Strange DNS Issue

[kevster]

Hi,

On my server some of my clients websites are loading with the www. before it and then if u try it without it its not.

and vice versa on some of them.

ANyone had this issue before and how do i resolve this. Iv tried to check in dns administration and couldnt find anything.

Cheers,
Kevin.

[kevster]

Im also thinking this is resulting in every email i sent out to antyhing outwith my server its sending back.

What should the format of this file be /etc/resolv.conf

I have
nameserver 127.0.0.1
nameserver 94.23.26.204
nameserver 213.186.33.99
search ovh.net

[floyd]

Whether the client can see his site with or without the www is not related to resolv.conf

Likely you made dns changes recently and things are still trying to work out. Likely it will just take time.

The other thing is you could have some real dns issues that can be fixed. However we cannot help you since you did not provide any examples for us to research.

[kevster]

Ok. I am having this issue and its rather irritating.

Website that will sometimes work with and without www. is

http://www.wkd-sounds.com/
Http://wkd-sounds.com/

Strange eh..

Im stuck on how to fix this. Checked nameservers on server and domain side. not too sure what the next step is.

[roly]

Ok. I am having this issue and its rather irritating.

Website that will sometimes work with and without www. is

http://www.wkd-sounds.com/
Http://wkd-sounds.com/

Strange eh..

Im stuck on how to fix this. Checked nameservers on server and domain side. not too sure what the next step is.


hi

you seem to have some dns issues http://www.intodns.com/wkd-sounds.com

[kevster]

Hi,

Nice little site that is to use. Any ideas on how I can sort this?

Cheers,
kevin

[Internet54]

Everything looks fine from my end.
Another cause could have been .htaccess file, but usually it is DNS.

[kevster]

The only issue I have now is the sending of mail on the server wont work. Im querying as to why.

Wont send anywhere and everything is in the mail queue adminstrator.

THing is tho in that queue i dont know alot of the emails on it that are randomly wanting to send from my server.

[roly]

Hi,

Nice little site that is to use. Any ideas on how I can sort this?

Cheers,
kevin

it's a very handy site, yes it's showing your dns as fine now.

regarding the mail, i'm not an expert you could try "retry" some of the mail that is stuck in the mail queue administration and then have a look at your exim log to see what is wrong.

tail /var/log/exim/mainlog

someone can maybve advise if this is wroing or perhaps a better suggestion.

[GXX]

With or without www works for me.

[kevster]

its ok this is now sorted. was a problem within resolv.conf.

Only thing is none of my mail will send out and niether will any of my clients. Made sure all the mail ports are unblocked.

Still cant get anything

Keeps coming back as unroutable address.

I have tried everything. Even if i was to send to my own email address it still wont work. Only works internally. Any way of checking the outgoing mail settings as in what IP its set to incase its 127.0.0.1

[GXX]

What does /var/log/exim/mainlog say?

[kevster]

Here is an example below


2009-03-05 02:07:18 1Lf23S-0002PM-Ag <= shg68@ingoo.1click-hosting.com H=localhost (ingoo.1click-hosting.com) [127.0.0.1] P=smtp S=1169 id=01C99D2E.745E1B4A@ingoo.1click-hosting.com T="More strength, length, and pleasure with less efforts." from <shg68@ingoo.1click-hosting.com> for neill@babel.fr
2009-03-05 02:07:18 1Lf23S-0002PM-Ag ** neill@babel.fr F=<shg68@ingoo.1click-hosting.com>: all relevant MX records point to non-existent hosts or (invalidly) to IP addresses
2009-03-05 02:07:18 1Lf23S-0002PO-Co <= <> R=1Lf23S-0002PM-Ag U=mail P=local S=2087 T="Mail delivery failed: returning message to sender" from <> for shg68@ingoo.1click-hosting.com
2009-03-05 02:07:18 1Lf23S-0002PO-Co ** shg68@ingoo.1click-hosting.com F=<>: Unrouteable address
2009-03-05 02:07:18 1Lf23S-0002PO-Co Frozen (delivery error message)
2009-03-05 02:07:18 1Lf23S-0002PM-Ag Completed

[kevster]

Just to let you know those email addresses dont exist on my system but i have 400 odd pages of frozen mail on my queue. Only about 5 emails on those 400 odd pages belong to me and my clients. Just these other emails are weird comin from somewer.

[GXX]

ingoo.1click-hosting.com appears to be your hostname. Have you checked for any compromised mail/contact forms?

