Article View: pl.comp.os.linux.sieci
Article #231844554 Client address rejected: Access denied / 450 Sender Rejected: Domain Not Found (in reply to RCPT TO command)
From: sokolek
Date: Mon, 17 Dec 2007 23:00
Date: Mon, 17 Dec 2007 23:00
285 lines
13066 bytes
13066 bytes
Firma posiada stałe łącze z NASK - całą klasę adresów 195.155.55.0 -
195.155.55.255
Wszystkie komputery w sieci stoją na adresach publicznych z powyższej
klasy
Brama internetowa ma IP 195.155.55.10
Pod adresem 195.155.55.11 chodzi serwer dns, pocztowy, www - host
"apex" - wykupiona domena firma.pl
Z komputerów "klienckich" odrzucana jest poczta wychodząca m. in. na
serwery w aster.pl, tlen.pl, o2.pl
Problem leży chyba w revDNS? Czy ja mam to sam ustawić w plikach
konfiguracyjnych, czy, ponieważ posiadamy całą pulę adresów 0-255
domena odwrotna powinna zostać ustawiona przez dostawcę netu?
Oto komunikaty z pliku syslog:
Dec 16 03:19:05 apex.firma.pl postfix/smtp[15586]: [ID 197553
mail.info] 5A4E935C45: to=<ktos@acn.waw.pl>, orig_to=<ktos@firma.pl>,
relay=barka.aster.pl[212.76.39.185], delay=57350, status=deferred
(host barka.aster.pl[212.76.39.185] said: 450 Sender Rejected: Domain
Not Found (in reply to RCPT TO command))
Dec 16 03:20:35 apex.firma.pl postfix/smtp[15585]: [ID 197553
mail.info] AB73935C44: host barka.aster.pl[212.76.39.185] said: 450
Sender Rejected: Domain Not Found (in reply to RCPT TO command)
Dec 16 03:34:42 apex.firma.pl postfix/smtp[15604]: [ID 197553
mail.info] connect to mx5.go2.pl[193.17.41.45]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:42 apex.firma.pl postfix/smtp[15607]: [ID 197553
mail.info] connect to mx7.go2.pl[193.17.41.47]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:42 apex.firma.pl postfix/smtp[15608]: [ID 197553
mail.info] connect to mx5.go2.pl[193.17.41.45]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:45 apex.firma.pl postfix/smtp[15604]: [ID 197553
mail.info] connect to mx9.go2.pl[193.17.41.123]: server refused to
talk to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:45 apex.firma.pl postfix/smtp[15607]: [ID 197553
mail.info] connect to mx5.go2.pl[193.17.41.45]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:45 apex.firma.pl postfix/smtp[15608]: [ID 197553
mail.info] connect to mx6.go2.pl[193.17.41.46]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:48 apex.firma.pl postfix/smtp[15604]: [ID 197553
mail.info] connect to mx4.go2.pl[193.17.41.44]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:48 apex.firma.pl postfix/smtp[15607]: [ID 197553
mail.info] connect to mx11.go2.pl[193.17.41.141]: server refused to
talk to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:48 apex.firma.pl postfix/smtp[15608]: [ID 197553
mail.info] connect to mx11.go2.pl[193.17.41.141]: server refused to
talk to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:51 apex.firma.pl postfix/smtp[15604]: [ID 197553
mail.info] connect to mx11.go2.pl[193.17.41.141]: server refused to
talk to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:51 apex.firma.pl postfix/smtp[15607]: [ID 197553
