Sure it does, last entry in the MX section "Reverse DNS entries for MX records". Also, check out the many tools at the associated site www.dnsstuff.com
-----Original Message----- From: Troy Sosamon [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 19, 2005 1:03 AM To: [email protected] Subject: RE: Witango-Talk: Problems emailing the list resolved (was: A Problem?) What a great utility - www.dnsreport.com. I will keep this one. As comprehensive as this is, it does not check for the reverse name lookup? I use a utility called Dnscape for testing DNS. I don't remember if it is free or costs $39, and I don't know if there is a Mac version. The great thing about this utility is you can point it to a specific DNS server and see what the DNS records look like for a given name. To test for the reverse entry, you just need to lookup the ip address for a server and it will give you back the reverse entry if it is set up. This is an indispensable tool for tracking down DNS problems. DNS 101: Here is a set of DNS records for a domain with a website and mail server. Both the web server and mail servers are running on the same box. You should probably also have an SOA record, but it really does not do anything ns13.zoneedit.com. , protcast.com , protcast.com. , NA , NS , 172368 , ns14.zoneedit.com. , protcast.com , protcast.com. , NA , NS , 172368 , ns13.zoneedit.com. , protcast.com , protcast.com. , NA , NS , 172368 , ns14.zoneedit.com. , protcast.com , protcast.com. , NA , NS , 172368 , 216.122.4.160 , protcast.com , ns13.zoneedit.com. , NA , A , 414 , 209.126.137.108 , protcast.com , ns14.zoneedit.com. , NA , A , 359 , mail.protcast.com. , protcast.com , protcast.com. , A , MX , 7200 , Pref:0 ns14.zoneedit.com. , protcast.com , protcast.com. , NA , NS , 172368 , ns13.zoneedit.com. , protcast.com , protcast.com. , NA , NS , 172368 , 168.103.66.250 , protcast.com , protcast.com. , A , A , 7200 , , , , , , , protcast.com. , 250.66.103.168.in-addr.arpa , 250.66.103.168.in-addr.arpa. , A , PTR , 86400 , authns1.mpls.qwest.net. , 250.66.103.168.in-addr.arpa , 66.103.168.in-addr.arpa. , A , NS , 86400 , authns2.dnvr.qwest.net. , 250.66.103.168.in-addr.arpa , 66.103.168.in-addr.arpa. , A , NS , 86400 , authns3.sttl.qwest.net. , 250.66.103.168.in-addr.arpa , 66.103.168.in-addr.arpa. , A , NS , 86400 , protcast.com. , 250.66.103.168.in-addr.arpa , 250.66.103.168.in-addr.arpa. , A , PTR , 86400 , , , , , , , 168.103.66.250 , www.protcast.com , www.protcast.com. , A , A , 7200 , ns14.zoneedit.com. , www.protcast.com , protcast.com. , A , NS , 7200 , ns13.zoneedit.com. , www.protcast.com , protcast.com. , A , NS , 7200 , 168.103.66.250 , www.protcast.com , www.protcast.com. , A , A , 7200 , In short you need an A record for your web server at www.protcast.com - 168.103.66.250 and an A record to protcast.com - 168.103.66.250. You also want an A record to Mail.protcast.com 168.103.66.250 (if on same box as web server, otherwise it might be 168.103.66.251) and you want an MX record for mail.protcast.com. There are A records for the DNS servers too. Now the In-addr.arpa records MUST be set up by your ISP for your static IP address, and that allows people to look up the ip address and verify your domain name. All of the other records need to be set up on your dns server. Your DNS server could be your own server, hosted by your isp, or hosted by a 3rd party like zonedit.com or domainmonger. When you get your domain name "protcast.com" from a Domain Authority like Network Solutions, you set the name servers up to point to your DNS server wherever it is. I have never found a good book on DNS. I have 3 or 4 and they all stink. It is very hard to get tech support on DNS issues because most of the idiots that work at the ISPs are lucky if they can spell DNS let alone know what it does. Soapbox: I have made it a practice to either buy Domain names from Domain Monger who also has free DNS services or else use NetworkSolutions and DNS on Zone Edit. The DNS servers at qwest go down quite often, and you do not have complete control through their web interface to set up everything for the DNS. Not to mention updates take 48 hours to post. I have found it faster to move domain servers to zone edit and wait for the transfer than get tech support at qwest to make things work properly. Troy -----Original Message----- From: Robert Shubert [mailto:[EMAIL PROTECTED] Sent: Monday, April 18, 2005 10:15 PM To: [email protected] Subject: RE: Witango-Talk: Problems emailing the list resolved (was: A Problem?) Use www.dnsreport.com check out the MX part to see what's what in your DNS settings. -----Original Message----- From: Fogelson, Steve [mailto:[EMAIL PROTECTED] Sent: Monday, April 18, 2005 11:50 PM To: '[email protected]' Subject: RE: Witango-Talk: Problems emailing the list resolved (was: A Problem?) This is off topic request on my part, but since this thread has started, I would like to know what it takes to be compliant and if there is a test of some sort to check each domain name. What are the DNS records needed? A sample of a compliant domain would be great. An off list reply is fine. Thanks Steve Fogelson Internet Commerce Solutions -----Original Message----- From: Customer Support [mailto:[EMAIL PROTECTED] Sent: Monday, April 18, 2005 9:53 PM To: [email protected] Subject: Re: Witango-Talk: Problems emailing the list resolved (was: A Problem?) Ben, On the support queue spam became nearly non existent. Spam went from 150 messages per day to 3. I think the spammers would have a tough time if mail could only be sent/received if an MX record was present and a match on the host name lookup on the reverse lookup worked. An added bonus of the scheme is that those that did spam would be able to be traced and reported to the DNSBLs much easier. For those interested we currently use spamhaus and blitzed. They stop a lot of spam, sadly not everything, and have a very low false positive. Back to sorting through the Nigerian scams, enlargement techniques, cheap meds, pirate software, bank security scams, increase you wealth scams, get a green card offers, russian wives offers, online casinos, anti aging drugs, lottery win scams (We won 53 million pound this morning and all we have to do is send them our banking details) ... Witango Support (the human spam filters) On 19/04/2005, at 12:53 AM, Ben Johansen wrote: > Man I wish all major mail servers would get on board with this switch. > I had to shut it off also, but it would it curb spam I believe over 70% > > > Ben Johansen - http://www.pcforge.com > Authorized Witango & MDaemon Reseller > Available for Web App. Developement > > > -----Original Message----- > From: Customer Support [mailto:[EMAIL PROTECTED] > Sent: Sunday, April 17, 2005 7:14 PM > To: [email protected] > Subject: Witango-Talk: Problems emailing the list resolved (was: A > Problem?) > > Peter, > We had turned on a few extra security settings on our mail server that > would stop it sending/receiving email from/to servers that did not have > a reverse lookups or reverse lookups that mapped back to the mail > server correctly. This cut down on the spam considerably but seems to > have cut a few users of the list. > > We have turned this feature off as there were a lot more email servers > than we expected that do not have correct reverse lookups or have no > reverse lookups at all. > > e.g. > > ; <<>> DiG 9.2.2 <<>> mail.queenb2b.com > ;; global options: printcmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40000 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;mail.queenb2b.com. IN A > > ;; ANSWER SECTION: > mail.queenb2b.com. 86147 IN A 66.107.42.20 > > > ; <<>> DiG 9.2.2 <<>> 66.107.42.20 > ;; global options: printcmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25702 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;66.107.42.20. IN A > > ;; AUTHORITY SECTION: > . 86263 IN SOA a.root-servers.net. > nstld.verisign-grs.com. 2005041701 > 1800 900 604800 763 > > > > Witango Support > > On 16/04/2005, at 5:56 AM, Peter Fogg wrote: > >> I have not received and e-mails from this list since April 9. Have I >> failed to renew my subscription? >> >> Peter - >> >> ______________________________________________________________________ >> _ >> _ >> TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf >> > > _______________________________________________________________________ > _ > TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf > > > _______________________________________________________________________ > _ > TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf > ________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf ________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf ________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf ________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf ________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