Essentially from the cut/paste you did, email is being sent out and hitting a non-working email address (neill@babel.fr). So it comes back with a delivery fail, but it comes back to shg68@ingoo.1click-hosting.com which is unrouteable (hostname), thus creating a crapload of frozen emails. That's just a quick guess from your snippet.

[kevster]

Just checked all accounts and everything seems to be fine. Going to restart server to see if that mailqueue wil clear.

[kevster]

Nope looks like the mail queue will just build and build just now. COuldnt find any things that were sending out mail. Even checked ps aux so see if there was anything in ther. Only thing i find strange in ther is
Ther is processes loads of them from dovecot and the command is imap-login

also got 2 on root that say spamd child

another process from mail .. command is /usr/sbin/exim -bd -q15m -oP /var/run/exim.pid

last one from mail is /usr/sbin/exim -q


Any ideas?

[floyd]

What is in your /etc/resolv.conf file?

[kevster]

resolv.conf check it on ur own server. has the main ip at the dc and then ur nameserver ip. stuff like that. I had it muddled around. Just my mail wont send is my issue. Anyone help?

[floyd]

kevster you did not answer the question. We cannot help if you don't answer the questions we have.

[kevster]

There is the contents below. Dont think it will help tho with the mail issue. Emails are coming in its just sending out its not


nameserver 213.186.33.99
nameserver 94.23.26.204
nameserver 127.0.0.1
search ovh.net

[floyd]

There is the contents below. Dont think it will help tho with the mail issue. Emails are coming in its just sending out its not

Why don't you think it will help? The resolv.conf file has to be correct or no emails will go out. resolv.conf does not have anything to do with your websites being visible or mail coming in. It has everything to do with outgoing traffic.

[kevster]

I cant see anything wrong with it tho. the 1st ip is the main datacenter ip. second one is my ip and 3rd is localhost

[floyd]

Take out nameserver 127.0.0.1 You are probably not running a caching nameserver nor should you be. Exim is probably trying to look up the outgoing email addresses on your own server (127.0.0.1) instead of using the other nameservers.

[kevster]

What if i changed it around so it goes to my nameserver first then the dc ip. it may be that

[floyd]

I cant see anything wrong with it tho. the 1st ip is the main datacenter ip. second one is my ip and 3rd is localhost

Then that means at least 2 out of the 3 entries are wrong. Take out your ip and localhost.

[floyd]

What if i changed it around so it goes to my nameserver first then the dc ip. it may be that

You don't want it to use your nameserver at all.

[kevster]

took out the 127.0.0.1 and the search.ovh.net jst now and rebooting server

[kevster]

Any quick way of clearin this mail queue. Got 389 pages of mail

[floyd]

took out the 127.0.0.1 and the search.ovh.net jst now and rebooting server

Why did you take out search.ovh.net? Is ovh.net your server?

Why did you reboot the server?

[kevster]

ovh.net is the people who supply the server and i rebooted it so it could refresh everything

[kevster]

my server is ultimate-webhost.net

[floyd]

This is what I recommend:



search yourhostname
nameserver 208.67.222.222
nameserver 208.67.220.220


The nameservers are OpenDNS nameservers.

You can test it by:


dig google.com

Should give you:


; <<>> DiG 9.3.4-P1 <<>> google.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10021
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;google.com. IN A

;; ANSWER SECTION:
google.com. 280 IN A 74.125.67.100
google.com. 280 IN A 209.85.171.100
google.com. 280 IN A 74.125.45.100

;; Query time: 45 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Thu Mar 5 10:32:37 2009
;; MSG SIZE rcvd: 76

[kevster]

nameserver 208.67.222.222
nameserver 208.67.220.220

those arent my name server ip;s tho

[kevster]

There is me doing dig ultimate-webhost.net


; <<>> DiG 9.3.3rc2 <<>> ultimate-webhost.net
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57981
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;ultimate-webhost.net. IN A

;; ANSWER SECTION:
ultimate-webhost.net. 13651 IN A 94.23.26.204

;; AUTHORITY SECTION:
ultimate-webhost.net. 13651 IN NS ns1.ultimate-webhost.net.
ultimate-webhost.net. 13651 IN NS ns2.ultimate-webhost.net.

