our email are being blocked on: "said: 550 Connections from the host Unknown (2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase Network Owner ID: None, are being rejected due to a low SenderBase Reputation Score. See http://www.senderbase.org for more information or contact your IT support team. (in reply to RCPT TO command) " -------- Original Message -------- Subject: Bounce action notification Date: Sat, 21 Dec 2013 04:55:45 -0500 From: mailman@ovirt.org To: users-owner@ovirt.org This is a Mailman mailing list bounce action notice: List: Users Member: gaberger@cisco.com Action: Subscription disabled. Reason: Excessive or fatal bounces. The triggering bounce notice is attached below. Questions? Contact the Mailman site administrator at mailman@ovirt.org.
Hi, I looked up lists.ovirt.org, linode01.ovirt.org and ovirt.org on SenderBase, and all have a good reputation... anyone more familiar with mail spam handling who can intervene/investigate? Thanks, Dave. On 12/26/2013 10:49 AM, Itamar Heim wrote:
our email are being blocked on: "said: 550 Connections from the host Unknown (2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase Network Owner ID: None, are being rejected due to a low SenderBase Reputation Score. See http://www.senderbase.org for more information or contact your IT support team. (in reply to RCPT TO command) "
-------- Original Message -------- Subject: Bounce action notification Date: Sat, 21 Dec 2013 04:55:45 -0500 From: mailman@ovirt.org To: users-owner@ovirt.org
This is a Mailman mailing list bounce action notice:
List: Users Member: gaberger@cisco.com Action: Subscription disabled. Reason: Excessive or fatal bounces.
The triggering bounce notice is attached below.
Questions? Contact the Mailman site administrator at mailman@ovirt.org.
-- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13
On Thu, 2 Jan 2014, Dave Neary wrote:
I looked up lists.ovirt.org, linode01.ovirt.org and ovirt.org on SenderBase, and all have a good reputation... anyone more familiar with mail spam handling who can intervene/investigate?
"said: 550 Connections from the host Unknown (2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase
As the message says, and I confirm, there is no ipv6 PTR record. Wearing my ISP hat, we do not favor email lacking such in our spamassassin rules, and I know that the US ISP Comcast also down-rates / refuses email from hosts lacking such [herrold@centos-6 ~]$ host 2600:3c01::f03c:91ff:fe93:4b0d Host d.0.b.4.3.9.e.f.f.f.1.9.c.3.0.f.0.0.0.0.0.0.0.0.1.0.c.3.0.0.6.2.ip6.arpa not found: 3(NXDOMAIN) [herrold@centos-6 ~]$ I would start by getting it set -- Russ herrold
Thanks for the hints Russ! I am not sure who manages ovirt.org's DNS records, but if we can add a PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue, that would be great. Who can do this? Thanks, Dave. On 01/02/2014 07:08 PM, R P Herrold wrote:
On Thu, 2 Jan 2014, Dave Neary wrote:
I looked up lists.ovirt.org, linode01.ovirt.org and ovirt.org on SenderBase, and all have a good reputation... anyone more familiar with mail spam handling who can intervene/investigate?
"said: 550 Connections from the host Unknown (2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase
As the message says, and I confirm, there is no ipv6 PTR record. Wearing my ISP hat, we do not favor email lacking such in our spamassassin rules, and I know that the US ISP Comcast also down-rates / refuses email from hosts lacking such
[herrold@centos-6 ~]$ host 2600:3c01::f03c:91ff:fe93:4b0d Host d.0.b.4.3.9.e.f.f.f.1.9.c.3.0.f.0.0.0.0.0.0.0.0.1.0.c.3.0.0.6.2.ip6.arpa not found: 3(NXDOMAIN) [herrold@centos-6 ~]$
I would start by getting it set
-- Russ herrold
-- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13
Since Linode is owner of the reverse DNS zone, whoever has access to the linode control panel. On Thu, Jan 02, 2014 at 08:41:22PM +0100, Dave Neary wrote:
Thanks for the hints Russ!
I am not sure who manages ovirt.org's DNS records, but if we can add a PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue, that would be great.
Who can do this?
Thanks, Dave.
On 01/02/2014 07:08 PM, R P Herrold wrote:
On Thu, 2 Jan 2014, Dave Neary wrote:
I looked up lists.ovirt.org, linode01.ovirt.org and ovirt.org on SenderBase, and all have a good reputation... anyone more familiar with mail spam handling who can intervene/investigate?
