i have a cpanel dedicated server.
I have a problem with a client whose mails are getting rejected because it fails rdns check, can any one tell me how to add this domain in Exim's whitelist so that the mail is sent/recieved even if rdns or any other checks fail.
I have an Ubuntu 8.04 server with 2 nerwork cards eth0 and eth1. I am using only eth0. The server is behind a 2-wire router. I have setup the router with the public IP addresses.
On the server I have setup an IP alias on eth0 as eth0:0. I have 3 domains which i will call foo1.com foo2.com and foo3.com. The server pc is assigned to a static public address on the router as 217.xx.xx.100 this same ip also used to setup the virtual host for foo1.com
Quote:
<VirtualHost 217.xx.xx.100:80>
ServerName foo1.com
ServerAlias www.foo1.com
ServerAdmin me@foo1.com
DocumentRoot /var/www/foo1/
</VirtualHost>
I have also setup and applied an ssl certificate to 217.xx.xx.100:443.
Now eth0:0 is assigned to 217.xx.xx.101 and used as below
Quote:
<VirtualHost 217.xx.xx.101:80>
ServerName foo2.com
ServerAlias www.foo2.com
ServerAdmin me@foo2.com
DocumentRoot /var/www/foo2/
</VirtualHost>
<VirtualHost 217.xx.xx.101:80>
ServerName foo3.com
ServerAlias www.foo3.com
ServerAdmin me@foo3.com
DocumentRoot /var/www/foo3/
</VirtualHost>
When I am on the router I can access all the domains via the browser and can also get FTP, and ssh connection to the server. However when I leave the range of the server and connect to the net via another router, I loose ftp and ssh access to the server as well as not able to browse www.foo1.com. However www.foo2.com and www.foo3.com I can browse.
I have a client that is unable to connect to his FTP and control panel, and he does not know which web hosting company hosts his web site since he never gets billed for it. I tried looking up the WHOIS to type in the NS1/NS2 web address to see which web hosting company the site points to, but had no luck.
This is the domain:
[url]
Title: Reversable Domain/DNS Problems in E-mail Genuinity Check
Tags: DNS, firewall, internet protocol, routing, email
This is a real world scenario that I need help figuring out. I have thought of everything I could, but now I must seek the privileging knowledge and help from WebhostingTalk Forumers.
This is a real world scenario -- how so? Well know that Microsoft's TechNet newsletter probably goes out to at least a million people. How many of those e-mails go out to yahoo.com? Gmail.com? Hotmail.com? AOL.com? Etcetera. This is the same scenario that my company is in, except with a little bit of a kicker that has caused me to seek help.
In this scenario we have at least 10,000 clients with an e-mail at company-b.com. We need to send all of our clients an important e-mail with confidential information. We have one physical server and it is located in a ventilated and cooled datacenter'ish room. We also have two internet service providers for connection redundancy. On our firewall, we have it set so that if our primary ISP goes down it will instantly switch over to our secondary ISP until our primary ISP is back online. The IP address our primary ISP gives us on the internet is 48.48.48.48, and our secondary ISP gives us 68.68.68.68.
[url]
Company-b.com, for the protection of their customers, will resolve the reverse DNS from the address an e-mail would come from to make sure that the IP addresses match. In other words, when you send an e-mail from company-a.com it will come out from mail.company-a.com (with an IP address of 48.48.48.48 for example). When the mail gets to company-b.com, that server will resolve the reverse DNS (or try to anyway) of mail.company-a.com to make sure that it is indeed coming from 48.48.48.48. If it resolves it to a different IP address, it will not deliver the e-mails you sent from company-a.com to its customers on company-b.com.
In general, this verification process tries to verify the genuinity and validity from where e-mail was sent from to its own customers. If mail.company-a.com resolves to a different IP address than what it came from, then it is possible to say that we (or company-a.com) are using a relay (which is like a proxy), or that our domain name is simply not reversable.
[url]
To summarize: mail is sent out through 48.48.48.48 (but then goes offline coincidentally) and is sent to 96.96.96.96. Because 48.48.48.48 is down, mail.server-a.com will resolve to 68.68.68.68 instead of the original IP address we sent out our mail from, and because the IP addresses differ, the server 96.96.96.96 rejects the mail we sent, thinking that we either (1) have a DNS problem, (2) are spammers/spam-bombers, or (3) using a relay or proxy, which many companies are against, do not support, and have counter-measures against relay/proxy-users.
