We have a problem with missing mails at contronix.de. Unfortunately I am not able to debug it and find an error.
Here are the symptons:
- Mail is transfered from many addresses correctyl, esp. everything I can test
- Mail is missing as it seems from:
- digikey.com (tested directly with staff there)
- ups.com
The local mail configuration looks fine. I don’t assume it’s our Exchange server as the spam confidence level of older mail of both organization is very low and even disabling all spam functionality in Exchange doesn’t help. On the server I do not see anything in the logs when a mail should be delivered, so I can’t debug.
This leeds me to the assumption that there’s another problem: DNS. Lately we changed this a bit:
- contronix.de has been moved to another hosting provider
- the exchange server is connected using pptp and gets mail and sends mail directly
- DNS entries of contronix.de should reflect this
- there were a few small problems at first which worked for most mail servers, but a few following RFC more to the line didn’t want to deliver mails (1&1 recently switched their mail server configuration)
- those problems have been corrected
No I did use a few tests on the web for DNS problems. But nothing looked too bad so far. Asking the DNS servers of UPS or Digi-Key for the contronix.de records looks fine too.
Now I have a major problem: I do not have access to servers which fail to deliver mail to us. And in organizations like UPS or Digi-Key you won’t be able to get to talk to IT staff that could help you analyze the problems… :(
Where should I look now?
For documentation current dig outputs:
dig contronix.de ANY
; <<>> DiG 9.4.2-P2 <<>> @ns1.first-ns.de contronix.de ANY
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49086
;; flags: qr aa rd; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 2
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;contronix.de. IN ANY
;; ANSWER SECTION:
contronix.de. 86400 IN SOA ns1.first-ns.de. postmaster.robot.first-ns.de. 2009081802 14400 1800 1209600 10800
contronix.de. 86400 IN TXT "v=spf1 mx a:hetzner.cntx.de a:mail.contronix.de ~all"
contronix.de. 86400 IN AAAA 2001:6f8:900:748::2
contronix.de. 86400 IN MX 10 mail.contronix.de.
contronix.de. 86400 IN NS robotns3.second-ns.com.
contronix.de. 86400 IN NS robotns2.second-ns.de.
contronix.de. 86400 IN NS ns1.first-ns.de.
contronix.de. 86400 IN A 78.46.78.10
;; ADDITIONAL SECTION:
mail.contronix.de. 86400 IN A 78.47.155.180
ns1.first-ns.de. 86400 IN A 213.239.242.238
;; Query time: 32 msec
;; SERVER: 213.239.242.238#53(213.239.242.238)
;; WHEN: Tue Aug 18 13:44:26 2009
;; MSG SIZE rcvd: 341dig mail.contronix.de ANY
; <<>> DiG 9.4.2-P2 <<>> @ns1.first-ns.de mail.contronix.de ANY
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22937
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;mail.contronix.de. IN ANY
;; ANSWER SECTION:
mail.contronix.de. 86400 IN A 78.47.155.180
;; AUTHORITY SECTION:
contronix.de. 86400 IN NS robotns3.second-ns.com.
contronix.de. 86400 IN NS robotns2.second-ns.de.
contronix.de. 86400 IN NS ns1.first-ns.de.
;; ADDITIONAL SECTION:
ns1.first-ns.de. 86400 IN A 213.239.242.238
;; Query time: 33 msec
;; SERVER: 213.239.242.238#53(213.239.242.238)
;; WHEN: Tue Aug 18 13:45:13 2009
;; MSG SIZE rcvd: 163
Hello,
Please email us at webmaster@digikey.com and our IT staff will be more than happy to assist you with your mail issue you are experiencing.
Thank you!
Digi-Key Corporation
Thanks for the quick reply. I sent you an email with some details. Later I might post a follow up with our findings.