3:49 a.m.
our email are being blocked on:
"said: 550 Connections from the host Unknown
(2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase
Network Owner
ID: None, are being rejected due to a low SenderBase Reputation
Score. See
http://www.senderbase.org for more information or contact your IT
support
team. (in reply to RCPT TO command)
"
-------- Original Message --------
Subject: Bounce action notification
Date: Sat, 21 Dec 2013 04:55:45 -0500
From: mailman(a)ovirt.org
To: users-owner(a)ovirt.org
This is a Mailman mailing list bounce action notice:
List: Users
Member: gaberger(a)cisco.com
Action: Subscription disabled.
Reason: Excessive or fatal bounces.
The triggering bounce notice is attached below.
Questions? Contact the Mailman site administrator at
mailman(a)ovirt.org.
7:41 a.m.
Hi,
I looked up lists.ovirt.org, linode01.ovirt.org and ovirt.org on
SenderBase, and all have a good reputation... anyone more familiar with
mail spam handling who can intervene/investigate?
Thanks,
Dave.
On 12/26/2013 10:49 AM, Itamar Heim wrote:
our email are being blocked on:
"said: 550 Connections from the host Unknown
(2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase
Network Owner
ID: None, are being rejected due to a low SenderBase Reputation
Score. See
http://www.senderbase.org for more information or contact your IT
support
team. (in reply to RCPT TO command)
"
-------- Original Message --------
Subject: Bounce action notification
Date: Sat, 21 Dec 2013 04:55:45 -0500
From: mailman(a)ovirt.org
To: users-owner(a)ovirt.org
This is a Mailman mailing list bounce action notice:
List: Users
Member: gaberger(a)cisco.com
Action: Subscription disabled.
Reason: Excessive or fatal bounces.
The triggering bounce notice is attached below.
Questions? Contact the Mailman site administrator at
mailman(a)ovirt.org.
--
Dave Neary - Community Action and Impact
Open Source and Standards, Red Hat - http://community.redhat.com
Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13
12:08 p.m.
New subject: ipv6 PTR record; was: Re: Fwd: Bounce action notification
On Thu, 2 Jan 2014, Dave Neary wrote:
I looked up lists.ovirt.org, linode01.ovirt.org and ovirt.org on
SenderBase, and all have a good reputation... anyone more familiar with
mail spam handling who can intervene/investigate?
> "said: 550 Connections from the host Unknown
> (2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase
As the message says, and I confirm, there is no ipv6 PTR
record. Wearing my ISP hat, we do not favor email lacking
such in our spamassassin rules, and I know that the US ISP
Comcast also down-rates / refuses email from hosts lacking
such
[herrold@centos-6 ~]$ host 2600:3c01::f03c:91ff:fe93:4b0d
Host
d.0.b.4.3.9.e.f.f.f.1.9.c.3.0.f.0.0.0.0.0.0.0.0.1.0.c.3.0.0.6.2.ip6.arpa
not found: 3(NXDOMAIN)
[herrold@centos-6 ~]$
I would start by getting it set
-- Russ herrold
1:41 p.m.
New subject: ipv6 PTR record; was: Re: Fwd: Bounce action notification
Thanks for the hints Russ!
I am not sure who manages ovirt.org's DNS records, but if we can add a
PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue,
that would be great.
Who can do this?
Thanks,
Dave.
On 01/02/2014 07:08 PM, R P Herrold wrote:
On Thu, 2 Jan 2014, Dave Neary wrote:
> I looked up lists.ovirt.org, linode01.ovirt.org and ovirt.org on
> SenderBase, and all have a good reputation... anyone more familiar with
> mail spam handling who can intervene/investigate?
>> "said: 550 Connections from the host Unknown
>> (2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase
As the message says, and I confirm, there is no ipv6 PTR
record. Wearing my ISP hat, we do not favor email lacking
such in our spamassassin rules, and I know that the US ISP
Comcast also down-rates / refuses email from hosts lacking
such
[herrold@centos-6 ~]$ host 2600:3c01::f03c:91ff:fe93:4b0d
Host
d.0.b.4.3.9.e.f.f.f.1.9.c.3.0.f.0.0.0.0.0.0.0.0.1.0.c.3.0.0.6.2.ip6.arpa
not found: 3(NXDOMAIN)
[herrold@centos-6 ~]$
I would start by getting it set
-- Russ herrold
--
Dave Neary - Community Action and Impact
Open Source and Standards, Red Hat - http://community.redhat.com
Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13
3:05 p.m.
