DNS + Postfix Outage

DNS Outage
---

While upgrading the l10n.gnome.org machine, I hit a few issues while 
upgrading the bind9 package that was failing to restart for an openssl 
error. (which seems to be known, [1])

The same machine hosted our secondary DNS server but that wasn't a 
problem since our main host (clipboard) was actually up and running. 
Suddenly all the DNS zones got dropped and all GNOME services were 
actually unreachable. 

After a wider look at the Whois informations, we actually found out 
our old main DNS server (menubar) was still being listed as a 
nameserver, but no DNS services were hosted there anymore. (so 0 out 
of 2 DNS services were active)

We finally updated the zones information on menubar and restarted the 
DNS service while we actually wait the relevant folks to update Whois 
details with our new main DNS host.

Postfix Outage
---

As you may have noticed all the @gnome.org mails weren't being 
delivered correctly (bugzilla, mailing lists, personal aliases etc.).

For some reason Amavisd was requesting Postix's data not through 
the usual localhost address (127.0.0.1) but using its public IP 
instead. (that will obviously fail since access is restricted to 
localhost only)

After looking at the logs et all I found out telnet wasn't working 
correctly when trying to connect to the Amavisd port on localhost. 
Adding a new Iptables rule fixed the problem, the queue is currently 
flushing so expect to receive a good bunch of GNOME mails in the near 
future.

Thanks for your patience and understanding,

[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668952

-- 

Cheers,

Andrea

Debian Developer,
Fedora / EPEL packager,
GNOME Sysadmin,
GNOME Foundation Membership & Elections Committee Chairman

Homepage: http://people.gnome.org/~av

-- 
devel-announce-list mailing list
[email protected]
https://mail.gnome.org/mailman/listinfo/devel-announce-list

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=Cy9Y
-----END PGP SIGNATURE-----