mail.info] connect to mx4.go2.pl[193.17.41.44]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:51 apex.firma.pl postfix/smtp[15608]: [ID 197553
mail.info] connect to mx7.go2.pl[193.17.41.47]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:54 apex.firma.pl postfix/smtp[15604]: [ID 197553
mail.info] connect to mx6.go2.pl[193.17.41.46]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:54 apex.firma.pl postfix/smtp[15607]: [ID 197553
mail.info] connect to mx6.go2.pl[193.17.41.46]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:54 apex.firma.pl postfix/smtp[15608]: [ID 197553
mail.info] connect to mx9.go2.pl[193.17.41.123]: server refused to
talk to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:57 apex.firma.pl postfix/smtp[15604]: [ID 197553
mail.info] connect to mx7.go2.pl[193.17.41.47]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:57 apex.firma.pl postfix/smtp[15604]: [ID 197553
mail.info] 1858A35C5A: to=<ktos@tlen.pl>, relay=none, delay=387155,
status=deferred (connect to mx7.go2.pl[193.17.41.47]: server refused
to talk to me: 554 Client address rejected: Access denied )
Dec 16 03:34:57 apex.firma.pl postfix/smtp[15607]: [ID 197553
mail.info] connect to mx9.go2.pl[193.17.41.123]: server refused to
talk to me: 554 Client address rejected: Access denied (port 25)
Dec 16 03:34:57 apex.firma.pl postfix/smtp[15607]: [ID 197553
mail.info] 6F1EC35C6E: to=<inny@tlen.pl>, relay=none, delay=304540,
status=deferred (connect to mx9.go2.pl[193.17.41.123]: server refused
to talk to me: 554 Client address rejected: Access denied )
Dec 16 03:34:57 apex.firma.pl postfix/smtp[15607]: [ID 197553
mail.info] 6F1EC35C6E: to=<jakas2@tlen.pl>, relay=none, delay=304540,
status=deferred (connect to mx9.go2.pl[193.17.41.123]: server refused
to talk to me: 554 Client address rejected: Access denied )
Dec 16 03:34:57 apex.firma.pl postfix/smtp[15608]: [ID 197553
mail.info] connect to mx4.go2.pl[193.17.41.44]: server refused to talk
to me: 554 Client address rejected: Access denied (port 25)
Poza tym błędy, chociaż to chyba jest ustawione, znajdują się również
w pliku messages w /var/adm:
Dec 17 10:47:56 apex.ibprs.pl named[112]: [ID 295310 daemon.notice]
starting. in.named BIND 8.2.2-P5 Tue Jun 26 16:45:43 PDT 2001
Dec 17 10:47:56 apex.ibprs.pl Generic Patch-5.8-June 2001
Dec 17 10:47:56 apex.ibprs.pl inetd[118]: [ID 250139 daemon.error]
100232/rpc/udp version 10: rpcb_set: not started
Dec 17 10:47:57 apex.ibprs.pl named[112]: [ID 295310 daemon.warning]
Zone "0.0.127.in-addr.arpa" (file P/127.0.0): No default TTL set using
SOA minimum instead
Dec 17 10:47:57 apex.ibprs.pl named[112]: [ID 295310 daemon.warning]
Zone "firma.pl" (file P/firma.pl): No default TTL set using SOA
minimum instead
Dec 17 10:47:57 apex.ibprs.pl named[112]: [ID 295310 daemon.warning]
Zone "55.155.195.in-addr.arpa" (file P/55.155.195): No default TTL set
using SOA minimum instead
Dec 17 10:47:57 apex.ibprs.pl named[137]: [ID 295310 daemon.notice]
Ready to answer queries.