[url]
Any and all help will be appreciated. We are looking for a workable, proper/appropriate solution so that we can successfully pass the reverse domain test. We can add/modify DNS/MX records to company-a.com. We must have the two ISPs we have for redundancy; our company and clients heavily depend on our internet connection's uptime. Also, a lot of people in the company depend on IMAP/POP3/SMTP with their cell phones, iPhones, PDAs, laptops, timecards, etcetera. We may be able to schedule something maintenaince for a weekend if necessary.
when I try to run yum update it throws an error
Quote:
Gathering header information file(s) from server(s)
Server: CentOS-3 - Addons
retrygrab() failed for:
http://mirror.centos.org/centos/3/ad...rs/header.info
Executing failover method
failover: out of servers to try
Error getting file http://mirror.centos.org/centos/3/ad...rs/header.info
[Errno 4] IOError: <urlopen error >
when I run /etc/easyapache it too fails
Quote:
root@server1 [~]# /scripts/easyapache
Testing connection speed...(this could take a while)............Done
Ping:32.076 Testing connection speed to 69.90.250.35 using pureperl...(120500.00 bytes/s)...Done
Ping:32.179 Testing connection speed to 69.90.250.34 using pureperl...(120500.00 bytes/s)...Done
Ping:49.545 Testing connection speed to 69.72.164.152 using pureperl...(76681.82 bytes/s)...Done
Ping:49.605 Testing connection speed to 69.72.164.155 using pureperl...(70291.67 bytes/s)...Done
Ping:51.603 Testing connection speed to 198.66.92.147 using pureperl...(76681.82 bytes/s)...Done
5 usable mirrors located
Fetching http://layer1.cpanel.net/buildapache.sea (0)....@69.90.250.35......connected......receiving...1%...2%...3%...4%...5%...6%...7%...8%...9%...10%...11%...13%...14%...15%...16%...17%...18%...19%. ..20%...21%...22%...23%...25%...26%...27%...28%...29%...30%...31%...32%...33%...34%...35%...36%...38%...39%...40%...41%...42%...43%...44%...45%...46%. ..47%...48%...50%...51%...52%...53%...54%...55%...56%...57%...58%...59%...60%...62%...63%...64%...65%...66%...67%...68%...69%...70%...71%...72%...73%. ..75%...76%...77%...78%...79%...80%...81%...82%...83%...84%...85%...87%...88%...89%...90%...91%...92%...93%...94%...95%...96%...97%...98%...100%...... Done
Creating directory buildapache
Verifying archive integrity... All good.
Uncompressing buildapache........................................................................................................................................... ...................................................................................................................................................... ...................................................................................................................................................... .................................................................
Checking Update System........Your operating system's rpm update method (yum) was not able to locate the glibc package. This is an indication of an improper setup. You must correct this error before you can proceed.
Please correct the conflicts and try again!
initfpsuexec: using apache 1.x support
Waiting for httpd to restart..............finished.
root 7208 0.8 0.5 46200 5772 ? S 02:06 0:00 /usr/local/apache/bin/httpd -DSSL
httpd started ok
What are the most common UAs? What I want to do is whitelist all the legit UAs and block the rest.
View 0 Replies View RelatedIt seems that SA is not so good at learning because I have seen email from people to whom I have emailed tens of times considered as SPAM by SA.
Is it possible to make SA to whitelist every email address I send an email to?
How can we whitelist IP with DNSBL?
We use "xbl.spamhaus.org;sbl.spamhaus.org" DNSBL but a partner server is blacklisted with spamhaus. The problem must be resolved but can we whitelist IP in the DNSBL field?
We want to send a newsletter email for all the company employees, we are using doppler because of a location and language thing (based in Argentina where an important part of the company operation is located), so when we are ready to send the newsletter it says that all recipients are bouncing, asked to droppler support and they say the problem comes from plesk, because it needs to have their ip addresses into the whitelist.
So, went to plesk, selected the domain where the bounced email addresses are (dlbgroup.com) but from there I don't know where to go, I don't want to do something wrong or delete something accidentally, so where to upload this CSV file to the right whitelist place.
I would find an easy way to add a list of IP in Fail2ban whitelist in linux console.What is the file to modify ? Is there a command line or a process ?
View 4 Replies View RelatedI think this is related to rDNS.
[url]
If you take a look at URL above, the lookup for the IP leads to nsmx.net where as the lookup for nsmx.net leads to another IP.
The IP should resolve to host6.nsmx.net, how am i supposed to fix that?
i cant sent emails to Hotmail from my domains so make a Spam Database Lookup from dnsstuff for my main ip 72.249.101.164
here are the results
"72.249.101.164 has no reverse DNS entry; some mail servers may not accept your mail."
and i also not listed to any database.
Can someone check the and tell me if
- RDNS are ok
- and if this spam databases include Hotmai spam databases?
My hosting provider tell me that RDNS are ok and that Hotmail black listed the server IP
I have Comcast Business PRO Internet service for work purposes. I've got two web/dns servers and two mail servers, each having their own IP. These are all fine.
