Begin forwarded message:
From: Support - Hetzner Online AG support@hetzner.de Subject: Re: [Ticket#2013111103014905] Server-Problem (Server #7421) Date: 12. November 2013 02:19:48 GMT-8 To: accounting@sfconservancy.org, bert@freudenbergs.de
Dear Sir,
the corresponding authoritativ nameservers of this domain itchy.earthlink.net and scratchy.earthlink.net are blocking requests from our recursive nameservers which is why you cannot resolve the mentioned domain.
If you are a admin of this domain you may contact your service provider regarding this issue. We are trying to contact them also.
In the meantime you may use different public dns servers such as the ones from google.
Mit freundlichen Grüßen / Best Regards
Eric Esch
Hetzner Online AG Stuttgarter Str. 1 91710 Gunzenhausen / Germany Tel: +49 (9831) 61 00 6-1 Fax: +49 (9831) 61 00 6-2 http://www.hetzner.de
Registergericht Ansbach, HRB 3204 Vorstand: Dipl. Ing. (FH) Martin Hetzner Aufsichtsratsvorsitzende: Diana Rothhan
11.11.2013 18:18 - accounting@sfconservancy.org bert@freudenbergs.de schrieb:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Lately we've been having trouble sending email to some users and it appears that the problem is with the DNS servers we are using, checking the wiki these still seem to be the preferred servers (http://wiki.hetzner.de/index.php/Hetzner_Standard_Name_Server/en):
$ cat /etc/resolv.conf nameserver 213.133.98.98 nameserver 213.133.99.99 nameserver 213.133.100.100
As a test I try my own domain name:
$ dig @213.133.99.99 kencausey.com mx
; <<>> DiG 9.2.4 <<>> @213.133.99.99 kencausey.com mx ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48963 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0
;; QUESTION SECTION: ;kencausey.com. IN MX
;; ANSWER SECTION: kencausey.com. 3600 IN MX 0 smtp.secureserver.net. kencausey.com. 3600 IN MX 10 mailstore1.secureserver.net.
;; AUTHORITY SECTION: kencausey.com. 3600 IN NS ns42.domaincontrol.com. kencausey.com. 3600 IN NS ns41.domaincontrol.com.
;; Query time: 330 msec ;; SERVER: 213.133.99.99#53(213.133.99.99) ;; WHEN: Sat Nov 9 18:42:46 2013 ;; MSG SIZE rcvd: 147
It works fine. Yet for two other domain names we know of it does not work:
$ dig @213.133.99.99 mindspring.com mx
; <<>> DiG 9.2.4 <<>> @213.133.99.99 mindspring.com mx ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 25532 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;mindspring.com. IN MX
;; Query time: 3 msec ;; SERVER: 213.133.99.99#53(213.133.99.99) ;; WHEN: Sat Nov 9 18:43:32 2013 ;; MSG SIZE rcvd: 32
$ dig @213.133.100.100 mypacks.net mx
; <<>> DiG 9.2.4 <<>> @213.133.100.100 mypacks.net mx ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 52906 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;mypacks.net. IN MX
;; Query time: 3 msec ;; SERVER: 213.133.100.100#53(213.133.100.100) ;; WHEN: Sat Nov 9 18:44:53 2013 ;; MSG SIZE rcvd: 29
And yet it works elsewhere:
$ dig @8.8.8.8 mypacks.net mx
; <<>> DiG 9.2.4 <<>> @8.8.8.8 mypacks.net mx ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2192 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;mypacks.net. IN MX
;; ANSWER SECTION: mypacks.net. 2 IN MX 5 mx3.earthlink.net. mypacks.net. 2 IN MX 5 mx4.earthlink.net. mypacks.net. 2 IN MX 5 mx1.earthlink.net. mypacks.net. 2 IN MX 5 mx2.earthlink.net.
;; Query time: 5 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Sat Nov 9 18:45:32 2013 ;; MSG SIZE rcvd: 119
$ dig @8.8.8.8 mindspring.com mx
; <<>> DiG 9.2.4 <<>> @8.8.8.8 mindspring.com mx ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53905 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;mindspring.com. IN MX
;; ANSWER SECTION: mindspring.com. 13 IN MX 5 mx4.mindspring.com. mindspring.com. 13 IN MX 5 mx1.mindspring.com. mindspring.com. 13 IN MX 5 mx2.mindspring.com. mindspring.com. 13 IN MX 5 mx3.mindspring.com.
;; Query time: 6 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Sat Nov 9 18:46:02 2013 ;; MSG SIZE rcvd: 112
Please advise us if we should be using alternate DNS servers.
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux)
iQEcBAEBAgAGBQJSgRE0AAoJEK6NCkO4XRWF1cUH/2Ct7xgde/3rMfNBddA5HGfL SDPpIDYN2pQVkVGwUclPVZgaFkMYEAb9wVs7VCh7dLWPoCc1+SBHa2j1Uw+v/sX4 r7lsyiCUvHpkzJjVXypXS5yqMvlIpDF4OkOM6iyId7OIEF/HrLRLdq5ujeIRMZM7 1EvDZgUM/zWtWBFCaM6LEg0rqXQD+DdBCasb5bRNTfw6oqWISTMYTL5MXJCgIOUs iaxr3qNfSbrgiZGDXla2DV5WjjCenCH3gC93dWWwsSlazwfyKUQoU8aX4IHys7M2 MdWr5hOBj/MBQT0r/J47I/9OgeFLlMpjs340FXI+wYzOLxVEBQiKSbs1NSM8SWs= =j9d8 -----END PGP SIGNATURE-----
- Bert -
Thanks.
It appears that the problem is in the process of being alleviated. Two of the three Hetzner DNS servers now correctly returns the MX for the two Earthlink domains. Good enough for now.
Ken
On 11/12/2013 11:10 PM, Bert Freudenberg wrote:
Begin forwarded message:
From: Support - Hetzner Online AG support@hetzner.de Subject: Re: [Ticket#2013111103014905] Server-Problem (Server #7421) Date: 12. November 2013 02:19:48 GMT-8 To: accounting@sfconservancy.org, bert@freudenbergs.de
Dear Sir,
the corresponding authoritativ nameservers of this domain itchy.earthlink.net and scratchy.earthlink.net are blocking requests from our recursive nameservers which is why you cannot resolve the mentioned domain.
If you are a admin of this domain you may contact your service provider regarding this issue. We are trying to contact them also.
In the meantime you may use different public dns servers such as the ones from google.
Mit freundlichen Grüßen / Best Regards
Eric Esch
Hetzner Online AG Stuttgarter Str. 1 91710 Gunzenhausen / Germany Tel: +49 (9831) 61 00 6-1 Fax: +49 (9831) 61 00 6-2 http://www.hetzner.de
Registergericht Ansbach, HRB 3204 Vorstand: Dipl. Ing. (FH) Martin Hetzner Aufsichtsratsvorsitzende: Diana Rothhan
box-admins@lists.squeakfoundation.org