Re: Bogus "non-existent domain in From:" bounce
Lyle <[email protected]> Wed, 14 Dec 2016 19:17:21 -0600
| Newsgroups | gmane.mail.cgatepro.general |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --------------7327FB57B611899592FF91F6 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit the authoritive name servers for txercoupemuseum.org are: ns1.fatcow.com 65.254.254.100 ns2.fatcow.com 65.254.254.101 ns3.fatcow.com 65.254.254.120 Looks like they are all on on /24 subnet. Traceroute shows all three pass through 216.55.5.134(xo network) The above three ip addresses show as belonging to The endurance International Group, Inc as part of a /19 they have and show an address in Burlington, MA. My first guess is you are hitting DNS when all three have disappeared from the Internet and you don't have valid info in your DNS server's cache. My guess is that it's a DNS problem on their end and their fatcow DNS servers are disappearing from the Internet from time to time. For my company, I rent a server from Linode in their Dallas/Ft Worth, Texas data center as a slave for the two DNS servers in house. Then an outage here does not drop DNS resolution and generate the non-existance message you are getting. Lyle Giese LCR Computer Services, Inc. On 12/14/16 18:22, Gib Henry wrote: > > From time to time I receive copies of my server’s outgoing bounce > messages (from mailerdaemon)with the offending incoming messages > attached. The reason stated for the bounce, in this case,is that > there is a non-existent domain in the From: header of the incoming > message. However that is not true; the domain name > txercoupemuseum.orgdoes exist: > > /usr/bin/host -t a txercoupemuseum.org > txercoupemuseum.org has address 65.254.227.240 > > The log shows: > > 17:40:04.000 1 DEQUEUER [2420011] SYSTEM(gib) failed: non-existent domain (txercoupemuseum.org) in From: > 17:40:04.802 2 SMTP-000007(*) [2420014] sent encrypted [192.168.1.2]:50534 -> [97.78.41.43]:2501, > got:250 4123891 message accepted for delivery > > Do I have a DNS problem? It happens too rarely to justify increasing > the log level, but…? Cheers, > -- > Gib Henry > > ############################################################# > > This message is sent to you because you are subscribed to > > the mailing list <[email protected]>. > > To unsubscribe, E-mail to: <[email protected]> > > To switch to the DIGEST mode, E-mail to <[email protected]> > > To switch to the INDEX mode, E-mail to <[email protected]> > > Send administrative queries to <[email protected]> --------------7327FB57B611899592FF91F6 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit <html> <head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <p>the authoritive name servers for txercoupemuseum.org are:</p> <p><br> </p> <p>ns1.fatcow.com 65.254.254.100<br> </p> <p>ns2.fatcow.com 65.254.254.101<br> </p> <p>ns3.fatcow.com 65.254.254.120<br> </p> <p>Looks like they are all on on /24 subnet. Traceroute shows all three pass through 216.55.5.134(xo network)</p> <p>The above three ip addresses show as belonging to The endurance International Group, Inc as part of a /19 they have and show an address in Burlington, MA.</p> <p><br> </p> <p>My first guess is you are hitting DNS when all three have disappeared from the Internet and you don't have valid info in your DNS server's cache. <br> </p> <p><br> </p> <p>My guess is that it's a DNS problem on their end and their fatcow DNS servers are disappearing from the Internet from time to time.<br> </p> <br> For my company, I rent a server from Linode in their Dallas/Ft Worth, Texas data center as a slave for the two DNS servers in house. Then an outage here does not drop DNS resolution and generate the non-existance message you are getting.<br> <br> Lyle Giese<br> LCR Computer Services, Inc.<br> <br> <div class="moz-cite-prefix">On 12/14/16 18:22, Gib Henry wrote:<br> </div> <blockquote cite="mid:[email protected]" type="cite"> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <p><font face="Georgia" size="+1">From time to time I receive copies of my server’s outgoing bounce messages (from mailerdaemon)</font><font face="Georgia" size="+1"> with the offending incoming messages attached. T</font><font face="Georgia" size="+1">he reason stated for the bounce</font><font face="Georgia" size="+1">, in this case,</font><font face="Georgia" size="+1"> is that there is a non-existent domain in the From: header of the incoming message. However that is not true; the domain name </font>txercoupemuseum.org<font face="Georgia" size="+1"> does exist:</font></p> <p>/usr/bin/host -t a txercoupemuseum.org<br> txercoupemuseum.org has address 65.254.227.240<br> </p> <p><font face="Georgia" size="+1">The log shows:</font><br> </p> <p> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </p> <pre class="logViewInline">17:40:04.000 1 DEQUEUER [2420011] SYSTEM(gib) failed: non-existent domain (txercoupemuseum.org) in From: 17:40:04.802 2 SMTP-000007(*) [2420014] sent encrypted [192.168.1.2]:50534 -> [97.78.41.43]:2501, got:250 4123891 message accepted for delivery </pre> <p><font face="Georgia" size="+1">Do I have a DNS problem? It happens too rarely to justify increasing the log level, but…? Cheers,<br> --<br> Gib Henry<br> </font></p> <pre>############################################################# This message is sent to you because you are subscribed to the mailing list <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]"><[email protected]></a>. To unsubscribe, E-mail to: <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]"><[email protected]></a> To switch to the DIGEST mode, E-mail to <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]"><[email protected]></a> To switch to the INDEX mode, E-mail to <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]"><[email protected]></a> Send administrative queries to <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]"><[email protected]></a></pre> </blockquote> <br> </body> </html> --------------7327FB57B611899592FF91F6--