There had been a couple situations in the past where I would receive a "Relaying Denied" message from my PINE when sending mail out. At examination of the maillog, It's essentially telling me that these messages are being generated because of the lack of reverse DNS.
xxx.xxx.xxx.xxx-Oregon.hfc.comcastbusiness.net., instead of my.domain.com.
I did a couple searches on Google, and read somewhere that Comcast is unwilling to create rDNS entries, but they've not specified, so far, whether they subscribe to PRO or residential service.
Before I spend 90 minutes on the phone with Comcast, I thought I'd see if anybody here has been successful with rDNS and Comcast PRO before. It seems to me that by denying this, it defeats the purpose of the "dedicated" service that I signed up with ...
I was told by the data center NOC that I can manually handle rdns/ptr requests myself, as long I do the below.
Set up your name servers to respond to the reverse dns inquiries that we would forward to you.
Can anyone shed light on this? What if someone requests rdns on 32 IP's in one shot for example, how would you go about doing this?
I set rdns by contacting the dedicated server host. I am switching to a colo environment soon, do I still contact the ISP who issues the IPs for the rdns requests or can I set them myself somehow on my servers?
If I eventually get my own IPs through ARIN, how do I set rdns? Do I just get some script to set the PTR records on my own servers?
Im configured domainkey, spf and rdns exactly on my server, but my outgoing email to yahoo is spam too.
My sent email to yahoo (Header): ....
I have two ISP lines coming to my router which is connected to a Exchange mail server. Both ISP has given me dedicated IP addresses such as:
ISP1 = 217.105.25.94
ISP2 = 62.15.125.44
Now my ISP1 IP address has a reserve DNS set and when the mails are send via this line no problem, but my ISP2 IP does not have a reverse DNS so some mails are bouncing back due to the face the receiving mail server is checking the IP against the DNS.
How can I solve this issue, or normally who can set this rDNS?
Just got set up with a new VPS and while looking to see if my IPs were blacklisted, I came across a RDNS warning. I've been on some form of shared hosting since I've been on the Internet, so much of the VPS stuff is new to me (though it is managed). Everything I've read says that RDNS is important for sending mail so the receiving end can verify where mail is coming from, but I thought I would ask here regarding my specific issue.
I've got four IPs on my account. The first ip, x.x.x.67, is the host IP(ie host.example.com). Most of my domains are using that IP at the moment since I just got set up, but I do have another domain on the last IP in my account, x.x.x.70. When I first did a RDNS check on my main IP I got a domain that I've never seen before, and all other IPs on my account don't resolve at all.
I sent a ticket off to the host, and they set the RDNS record correctly for the main IP on my account, but the other three still fail to resolve. When I asked the host about it in a ticket, the response that I got was
Quote:
Normally, we set RDNS for the main IP address to hostname of the server.
The RDNS for your server has been setup properly. Please get back to us if you need any further assistance.
So basically I'm clueless. Does it matter that the other three IPs I have available don't resolve at all? The domain on the x.x.x.70 IP, which doesn't resolve, is an e-commerce site that depends almost exclusively on e-mail for its business. Doesn't the lack of RDNS resolution mean that I'll be out of luck sending mail to AOL, Yahoo, Hotmail, etc etc on that account? Even though I don't have sites on the middle two IP addresses yet, I fully plan to put sites there within the next couple of months... could they have the same problem?
It's frustrating since I obviously have no control over RDNS records, and the host's staff is being a little obtuse about it.
my host won't do it for me, they said I have to do it myself... Is there anyway you guys can show me how to reverse dns in centos?
View 6 Replies View RelatedI was wondering if anyone could assist me on how to setup RDNS?
View 4 Replies View Relatedactive reverse DNS in web host manager as i keep getting emails bouncing back etc.
View 4 Replies View RelatedThis is the output at RIPE NCC's web update interface:
***Info: Authorisation for parent [inetnum] 193.53.87.0 - 193.53.89.255
using mnt-domains: authenticated by: ITECH-MNT
***RDNS: (related to ns1.infinitetech.in, ns2.infinitetech.in) ERROR (20 points):
Could not get an SOA record from ns1.infinitetech.in, ns2.infinitetech.in (193.53.87.2).
***RDNS: (related to set) ERROR (20 points):
The IP address 193.53.87.2 is identical for the nameserver(s) ns1.infinitetech.in, ns2.infinitetech.in found in the submitted domain object.