New subject: ipv6 PTR record; was: Re: Fwd: Bounce action notification
Since Linode is owner of the reverse DNS zone, whoever has access to the
linode control panel.
On Thu, Jan 02, 2014 at 08:41:22PM +0100, Dave Neary wrote:
Thanks for the hints Russ!
I am not sure who manages ovirt.org's DNS records, but if we can add a
PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue,
that would be great.
Who can do this?
Thanks,
Dave.
On 01/02/2014 07:08 PM, R P Herrold wrote:
> On Thu, 2 Jan 2014, Dave Neary wrote:
>
>> I looked up lists.ovirt.org, linode01.ovirt.org and ovirt.org on
>> SenderBase, and all have a good reputation... anyone more familiar with
>> mail spam handling who can intervene/investigate?
>
>
>>> "said: 550 Connections from the host Unknown
>>> (2600:3c01::f03c:91ff:fe93:4b0d), originating from SenderBase
>
> As the message says, and I confirm, there is no ipv6 PTR
> record. Wearing my ISP hat, we do not favor email lacking
> such in our spamassassin rules, and I know that the US ISP
> Comcast also down-rates / refuses email from hosts lacking
> such
>
> [herrold@centos-6 ~]$ host 2600:3c01::f03c:91ff:fe93:4b0d
> Host
> d.0.b.4.3.9.e.f.f.f.1.9.c.3.0.f.0.0.0.0.0.0.0.0.1.0.c.3.0.0.6.2.ip6.arpa
> not found: 3(NXDOMAIN)
> [herrold@centos-6 ~]$
>
> I would start by getting it set
4:40 p.m.
New subject: ipv6 PTR record; was: Re: Fwd: Bounce action notification
On Thu, 2 Jan 2014, Dave Neary wrote:
I am not sure who manages ovirt.org's DNS records, but if we can
add a
PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue,
that would be great.
Who can do this?
ssh into the host, from an ipv6 capable unit, and view its
ipv4 address to see which it is. Then ask the netblock
administrator -- OR use a web tool and make some guesses
It appears to be a linnode unit
http://ipv6now.com.au/traceme.php?page_id=36
1. 2406:a000::1
2
2. 2406:a000:ffff:ffff::1
2
3. ge-0-0-0-107.a06.sydnau01.au.ra.gin.ntt.net
4
4. xe-0-1-0.r05.sydnau01.au.bb.gin.ntt.net
3
5. p16-1-2-0.r02.lsanca03.us.bb.gin.ntt.net
148
6. xe-0-1-3.r21.lsanca03.us.bb.gin.ntt.net
139
7. ae-1.r20.snjsca04.us.bb.gin.ntt.net
150
8. ae-1.r07.snjsca04.us.bb.gin.ntt.net
149
9. 10gigabitethernet2-3.core1.sjc2.he.net
149
10. 10ge5-2.core1.pao1.he.net
152
11. 10ge4-4.core3.fmt2.he.net
150
12. linode-llc.10gigabitethernet7-6.core3.fmt2.he.net
152
13. 2600:3c01::f03c:91ff:fe93:4b0d
154
-- Russ herrold
2:31 p.m.
New subject: ipv6 PTR record; was: Re: Fwd: Bounce action notification
On 01/03/2014 12:40 AM, R P Herrold wrote:
On Thu, 2 Jan 2014, Dave Neary wrote:
> I am not sure who manages ovirt.org's DNS records, but if we can add a
> PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue,
> that would be great.