"said: 550 Connections from the host Unknown (2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase
As the message says, and I confirm, there is no ipv6 PTR record. Wearing my ISP hat, we do not favor email lacking such in our spamassassin rules, and I know that the US ISP Comcast also down-rates / refuses email from hosts lacking such
[herrold@centos-6 ~]$ host 2600:3c01::f03c:91ff:fe93:4b0d Host d.0.b.4.3.9.e.f.f.f.1.9.c.3.0.f.0.0.0.0.0.0.0.0.1.0.c.3.0.0.6.2.ip6.arpa not found: 3(NXDOMAIN) [herrold@centos-6 ~]$
I would start by getting it set
On Thu, 2 Jan 2014, Dave Neary wrote:
I am not sure who manages ovirt.org's DNS records, but if we can add a PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue, that would be great.
Who can do this?
ssh into the host, from an ipv6 capable unit, and view its ipv4 address to see which it is. Then ask the netblock administrator -- OR use a web tool and make some guesses It appears to be a linnode unit http://ipv6now.com.au/traceme.php?page_id=36 1. 2406:a000::1 2 2. 2406:a000:ffff:ffff::1 2 3. ge-0-0-0-107.a06.sydnau01.au.ra.gin.ntt.net 4 4. xe-0-1-0.r05.sydnau01.au.bb.gin.ntt.net 3 5. p16-1-2-0.r02.lsanca03.us.bb.gin.ntt.net 148 6. xe-0-1-3.r21.lsanca03.us.bb.gin.ntt.net 139 7. ae-1.r20.snjsca04.us.bb.gin.ntt.net 150 8. ae-1.r07.snjsca04.us.bb.gin.ntt.net 149 9. 10gigabitethernet2-3.core1.sjc2.he.net 149 10. 10ge5-2.core1.pao1.he.net 152 11. 10ge4-4.core3.fmt2.he.net 150 12. linode-llc.10gigabitethernet7-6.core3.fmt2.he.net 152 13. 2600:3c01::f03c:91ff:fe93:4b0d 154 -- Russ herrold
On 01/03/2014 12:40 AM, R P Herrold wrote:
On Thu, 2 Jan 2014, Dave Neary wrote:
I am not sure who manages ovirt.org's DNS records, but if we can add a PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue, that would be great.
Who can do this?
ssh into the host, from an ipv6 capable unit, and view its ipv4 address to see which it is. Then ask the netblock administrator -- OR use a web tool and make some guesses
It appears to be a linnode unit
http://ipv6now.com.au/traceme.php?page_id=36
1. 2406:a000::1 2 2. 2406:a000:ffff:ffff::1 2 3. ge-0-0-0-107.a06.sydnau01.au.ra.gin.ntt.net 4 4. xe-0-1-0.r05.sydnau01.au.bb.gin.ntt.net 3 5. p16-1-2-0.r02.lsanca03.us.bb.gin.ntt.net 148 6. xe-0-1-3.r21.lsanca03.us.bb.gin.ntt.net 139 7. ae-1.r20.snjsca04.us.bb.gin.ntt.net 150 8. ae-1.r07.snjsca04.us.bb.gin.ntt.net 149 9. 10gigabitethernet2-3.core1.sjc2.he.net 149 10. 10ge5-2.core1.pao1.he.net 152 11. 10ge4-4.core3.fmt2.he.net 150 12. linode-llc.10gigabitethernet7-6.core3.fmt2.he.net 152 13. 2600:3c01::f03c:91ff:fe93:4b0d 154
-- Russ herrold _______________________________________________ Infra mailing list Infra@ovirt.org http://lists.ovirt.org/mailman/listinfo/infra
was this resolved?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 01/15/2014 12:31 PM, Itamar Heim wrote:
was this resolved?
I'm the one with the Linode access, but I'm unclear what/if I can do anything? Also, I'd much prefer that we finish the task of moving off the Linode host. When is that happening? - - Karsten - -- Karsten 'quaid' Wade .^\ CentOS Engineering Manager http://TheOpenSourceWay.org \ http://community.redhat.com @quaid (identi.ca/twitter/IRC) \v' gpg: AD0E0C41 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlLW8ckACgkQ2ZIOBq0ODEFNdACdHwTtw4f7ivnj8q0qKin+pBGE 4pcAn0lPqfZL6d2W/3lI9O9m6VUuNfMY =S+Ah -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Karsten, On 01/15/2014 09:38 PM, Karsten Wade wrote:
I'm the one with the Linode access, but I'm unclear what/if I can do anything?
Ewoud can help you out - we need to add a PTR record for the IPv6 address of linode01.ovirt.org to the DNS so that reverse DNS resolves correctly. The issue is that gmail and other email providers check whether the MX (in this case, linode01.ovirt.org) has a valid IPv6 DNS entry, and score you down if you don't.
Also, I'd much prefer that we finish the task of moving off the Linode host. When is that happening?