***Error: There are 20 or more problem points. Delegation was not successful.
This is what I am trying to submit:
domain: 87.53.193.in-addr.arpa
descr: Reverse Delegation for Infinite Technologies
admin-c: ITGR-RIPE
tech-c: ITGR-RIPE
zone-c: ITGR-RIPE
mnt-by: ITECH-MNT
nserver: ns1.infinitetech.in
nserver: ns2.infinitetech.in
changed: noc@infinitetech.in 20080101
source: RIPE
password: secret_here
Following the guide available at:
[url]
Now, how do I create the SOA record on a cPanel based server? I created a new zone, rdns.infinitetech.in and now what? I don't see SOA record option at all in the drop down list!
Unless I misunderstood what an SOA record is, I have no idea how to implement rDNS. Anyone?
If any RIPE NCC member/participant is available to answer this question directly it would be awesome! Others, give it your shot - I do understand that most of you are ARIN members/participants.
It seems our rDNS database is not responding to the PTR record. its on a cpanel server
View 9 Replies View RelatedThis is an issue I've been having for a few months now and haven't been able to resolve yet with my data center, AOL support and the company who manages the server for me. My main reason for posting this is for a fresh set of eyes and to see if anyone else has had a similar problem in the past (and how they fixed it)
The issue is this:
I set up a dedicated server to host my web design clients a few months back and no one has been able to send to or receive mail from AOL addresses. I've gone through everything at the postmaster.aol.com site and have ensured that reverse DNS records are in place for all IPs associated with the server, as rDNS is a mandatory requirement for AOL.
Once my support requested was finally elevated to a real AOL support tech, they confirmed that my IP was not being blocked by their servers and are still under the impression that the problem must be on my end somewhere. Because this problem only occurs with AOL (we can send/receive with all other big providers - yahoo, hotmail, gmail, hush, etc), my server management team are fairly certain it must be an issue on AOL's side.
When sending mail from an AOL address, it bounces back with an error like so (real emails replaced with example addresses):
451 <email@exampledomain.com>... exampledomain.com: Name server timeout
Message could not be delivered for 2 hours
Message will be deleted from queue
When sending mail from my server, it bounces back with an error like so:
A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:
exampleaddress@aol.com
retry timeout exceeded
When attempting to manually deliver a message to AOL from the Mail Queue in WHM, I get an error like so:
Message xxx-example-number is not frozen
delivering xxx-example-number
Connecting to emr-d01.mx.aol.com [205.188.159.2]:25 ... failed: Connection timed out (timeout=5m)
LOG: MAIN
emr-d01.mx.aol.com [205.188.159.2] Connection timed out
Connecting to emr-m01.mx.aol.com [64.12.136.169]:25 ... failed: Connection timed out (timeout=5m)
LOG: MAIN
emr-m01.mx.aol.com [64.12.136.169] Connection timed out
LOG: MAIN
== example@postmaster.aol.com R=lookuphost T=remote_smtp defer (110): Connection timed out
When attempting a manual telnet test from my server to AOL's mail server at , it also times out with the following:
Trying 64.12.137.184 (connection timed out)
Trying 205.188.156.248 (connection timed out)
Trying 205.188.159.57 (connection timed out)
telnet: Unable to connect to remote host: Connection timed out
The AOL support tech explained that if my server IP were being blocked, it would return messages with a block error code instead of timing out. They suggested my firewall was blocking AOL's server....but both my data center and server management company said that isn't the case.
Because I can't duplicate this problem with anyone but AOL accounts, I don't know what else to troubleshoot or look for. I know AOL is notorious for blocking IPs and most email related problems are usually for lack of rDNS, but neither of those issues are the problem in this situation...so I don't know what else to try. My server management company (PSM) and AOL (once they finally elevated me to a real tech support person), have been very patient and helpful....but we still haven't been able to identify the problem and I feel incompetent for not being able to contribute on my own. I've researched for weeks and certainly understand more than I did, but still far less than they do.
AOL did direct me to a Windows Server troubleshooter relating to UDP packet size limitations with some firewalls that could cause MX query timeouts with AOL, Earthlink and Quest...but because I'm on an Apache server...I didn't know if that could be related at all to my issues (not to mention that I didn't even know what any of that meant until I went and looked up what a UDP packet actually was. I'm still not entirely sure I understand it). Even so, I did send the information to Platinum Server Management a short while ago, but haven't heard back yet.
Anyways.... in the meantime, I thought I'd check here in case anyone else had the same issue or saw something obvious we might not be considering.
My server details are as follows. I included my data center and management company details to illustrate that people far more qualified and intelligent than myself have performed the most common and obvious troubleshooters so far:
Pentium IV 2.8GHz /1GB DDRAM /120GB EIDE HDD
OS: CentOS 4.3
cPanel/WHM
Main Server IP: 66.79.163.138
Example Domain on the server: vedadesigns.net
Data Center: Dediwebhost.com (awesome service & fast support)
Initial Server Setup & Management: Platinum Server Management (I just can't say enough good things about these people)