>
> Who can do this?
ssh into the host, from an ipv6 capable unit, and view its
ipv4 address to see which it is. Then ask the netblock
administrator -- OR use a web tool and make some guesses
It appears to be a linnode unit
http://ipv6now.com.au/traceme.php?page_id=36
1. 2406:a000::1
2
2. 2406:a000:ffff:ffff::1
2
3. ge-0-0-0-107.a06.sydnau01.au.ra.gin.ntt.net
4
4. xe-0-1-0.r05.sydnau01.au.bb.gin.ntt.net
3
5. p16-1-2-0.r02.lsanca03.us.bb.gin.ntt.net
148
6. xe-0-1-3.r21.lsanca03.us.bb.gin.ntt.net
139
7. ae-1.r20.snjsca04.us.bb.gin.ntt.net
150
8. ae-1.r07.snjsca04.us.bb.gin.ntt.net
149
9. 10gigabitethernet2-3.core1.sjc2.he.net
149
10. 10ge5-2.core1.pao1.he.net
152
11. 10ge4-4.core3.fmt2.he.net
150
12. linode-llc.10gigabitethernet7-6.core3.fmt2.he.net
152
13. 2600:3c01::f03c:91ff:fe93:4b0d
154
-- Russ herrold
_______________________________________________
Infra mailing list
Infra(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/infra
was this resolved?
2:38 p.m.
New subject: ipv6 PTR record; was: Re: Fwd: Bounce action notification
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 01/15/2014 12:31 PM, Itamar Heim wrote:
was this resolved?
I'm the one with the Linode access, but I'm unclear what/if I can do
anything?
Also, I'd much prefer that we finish the task of moving off the Linode
host. When is that happening?
- - Karsten
- --
Karsten 'quaid' Wade .^\ CentOS Engineering Manager
http://TheOpenSourceWay.org \ http://community.redhat.com
@quaid (identi.ca/twitter/IRC) \v' gpg: AD0E0C41
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlLW8ckACgkQ2ZIOBq0ODEFNdACdHwTtw4f7ivnj8q0qKin+pBGE
4pcAn0lPqfZL6d2W/3lI9O9m6VUuNfMY
=S+Ah
-----END PGP SIGNATURE-----
3:58 p.m.
New subject: ipv6 PTR record; was: Re: Fwd: Bounce action notification
Hi,
I pushed this up to Red Hat IT services, and it appears they're not in
control of the Linode console. I need to go digging.
Cheers,
Dave.
On 01/15/2014 09:31 PM, Itamar Heim wrote:
On 01/03/2014 12:40 AM, R P Herrold wrote:
> On Thu, 2 Jan 2014, Dave Neary wrote:
>
>> I am not sure who manages ovirt.org's DNS records, but if we can add a
>> PTR record for 2600:3c01::f03c:91ff:fe93:4b0d and that solved the issue,
>> that would be great.
>>
>> Who can do this?
>
> ssh into the host, from an ipv6 capable unit, and view its
> ipv4 address to see which it is. Then ask the netblock
> administrator -- OR use a web tool and make some guesses
>
> It appears to be a linnode unit
>
> http://ipv6now.com.au/traceme.php?page_id=36
>
> 1. 2406:a000::1
> 2
> 2. 2406:a000:ffff:ffff::1
> 2
> 3. ge-0-0-0-107.a06.sydnau01.au.ra.gin.ntt.net
> 4
> 4. xe-0-1-0.r05.sydnau01.au.bb.gin.ntt.net
> 3
> 5. p16-1-2-0.r02.lsanca03.us.bb.gin.ntt.net
> 148
> 6. xe-0-1-3.r21.lsanca03.us.bb.gin.ntt.net
> 139
> 7. ae-1.r20.snjsca04.us.bb.gin.ntt.net
> 150
> 8. ae-1.r07.snjsca04.us.bb.gin.ntt.net
> 149
> 9. 10gigabitethernet2-3.core1.sjc2.he.net
> 149
> 10. 10ge5-2.core1.pao1.he.net
> 152
> 11. 10ge4-4.core3.fmt2.he.net
> 150
> 12. linode-llc.10gigabitethernet7-6.core3.fmt2.he.net
> 152
> 13. 2600:3c01::f03c:91ff:fe93:4b0d
> 154
>
>
> -- Russ herrold
> _______________________________________________
> Infra mailing list
> Infra(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/infra
>
was this resolved?
