OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Old box, Newbie] Undelivered Mail Returned to Sender

From: mouss (mlist.onlyfree.fr)
Date: Thu Dec 13 2007 - 15:18:09 CST

Paul Rogers wrote:
> --- Victor Duchovni <Victor.DuchovniMorganStanley.com> wrote:
>> (missing) firewall. Please report:
>> # dig +noall +ans -t mx yahoo.com
>> # su nobody -c 'dig +noall +ans -t mx yahoo.com'
>>
>> If none return the expected MX records: toy DNS
>> If only root sees MX records: config file permission issues
>> In both see MX records: run "smtp -v -v" to log detailed DNS lookups.
>>
>
> Prefix: I remember reading a recommendation to use bind-9.x, didn't
> like
> bind-8.x, liked RedHat's resolver even less. I've got
> libresolv-2.1.2.so
> from RHL-6.1 & kinda doubt a compatible rpm for bind-9 is available at
> this late date.
>
> This was as nobody, got an error that noall was invalid, man page had
> answer but not ans, and root's was identical except for the expiration
> time seconds.
> ; <<>> DiG 8.2 <<>> +noall +answer -t yahoo.com
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26600
> ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 7, ADDITIONAL: 7
> ;; QUERY SECTION:
> ;; yahoo.com, type = MX, class = IN
>
> ;; AUTHORITY SECTION:
> yahoo.com. 20h6m42s IN NS ns2.yahoo.com.
> yahoo.com. 20h6m42s IN NS ns1.yahoo.com.
> yahoo.com. 20h6m42s IN NS ns3.yahoo.com.
> yahoo.com. 20h6m42s IN NS ns4.yahoo.com.
> yahoo.com. 20h6m42s IN NS ns5.yahoo.com.
> yahoo.com. 20h6m42s IN NS ns6.yahoo.com.
> yahoo.com. 20h6m42s IN NS ns8.yahoo.com.
>
> ;; ADDITIONAL SECTION:
> ns2.yahoo.com. 30m42s IN A 68.142.255.16
> ns1.yahoo.com. 30m42s IN A 66.218.71.63
> ns3.yahoo.com. 30m42s IN A 217.12.4.104
> ns4.yahoo.com. 30m42s IN A 68.142.196.63
> ns5.yahoo.com. 30m42s IN A 216.109.116.17
> ns6.yahoo.com. 2h20m21s IN A 202.43.223.170
> ns8.yahoo.com. 2h20m21s IN A 202.165.104.22
>
> ;; Total query time: 603 msec
> ;; FROM: dexter.lan to SERVER: default -- 209.102.124.14
> ;; WHEN: Thu Dec 13 11:20:36 2007
> ;; MSG SIZE sent: 27 rcvd: 265
>

don't use your ISP as a forwarder. configure a "standalone" dns server
and try again.