anybody know why sendmail is rejecting the domain ? (maby a DNS timeout ?)

How are you testing existance?

The only thing that matters is an A-record or MX-record for the name
in question. (eg. "dig foo.com MX" or "dig foo.com"). Do you have
an example header???

-wolfgang
--
Wolfgang Rupprecht <wolfga...@spam.free.or.die.wsrcc.com>
http://www.wsrcc.com/wolfgang/

Andre Addicks

unread,

Jun 15, 1998, 3:00:00 AM6/15/98

to

In article <x767i2a...@dailyplanet.wsrcc.com>,
wolf...@dailyplanet.wsrcc.com says...

>
>
>A.Ad...@KPN-Telecom.NL (Andre Addicks) writes:
>> I recently installed sendmail 8.9.0. When I'm looking in de logfiles I often
>> see the message "...Sender domain must exists".
>> In many cases when I'm trying to resolve the domain, it exists.
>> Does anybody know why sendmail is rejecting the domain ? (maby a DNS timeout
?)
>
>How are you testing existance?
>
>The only thing that matters is an A-record or MX-record for the name
>in question. (eg. "dig foo.com MX" or "dig foo.com"). Do you have
>an example header???
>

from maillog:
Jun 15 19:17:43 mx sendmail[14774]: TAA14774: ruleset=check_mail,
arg1=<xxx...@globalxs.nl>, relay=smtp.mail.big-orange.net [143.179.236.31] (may
be forged), reject=451 <xx...@globalxs.nl>... Sender domain must resolve

$ nslookup
Default Server: ns.kpn.com
Address: 192.87.176.34

> set q=mx
> globalxs.nl.
Server: ns.kpn.com
Address: 192.87.176.34

Non-authoritative answer:
globalxs.nl preference = 20, mail exchanger = smtp.globalxs.nl

Authoritative answers can be found from:
smtp.globalxs.nl internet address = 143.179.236.30

grtx
Andre Addicks

Wolfgang Rupprecht

unread,

Jun 15, 1998, 3:00:00 AM6/15/98

to

A.Ad...@KPN-Telecom.NL (Andre Addicks) writes:
> from maillog:
> Jun 15 19:17:43 mx sendmail[14774]: TAA14774: ruleset=check_mail,
> arg1=<xxx...@globalxs.nl>, relay=smtp.mail.big-orange.net [143.179.236.31] (may
> be forged), reject=451 <xx...@globalxs.nl>... Sender domain must resolve

...

> Authoritative answers can be found from:
> smtp.globalxs.nl internet address = 143.179.236.30

Well, actually authoritative answers can't be found. There is a DNS
problem with globalxs.nl .

$ check_soa globalxs.nl
ravian.globalxs.nl is not authoritative for globalxs.nl
ns.svianed.nl is not authoritative for globalxs.nl

It looks like nobody is authoritative for that domain.