Dec 17 10:47:58 apex.ibprs.pl named[137]: [ID 295310 daemon.warning]
check_hints: A records for b.root-servers.net class 1 do not match
hint records
Dec 17 10:47:58 apex.ibprs.pl named[137]: [ID 295310 daemon.warning]
check_hints: A records for j.root-servers.net class 1 do not match
hint records
Dec 17 10:47:58 apex.ibprs.pl named[137]: [ID 295310 daemon.warning]
check_hints: A records for l.root-servers.net class 1 do not match
hint records
Problem leży chyba w revDNS. Poniżej pilk konfiguracyjny named.conf:
options {
directory "/var/named";
# listen-on { 204.152.184.67; 127.0.0.1; };
# query-source address 204.152.184.67 port 53;
pid-file "/var/run/named-res1.pid";
};
controls {
unix "/var/run/ndc-res1" perm 0600 owner 0 group 0;
};
zone "." {
type hint;
file "root.cache";
};
zone "localhost" {
type master;
file "P/localhost";
};
zone "0.0.127.in-addr.arpa" {
type master;
file "P/127.0.0";
};
zone "firma.pl" {
type master;
file "P/firma.pl";
};
zone "55.155.195.in-addr.arpa" {
type master;
file "P/55.155.195";
};
#include "named.conf.rfc1918-stubs";
i poszczególne pliki konfiguracyjne z katalogu /var/named/P
plik root.cache:
; <<>> DiG 8.2 <<>> @f.root-servers.net . ns
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
;; flags: qr aa rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL:
13
;; QUERY SECTION:
;; ., type = NS, class = IN
;; ANSWER SECTION:
. 6D IN NS G.ROOT-SERVERS.NET.
. 6D IN NS J.ROOT-SERVERS.NET.
. 6D IN NS K.ROOT-SERVERS.NET.
. 6D IN NS L.ROOT-SERVERS.NET.
. 6D IN NS M.ROOT-SERVERS.NET.
. 6D IN NS A.ROOT-SERVERS.NET.
. 6D IN NS H.ROOT-SERVERS.NET.
. 6D IN NS B.ROOT-SERVERS.NET.
. 6D IN NS C.ROOT-SERVERS.NET.
. 6D IN NS D.ROOT-SERVERS.NET.
. 6D IN NS E.ROOT-SERVERS.NET.
. 6D IN NS I.ROOT-SERVERS.NET.
. 6D IN NS F.ROOT-SERVERS.NET.
;; ADDITIONAL SECTION:
G.ROOT-SERVERS.NET. 5w6d16h IN A 192.112.36.4
J.ROOT-SERVERS.NET. 5w6d16h IN A 198.41.0.10
K.ROOT-SERVERS.NET. 5w6d16h IN A 193.0.14.129
L.ROOT-SERVERS.NET. 5w6d16h IN A 198.32.64.12
M.ROOT-SERVERS.NET. 5w6d16h IN A 202.12.27.33
A.ROOT-SERVERS.NET. 5w6d16h IN A 198.41.0.4
H.ROOT-SERVERS.NET. 5w6d16h IN A 128.63.2.53
B.ROOT-SERVERS.NET. 5w6d16h IN A 128.9.0.107
C.ROOT-SERVERS.NET. 5w6d16h IN A 192.33.4.12
D.ROOT-SERVERS.NET. 5w6d16h IN A 128.8.10.90
E.ROOT-SERVERS.NET. 5w6d16h IN A 192.203.230.10
I.ROOT-SERVERS.NET. 5w6d16h IN A 192.36.148.17
F.ROOT-SERVERS.NET. 5w6d16h IN A 192.5.5.241
;; Total query time: 10 msec
;; FROM: power.rc.vix.com to SERVER: f.root-servers.net 192.5.5.241
;; WHEN: Thu Jun 3 14:55:57 1999
;; MSG SIZE sent: 17 rcvd: 436
plik localhost:
; localhost.
$TTL 3600
@ in soa localhost. postmaster.localhost. (
1993050801 ;serial
3600 ;refresh
1800 ;retry
604800 ;expiration
3600 ) ;minimum
ns localhost.
a 127.0.0.1
plik 127.0.0:
@ IN SOA apex.firma.pl. hostmaster.firma.pl. (
2007121203 ; Serial
7200 ; Refresh 2 hours
3600 ; Retry 1 hours
2592000 ; Expire 30 days
345600 ; Minimum 4 days
)
IN NS apex.firma.pl.