Are there plans to move the management of the DNS zone off Linode also? I don't believe we've set a date, or that we have a detailed plan, for moving services off linode01. The Infra team are migrating services away on best-effort, available bandwidth basis. The difficulty provisioning the Rackspace server has not helped. Cheers, Dave. - -- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS2nXyAAoJECd1qeknDCggsisH/3XB40AQMkr4p1MDJ8UpyiGv xBqxpT26wVDf3T3Y8fzh0re26OdIYLfIvDNLSra25InUQ80CkhiuupO0XTVGJB3M eSOaNyXRx4KOy4mPLWvFBx40SR2cWc1ai2S8r5xDKBuEHRXJ2BoF6DdiPa7Ic2Z6 /ot0xhx8MGjUHz63Fs84+moCsvYpwwDKvSAAxLr8SURlGQaoCLQnrboKQ/WLetK2 8MBnpPtzo7jiycpCdEFrZE0vkoSH3pc3SIfKPXrlilAFXH3VWQZO4lpdiHJ/PJ33 Dmrks1cK2frVYlq7XGI8E6kMGwduUPLiLuwy9A5skCz5qCmY8q2u36OYYJhwHSQ= =W/r3 -----END PGP SIGNATURE-----
On Sat, Jan 18, 2014 at 01:39:14PM +0100, Dave Neary wrote:
On 01/15/2014 09:38 PM, Karsten Wade wrote:
I'm the one with the Linode access, but I'm unclear what/if I can do anything?
Ewoud can help you out - we need to add a PTR record for the IPv6 address of linode01.ovirt.org to the DNS so that reverse DNS resolves correctly.
The issue is that gmail and other email providers check whether the MX (in this case, linode01.ovirt.org) has a valid IPv6 DNS entry, and score you down if you don't.
Actually this is a valid case we haven't mentioned. There is no forward DNS either. That means we should also create that. The alternative is to disable IPv6 for the time being. Since smtp_address_preference[1] is 2.8+ and we run 2.6.6, we can only use inet_protocols[2]. Currently we don't listen on the outgoing IPv6 anyway so I don't think this has any negative impact. If there's no objections, I'm proposing we change inet_protocols from all to ipv4 this evening. [1]: http://www.postfix.org/postconf.5.html#smtp_address_preference [2]: http://www.postfix.org/postconf.5.html#inet_protocols When we've added the forward and reverse DNS, we can enable it again and properly support IPv6.
Also, I'd much prefer that we finish the task of moving off the Linode host. When is that happening?
Are there plans to move the management of the DNS zone off Linode also?
Reverse DNS is tied to your IP space and since we don't have PI-space, Linode owns the IP we use. That means when we move away from linode, the reverse DNS management of that IP becomes irrelevant.
Hi, I pushed this up to Red Hat IT services, and it appears they're not in control of the Linode console. I need to go digging. Cheers, Dave. On 01/15/2014 09:31 PM, Itamar Heim wrote:
On 01/03/2014 12:40 AM, R P Herrold wrote:
On Thu, 2 Jan 2014, Dave Neary wrote:
I am not sure who manages ovirt.org's DNS records, but if we can add a PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue, that would be great.
Who can do this?
ssh into the host, from an ipv6 capable unit, and view its ipv4 address to see which it is. Then ask the netblock administrator -- OR use a web tool and make some guesses
It appears to be a linnode unit
http://ipv6now.com.au/traceme.php?page_id=36
1. 2406:a000::1 2 2. 2406:a000:ffff:ffff::1 2 3. ge-0-0-0-107.a06.sydnau01.au.ra.gin.ntt.net 4 4. xe-0-1-0.r05.sydnau01.au.bb.gin.ntt.net 3 5. p16-1-2-0.r02.lsanca03.us.bb.gin.ntt.net 148 6. xe-0-1-3.r21.lsanca03.us.bb.gin.ntt.net 139 7. ae-1.r20.snjsca04.us.bb.gin.ntt.net 150 8. ae-1.r07.snjsca04.us.bb.gin.ntt.net 149 9. 10gigabitethernet2-3.core1.sjc2.he.net 149 10. 10ge5-2.core1.pao1.he.net 152 11. 10ge4-4.core3.fmt2.he.net 150 12. linode-llc.10gigabitethernet7-6.core3.fmt2.he.net 152 13. 2600:3c01::f03c:91ff:fe93:4b0d 154
-- Russ herrold _______________________________________________ Infra mailing list Infra@ovirt.org http://lists.ovirt.org/mailman/listinfo/infra
was this resolved?
-- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13
participants (5)
-
Dave Neary -
Ewoud Kohl van Wijngaarden -
Itamar Heim -
Karsten Wade -
R P Herrold