;; ADDITIONAL SECTION:
ns1.ultimate-webhost.net. 163780 IN A 94.23.26.204
ns2.ultimate-webhost.net. 163780 IN A 94.23.121.121

;; Query time: 0 msec
;; SERVER: 213.186.33.99#53(213.186.33.99)
;; WHEN: Thu Mar 5 16:38:43 2009
;; MSG SIZE rcvd: 122

[floyd]

nameserver 208.67.222.222
nameserver 208.67.220.220

those arent my name server ip;s tho

They are NOT supposed to be YOUR nameserver ip's. That is the whole point.

They are supposed to be the nameservers of either your upstream provider or other publicly available nameservers such as OpenDNS.


There is me doing dig ultimate-webhost.net

I tell you to do "dig google.com" and then you do "dig ultimate-webhost.net"

When you are ready to follow directions let us know.

[kevster]

wouldnt dig google.com giv the same results as yours
but here they are


; <<>> DiG 9.3.3rc2 <<>> google.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54531
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;google.com. IN A

;; ANSWER SECTION:
google.com. 300 IN A 74.125.45.100
google.com. 300 IN A 74.125.67.100
google.com. 300 IN A 209.85.171.100

;; AUTHORITY SECTION:
google.com. 97830 IN NS ns4.google.com.
google.com. 97830 IN NS ns1.google.com.
google.com. 97830 IN NS ns2.google.com.
google.com. 97830 IN NS ns3.google.com.

;; ADDITIONAL SECTION:
ns1.google.com. 194582 IN A 216.239.32.10
ns2.google.com. 187571 IN A 216.239.34.10
ns3.google.com. 187571 IN A 216.239.36.10
ns4.google.com. 187571 IN A 216.239.38.10

;; Query time: 16 msec
;; SERVER: 213.186.33.99#53(213.186.33.99)
;; WHEN: Thu Mar 5 16:56:35 2009
;; MSG SIZE rcvd: 212

[floyd]

wouldnt dig google.com giv the same results as yours

Absolutely not especially if you don't have your resolv.conf file set up correctly.

Your results:


;; SERVER: 213.186.33.99#53(213.186.33.99)


My results:


;; SERVER: 208.67.222.222#53(208.67.222.222)


They are different.

But since yours does return ip results for google.com then your resolv.conf file is probably set up correctly now. Your mail queue should clear eventually.

[kevster]

In my mail queue its sitting at frozen. all of them are.

[kevster]

THere is still mail adding onto the list. I have checked all accounts every single file. for the past 5 hours and there is no mailer. There was one but its deleted.

[kevster]

When im looking at my process list

Im seeing loads of these

mail 13386 0.0 0.0 50112 2704 ? S 22:04 0:00 /usr/sbin/exim -bd -q15m -oP /var/run/exim.pid

Any idea's what they are and is it this which is sending all these emails

[scsi]

Look at your mail logs lol

[kevster]

funny you say that lol it was the first thing i looked at.

Here is a recent example of what it displays


2009-03-06 00:00:08 1LfMXw-0002fy-1O <= root@ingoo.1click-hosting.com U=root P=local S=1218 T="Status warning from ingoo.1click-hosting.com" from <root@ingoo.1click-hosting.com> for root
2009-03-06 00:00:08 1LfMXw-0002fy-1O User 0 set for local_delivery transport is on the never_users list
2009-03-06 00:00:08 1LfMXw-0002fy-1O == root@ingoo.1click-hosting.com R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2009-03-06 00:00:08 1LfMXw-0002fy-1O ** root@ingoo.1click-hosting.com: retry timeout exceeded
2009-03-06 00:00:08 1LfMXw-0002g6-3B <= <> R=1LfMXw-0002fy-1O U=mail P=local S=2103 T="Mail delivery failed: returning message to sender" from <> for root@ingoo.1click-hosting.com
2009-03-06 00:00:08 1LfMXw-0002g6-3B User 0 set for local_delivery transport is on the never_users list
2009-03-06 00:00:08 1LfMXw-0002g6-3B == root@ingoo.1click-hosting.com R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2009-03-06 00:00:08 1LfMXw-0002g6-3B ** root@ingoo.1click-hosting.com: retry timeout exceeded
2009-03-06 00:00:08 1LfMXw-0002g6-3B root@ingoo.1click-hosting.com: error ignored
2009-03-06 00:00:08 1LfMXw-0002g6-3B Completed
2009-03-06 00:00:08 1LfMXw-0002fy-1O Completed

[floyd]

What do you want to know about these log entries? The seem pretty self explanatory. You cannot send mail directly to user root.

[kevster]

but when any user tries to send out. Ill get a new one. ill try send out an email and it will return it.