--
Dave Neary - Community Action and Impact
Open Source and Standards, Red Hat - http://community.redhat.com
Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13
6:39 a.m.
New subject: ipv6 PTR record; was: Re: Fwd: Bounce action notification
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Karsten,
On 01/15/2014 09:38 PM, Karsten Wade wrote:
I'm the one with the Linode access, but I'm unclear what/if I
can
do anything?
Ewoud can help you out - we need to add a PTR record for the IPv6
address of linode01.ovirt.org to the DNS so that reverse DNS resolves
correctly.
The issue is that gmail and other email providers check whether the MX
(in this case, linode01.ovirt.org) has a valid IPv6 DNS entry, and
score you down if you don't.
Also, I'd much prefer that we finish the task of moving off the
Linode host. When is that happening?
Are there plans to move the management of the DNS zone off Linode also?
I don't believe we've set a date, or that we have a detailed plan, for
moving services off linode01. The Infra team are migrating services
away on best-effort, available bandwidth basis. The difficulty
provisioning the Rackspace server has not helped.
Cheers,
Dave.
- --
Dave Neary - Community Action and Impact
Open Source and Standards, Red Hat - http://community.redhat.com
Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQEcBAEBAgAGBQJS2nXyAAoJECd1qeknDCggsisH/3XB40AQMkr4p1MDJ8UpyiGv
xBqxpT26wVDf3T3Y8fzh0re26OdIYLfIvDNLSra25InUQ80CkhiuupO0XTVGJB3M
eSOaNyXRx4KOy4mPLWvFBx40SR2cWc1ai2S8r5xDKBuEHRXJ2BoF6DdiPa7Ic2Z6
/ot0xhx8MGjUHz63Fs84+moCsvYpwwDKvSAAxLr8SURlGQaoCLQnrboKQ/WLetK2
8MBnpPtzo7jiycpCdEFrZE0vkoSH3pc3SIfKPXrlilAFXH3VWQZO4lpdiHJ/PJ33
Dmrks1cK2frVYlq7XGI8E6kMGwduUPLiLuwy9A5skCz5qCmY8q2u36OYYJhwHSQ=
=W/r3
-----END PGP SIGNATURE-----
6:14 a.m.
New subject: ipv6 PTR record; was: Re: Fwd: Bounce action notification
On Sat, Jan 18, 2014 at 01:39:14PM +0100, Dave Neary wrote:
On 01/15/2014 09:38 PM, Karsten Wade wrote:
> I'm the one with the Linode access, but I'm unclear what/if I can
> do anything?
Ewoud can help you out - we need to add a PTR record for the IPv6
address of linode01.ovirt.org to the DNS so that reverse DNS resolves
correctly.
The issue is that gmail and other email providers check whether the MX
(in this case, linode01.ovirt.org) has a valid IPv6 DNS entry, and
score you down if you don't.
Actually this is a valid case we haven't mentioned. There is no forward
DNS either. That means we should also create that.
The alternative is to disable IPv6 for the time being. Since
smtp_address_preference[1] is 2.8+ and we run 2.6.6, we can only use
inet_protocols[2]. Currently we don't listen on the outgoing IPv6 anyway
so I don't think this has any negative impact. If there's no objections,
I'm proposing we change inet_protocols from all to ipv4 this evening.
[1]: http://www.postfix.org/postconf.5.html#smtp_address_preference
[2]: http://www.postfix.org/postconf.5.html#inet_protocols
When we've added the forward and reverse DNS, we can enable it again and
properly support IPv6.
> Also, I'd much prefer that we finish the task of moving off
the
> Linode host. When is that happening?
Are there plans to move the management of the DNS zone off Linode also?
Reverse DNS is tied to your IP space and since we don't have PI-space,
Linode owns the IP we use. That means when we move away from linode, the
reverse DNS management of that IP becomes irrelevant.
3746
days inactive
3771
days old
10 comments
5 participants
participants (5)
-
Dave Neary -
Ewoud Kohl van Wijngaarden -
Itamar Heim -
Karsten Wade -
R P Herrold