>Is DNS Expert what you'd rec'd for someone who's just been thrust into
>handling our DNS duties?
yeah, unfortunately, they dropped the amateur one-zone-at-a-time
version for $180 or so and now do only the Pro
all-the-zones-U-can-eat version @ twice the price. sorry
>I use Sam Spade to help me at this point
yes, a very fine too. See my bind resources page.
> but sometimes I have a question that I need help on. I do search
> the web dns sites and read thru material I find, but I'd really
> like to have something to help check things over and "troubleshoot", etc.
dig 8.3 for Win32 is on my site. It really is tbe best thing asking
one question at time.
>Using FBLI DNS Software for both pri and sec (but usually edit the zone
>files myself with Notepad lately) :>)
FB has a good product there. Vive le Quebec libre!! LOL
>Question Example: (as long as I'm here)
yes, sure, a stitch in time gathers no moss...
>If an IP has 2 A records associate with it, is it the first one listed in
>the reverse record file taht will always show up?
BIND will return the first PTR it finds for an ip, so there's no use
in have multiple PTR's for one ip. Other DNS's might do something else.
>Like if AOL does a reverse on acs3.cyberbounty.com it gets
>adserver.cyberbounty.com, I just changed it to list
>acs3.cyberbounty.com as the first record, adserver
>second. Whats the rule for this?
With virtual servers being all the rage, the best you can for reverse is:
1. at least have the reverse zone defined (many aren't) for your mail
server's ip.
2. if possible, have the ip's PTR hostname match the A record for
that hostname. impossible to do with dozens of virtual mail hosts
behind one ip.
3. have your EHLO/HELO hostname in DNS A and MX records
4. try to have you ehlo/helo hostname's ip a)exist as A and DNS
records, and b) have it's A record match your your imail's ip address.
All the above is covered on my "Is my DNS a Mess?" page.
btw, yet another advantage of IMGate is that with all your Imail
domains relaying their output through IMGate, IMGate has no "virtual"
hosts. It's the reeyuhl thang. (gotta practice my Texan just in case
Gee Dubya Shrub gets "elected")
dig go2france.com mx
; <<>> DiG 8.3 <<>> go2france.com mx
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 6
;; QUERY SECTION:
;; go2france.com, type = MX, class = IN
;; ANSWER SECTION:
go2france.com. 1D IN MX 10 mgw2.meiway.com.
go2france.com. 1D IN MX 5 mgw1.meiway.com.
;; ADDITIONAL SECTION:
mgw2.meiway.com. 1D IN A 212.73.210.74
mgw1.meiway.com. 1D IN A 212.73.210.75
and
gw0# dig -x 212.73.210.75
; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4
;; QUERY SECTION:
;; 75.210.73.212.in-addr.arpa, type = ANY, class = IN
;; ANSWER SECTION:
75.210.73.212.in-addr.arpa. 1D IN PTR mgw1.meiway.com.
So IMgate sorta "proxies" for all my Imail domains, and IMgate's
forward and reverse match perfectly. Nobody rejects any of our
domains for bad reverse. Just can't achieve this with a buncha
virtual mailhosts behind one ip. plus our ehlo/helo hostname has ip
adress of our sender machine.
Just for yuks, here's a section of my IMGate daily report for 16
November, showing that postifix found these senders (towards us) to be uncool:
Warnings
--------
qmgr
1 valid_hostname: invalid character 225(decimal): pginform?tica.es
smtp
1 valid_hostname: numeric hostname: 195.33.64.205
smtpd
4 193.252.19.58: hostname smtp-abo-5.wanadoo.fr
verification fail...
4 63.82.229.165: hostname host165.ebaseweb.com
verification faile...
2 207.240.68.41: hostname ww3.rotonews.com verification
failed: H...
2 207.232.85.251: hostname c2k.dsl.radiks.net
verification failed...
1 216.223.14.249: hostname e-it.com2 verification failed:
Host no...
1 209.187.174.42: hostname mail-a4.dc.bluemt.net
verification fai...
1 194.79.169.131: hostname mail.joncoux.com verification
failed: ...
That's not too many, but big ISP's with IMGate have their SMTPD
report section run on for pages and pages.
The smtpd section lists all the sending servers I could reject if I
wanted to be a hard@ss. btw, Wanadoodoo is the France Telecom ISP.
Len
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