[kevster]

other ones i have here are stating below


2009-03-06 00:18:53 H=mail.ibw-institut.de [194.209.15.244] F=<> rejected RCPT <bkurlinski@ingoo.1click-hosting.com>: Unrouteable address
2009-03-06 00:18:53 H=mail.ibw-institut.de [194.209.15.244] incomplete transaction (QUIT) from <>

[kevster]

found out its sending when you send to same email but its not sending outside the server., what could be the issue?

[floyd]

other ones i have here are stating below

ingoo.1click-hosting.com does not have a MX record.


dig ingoo.1click-hosting.com MX

; <<>> DiG 9.3.4-P1 <<>> ingoo.1click-hosting.com MX
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2519
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ingoo.1click-hosting.com. IN MX

;; Query time: 71 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Fri Mar 6 06:57:16 2009
;; MSG SIZE rcvd: 42


Subdomains usually do not have MX records.

1click-hosting.com does not have a MX record either.


dig 1click-hosting.com MX

; <<>> DiG 9.3.4-P1 <<>> 1click-hosting.com MX
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20220
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;1click-hosting.com. IN MX

;; Query time: 15 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Fri Mar 6 06:58:55 2009
;; MSG SIZE rcvd: 36

[floyd]

In post number 13 the log told you what the problem was.


Here is an example below


2009-03-05 02:07:18 1Lf23S-0002PM-Ag <= shg68@ingoo.1click-hosting.com H=localhost (ingoo.1click-hosting.com) [127.0.0.1] P=smtp S=1169 id=01C99D2E.745E1B4A@ingoo.1click-hosting.com T="More strength, length, and pleasure with less efforts." from <shg68@ingoo.1click-hosting.com> for neill@babel.fr
2009-03-05 02:07:18 1Lf23S-0002PM-Ag ** neill@babel.fr F=<shg68@ingoo.1click-hosting.com>: all relevant MX records point to non-existent hosts or (invalidly) to IP addresses
2009-03-05 02:07:18 1Lf23S-0002PO-Co <= <> R=1Lf23S-0002PM-Ag U=mail P=local S=2087 T="Mail delivery failed: returning message to sender" from <> for shg68@ingoo.1click-hosting.com
2009-03-05 02:07:18 1Lf23S-0002PO-Co ** shg68@ingoo.1click-hosting.com F=<>: Unrouteable address
2009-03-05 02:07:18 1Lf23S-0002PO-Co Frozen (delivery error message)
2009-03-05 02:07:18 1Lf23S-0002PM-Ag Completed



2009-03-05 02:07:18 1Lf23S-0002PM-Ag ** neill@babel.fr F=<shg68@ingoo.1click-hosting.com>: all relevant MX records point to non-existent hosts or (invalidly) to IP addresses

It appears ingoo.1click-hosting.com is your hostname.

shg68@ingoo.1click-hosting.com tried to send mail to neill@babel.fr.

1. Mail should not be coming from shg68@ingoo.1click-hosting.com unless there is a script doing it.
2. babel.fr does not have an MX records and cannot aceept email.
3. Mail sent to neill@babel.fr failed and tried to be returned to shg68@ingoo.1click-hosting.com but it can't since there are no MX records for ingoo.1click-hosting.com.

[GXX]

Lol, floyd, I've already gone over that (http://www.directadmin.com/forum/showpost.php?p=151888&postcount=15) but it doesn't seem the OP can find what's causing it.

[floyd]

GXX, that was post 15. I would have thought by post 43 kevster would have gotten past that but apparently he still doesn't get it. So I felt the need to post it again.

[floyd]

found out its sending when you send to same email but its not sending outside the server., what could be the issue?

Show us the log entries where it cannot send to a valid email address outside the server.

[nobaloney]

Kevster, this thread has gone on for days now. Have you resolved the DNS issue?

Bottom line is as has been posted before; you must not have references to YOUR DNS server in your resolv.conf file.

You should have in it two nameservers given to you by your upstream. If your upstream doesn't have two nameservers, or you don't want to use them, then use the OpenDNS nameservers posted earlier in this thread, but then you should set up a free account with them, and turn off all their special features; they're designed for desktop systems and could cause problems on servers.

If all you want to do is restate your problems over and over again and not follow anyone's suggestions, then of course that's your privilege, but then you'll never resolve the issue.

Jeff

[kevster]

Hi,

This thread can now be closed .. My support is sorting it. THey have outgoing mail working but now incoming isnt lol.

Im sure they will sort it.

Thanks anyway,

Kevin.