1 IN PTR localhost.
plik firma.pl:
; DNS authoritative zone for >> firma.pl <<
@ IN SOA firma.pl. admin.firma.pl. (
2007121203 ; Serial
7200 ; Refresh 2 hours
3600 ; Retry 1 hours
2592000 ; Expire 30 days
345600 ; Minimum 4 days
)
IN NS apex.firma.pl.
IN NS eomer.nask.waw.pl.
IN MX 0 apex.firma.pl.
loghost. CNAME localhost.
;------------------------------------------------------------
;
; Hosts sorted alphabetically.
;
;------------------------------------------------------------
apex IN A 195.155.55.11
IN MX 0 apex.firma.pl.
dzial1 IN CNAME apex.firma.pl.
dzial2 IN CNAME apex.firma.pl.
oddzial1 IN CNAME apex.firma.pl.
oddzial2 IN CNAME apex.firma.pl.
www IN CNAME apex.firma.pl.
i plik 55.155.195:
@ IN SOA apex.firma.pl. hostmaster.firma.pl. (
2007121203 ; Serial
7200 ; Refresh 2 hours
3600 ; Retry 1 hours
2592000 ; Expire 30 days
345600 ; Minimum 4 days
)
IN NS apex.firma.pl.
11 IN PTR apex.firma.pl.
ew. co gdzie jeszcze podopisywać żeby ten sam serwer (apex
195.155.55.11) obsługiwał również domenę firma.eu (wykupiona,
zarejestrowana i przekierowana na ten adres)
Technical Details
Message-ID:
<002c6743-9f81-4b52-b1d1-9cd723a33409@s19g2000prg.googlegroups.com>Path:
mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.rmf.pl!agh.edu.pl!news.agh.edu.pl!news.onet.pl!lublin.pl!uw.edu.pl!newsgate.cistron.nl!xs4all!feeder5.cambrium.nl!feeder6.cambrium.nl!feed.tweaknews.nl!border2.nntp.ams.giganews.com!nntp.giganews.com!newsfeed101.telia.com!nf02.dk.telia.net!out04b.usenetserver.com!news.usenetserver.com!in02.usenetserver.com!news.usenetserver.com!postnews.google.com!s19g2000prg.googlegroups.com!not-for-mailShow Full Headers
Complete Article Headers
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.rmf.pl!agh.edu.pl!news.agh.edu.pl!news.onet.pl!lublin.pl!uw.edu.pl!newsgate.cistron.nl!xs4all!feeder5.cambrium.nl!feeder6.cambrium.nl!feed.tweaknews.nl!border2.nntp.ams.giganews.com!nntp.giganews.com!newsfeed101.telia.com!nf02.dk.telia.net!out04b.usenetserver.com!news.usenetserver.com!in02.usenetserver.com!news.usenetserver.com!postnews.google.com!s19g2000prg.googlegroups.com!not-for-mail From: sokolek <sokolek-1978@tlen.pl> Newsgroups: pl.comp.os.linux.sieci Subject: 554 Client address rejected: Access denied / 450 Sender Rejected: Domain Not Found (in reply to RCPT TO command) Date: Mon, 17 Dec 2007 15:00:23 -0800 (PST) Organization: http://groups.google.com Lines: 287 Message-ID: <002c6743-9f81-4b52-b1d1-9cd723a33409@s19g2000prg.googlegroups.com> NNTP-Posting-Host: 89.76.217.70 Mime-Version: 1.0 X-Trace: posting.google.com 1197932423 8919 127.0.0.1 (17 Dec 2007 23:00:23 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Mon, 17 Dec 2007 23:00:23 +0000 (UTC) Complaints-To: groups-abuse@google.com Injection-Info: s19g2000prg.googlegroups.com; posting-host=89.76.217.70; posting-account=IIUwpQoAAADP0bsCm3VoyqMHNwRpFIrc User-Agent: G2/1.0 X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11,gzip(gfe),gzip(gfe) Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit