DNS / Bind Problem....

peter_robb · 01-12-2006, 04:17 PM

I would only change Darin's versions, the SOA hostname can go back to mind.hingedmind.com

I've sent 3 emails to sapient@ (one under TLS) to check the server. Have a look at the email headers and envelope for any transaction errors.
The next step will be testing the AUTH with TLS to check sasl and mysql.
Check the sasl log files for errors/connections.

Are you able to get responses from the dns server with dig?

Sapient · 01-12-2006, 08:24 PM

Darin,
Thank you for the time and response. Yes.. it is a SquirrelMail session in a browser tab.

mind:~ # dig -t mx mail.hingedmind.com

; <<>> DiG 9.2.3 <<>> -t mx mail.hingedmind.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2722
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;mail.hingedmind.com. IN MX

;; AUTHORITY SECTION:
hingedmind.com. 7200 IN SOA NS57.WORLDNIC.com. namehost.WORLDNIC.com. 2006010200 10800 3600 604800 7200

;; Query time: 83 msec
;; SERVER: 24.205.224.35#53(24.205.224.35)
;; WHEN: Thu Jan 12 17:47:51 2006
;; MSG SIZE rcvd: 96

mind:~ # dig any hingedmind.com

; <<>> DiG 9.2.3 <<>> any hingedmind.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24161
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;hingedmind.com. IN ANY

;; ANSWER SECTION:
hingedmind.com. 7200 IN SOA NS57.WORLDNIC.com. namehost.WORLDNIC.com. 2006010200 10800 3600 604800 7200
hingedmind.com. 7200 IN A 24.176.227.138
hingedmind.com. 7200 IN NS NS57.WORLDNIC.com.
hingedmind.com. 7200 IN NS NS58.WORLDNIC.com.

;; AUTHORITY SECTION:
hingedmind.com. 7200 IN NS NS58.WORLDNIC.com.
hingedmind.com. 7200 IN NS NS57.WORLDNIC.com.

;; Query time: 82 msec
;; SERVER: 24.205.224.35#53(24.205.224.35)
;; WHEN: Thu Jan 12 17:47:59 2006
;; MSG SIZE rcvd: 168

Log:

Jan 12 16:51:34 mind postfix/qmgr[9788]: C7F71396B1: from=<peter@newproject.pl>, size=1323, nrcpt=1 (queue active)
Jan 12 16:51:34 mind postfix/qmgr[9788]: DE160396C0: from=<peter@newproject.pl>, size=1104, nrcpt=1 (queue active)
Jan 12 16:51:34 mind postfix/qmgr[9788]: F210C396BC: from=<peter@newproject.pl>, size=1541, nrcpt=1 (queue active)
Jan 12 16:51:35 mind postfix/pipe[7416]: DE160396C0: to=<sapient@hingedmind.com>, relay=maildrop, delay=11064, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user. )
Jan 12 16:51:35 mind postfix/pipe[7417]: F210C396BC: to=<sapient@hingedmind.com>, relay=maildrop, delay=11186, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user. )
Jan 12 16:51:35 mind postfix/pipe[7372]: C7F71396B1: to=<sapient@hingedmind.com>, relay=maildrop, delay=11331, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user. )

Sapient · 01-12-2006, 09:11 PM

Jan 12 07:16:44 mind postfix/smtpd[11831]: warning: 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]: SASL PLAIN authentication failed
Jan 12 09:04:38 mind postfix/smtpd[21688]: warning: mail.vadino.com[198.63.210.133] sent non-SMTP command: GET /proxy-srvc/mirror.php?secret=222522053 HTTP/1.1

Sapient · 01-13-2006, 08:06 AM

I have been going through the setup and configuration again (one line at a time)... I came across this. I verified that smtpd.conf is correct. However, I am curious about this line:

sql_select: select clear from postfix_users where email='%u@%r' and smtpaccess='Y'

It appears the error I am getting now is related... Of course this command does not work in sql or I should say returns an empty row (i.e. %u@%r=null). I am not sure how CYRUS SASL translates it.

-thanks

mind:/home/vmail/hingedmind.com # mailq
-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
C7F71396B1 1323 Thu Jan 12 13:42:44 peter@newproject.pl
(temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user.)
sapient@hingedmind.com

DE160396C0 1104 Thu Jan 12 13:47:11 peter@newproject.pl
(temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user.)
sapient@hingedmind.com

F210C396BC 1541 Thu Jan 12 13:45:09 peter@newproject.pl
(temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user.)
sapient@hingedmind.com
-- 4 Kbytes in 3 Requests.

CYRUS SASL
write the lines below to /usr/local/lib/sasl2/smtpd.conf file

# smtpd.conf
pwcheck_method: auxprop
auxprop_plugin: sql
mech_list: plain login

sql_engine: mysql
sql_hostnames: localhost
sql_user: vmailuser
sql_passwd: password123
sql_database: mail
sql_select: select clear from postfix_users where email='%u@%r' and smtpaccess='Y'

Sapient · 01-13-2006, 08:20 AM

I stopped and started all the processes. This was in the log.

Jan 13 06:11:02 mind authdaemond: libauthpam.so: cannot open shared object file: No such file or directory

I verified that pam was loaded and it is. I did a search on *libauthpam* and nothing to be found.

...

Darin · 01-13-2006, 11:53 AM

Quote:

Originally Posted by Sapient

;; AUTHORITY SECTION:
hingedmind.com. 7200 IN SOA NS57.WORLDNIC.com. namehost.WORLDNIC.com. 2006010200 10800 3600 604800 7200

Sapient,
That says the system you did the dig query from isn't using the DNS server you set up. You can either use that DNS server, by telling your domain registrar to use that host for DNS, or you can update your DNS info with the registrar. The info you want to update is to add an MX record pointing to your system. You can also just point your resolv.conf to the DNS server you set up, but that will mean only systems specifically pointed at your DNS server will know about the MX record.

The simplest thing would be just to ask your registrar to add an MX record:

MX 10 mail.hingedmind.com.

Which should work as it appears you already have wildcarding so [anything].hingedmind.com will resolve to your system.

Sapient · 01-13-2006, 02:44 PM

Quote:

Originally Posted by Darin

Sapient,
That says the system you did the dig query from isn't using the DNS server you set up. You can either use that DNS server, by telling your domain registrar to use that host for DNS, or you can update your DNS info with the registrar. The info you want to update is to add an MX record pointing to your system. You can also just point your resolv.conf to the DNS server you set up, but that will mean only systems specifically pointed at your DNS server will know about the MX record.

The simplest thing would be just to ask your registrar to add an MX record:

MX 10 mail.hingedmind.com.

Which should work as it appears you already have wildcarding so [anything].hingedmind.com will resolve to your system.

Thanks Darin,
I actually had that configured and changed it trying to trouble shoot this. And... forgot... :|

I will give it a try... thank you.

Sapient · 01-14-2006, 05:24 AM

I went out and added the mx record to the account. I waited over night to be sure it took. ...

mind:/usr/local # dig -t mx mail.hingedmind.com

; <<>> DiG 9.2.3 <<>> -t mx mail.hingedmind.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48130
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;mail.hingedmind.com. IN MX

;; AUTHORITY SECTION:
hingedmind.com. 7200 IN SOA NS57.WORLDNIC.com. namehost.WORLDNIC.com. 2006011301 10800 3600 604800 7200

;; Query time: 80 msec
;; SERVER: 24.205.224.35#53(24.205.224.35)
;; WHEN: Sat Jan 14 03:20:48 2006
;; MSG SIZE rcvd: 96

Sapient · 01-14-2006, 05:48 AM

In the log I am still seeing.. I sent this from another account.

Jan 14 03:01:58 mind postfix/qmgr[32474]: 6E271396DF: from=<bemiller@ccsi.com>, size=990, nrcpt=1 (queue active)
Jan 14 03:01:58 mind postfix/pipe[7744]: 6E271396DF: to=<sapient@hingedmind.com>, relay=maildrop, delay=28999, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user. )

Sapient · 01-14-2006, 08:45 AM

Message Log:

Jan 14 06:30:30 mind pop3[32515]: Fatal error: invalid option name on line 23 of configuration file
Jan 14 06:30:30 mind master[26352]: process 32515 exited, status 75
Jan 14 06:30:30 mind master[26352]: service pop3 pid 32515 in READY state: terminated abnormally
Jan 14 06:30:30 mind master[32516]: about to exec /usr/lib/cyrus/bin/pop3d
Jan 14 06:30:30 mind pop3[32516]: Fatal error: invalid option name on line 23 of configuration file
Jan 14 06:30:30 mind master[26352]: process 32516 exited, status 75
Jan 14 06:30:30 mind master[26352]: service pop3 pid 32516 in READY state: terminated abnormally
Jan 14 06:30:30 mind master[32517]: about to exec /usr/lib/cyrus/bin/pop3d
Jan 14 06:30:30 mind pop3[32517]: Fatal error: invalid option name on line 23 of configuration file
Jan 14 06:30:30 mind master[26352]: process 32517 exited, status 75
Jan 14 06:30:30 mind master[26352]: service pop3 pid 32517 in READY state: terminated abnormally
Jan 14 06:30:30 mind master[32518]: about to exec /usr/lib/cyrus/bin/pop3d
Jan 14 06:30:30 mind pop3[32518]: Fatal error: invalid option name on line 23 of configuration file
__________________

Sapient · 01-14-2006, 09:20 AM

...and the saga continues:

Why is this log continuing to fill when I have stopped the following?

/etc/init.d/mysql.server stop
/usr/local/sbin/authdaemond stop
/usr/lib/courier-imap/libexec/imapd.rc stop
/usr/lib/courier-imap/libexec/pop3d.rc stop
postfix stop

I cannot find where it would be a problem... Of course I am assuming master

# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - n - - smtpd
#smtps inet n - n - - smtpd
# -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission inet n - n - - smtpd
# -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes -o smtpd_etrn_restrictions=reject
#628 inet n - n - - qmqpd
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - n 300 1 oqmgr
#tlsmgr fifo - - n 300 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - n - - showq
error unix - - n - - error
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
#localhost:10025 inet n - n - - smtpd -o content_filter=

maildrop unix - n n - - pipe
flags=Ru user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
cyrus unix - n n - - pipe
user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
vscan unix - n n - 10 pipe
user=vscan argv=/usr/sbin/amavis ${sender} ${recipient}
procmail unix - n n - - pipe
flags=R user=nobody argv=/usr/bin/procmail -t -m /etc/procmailrc ${sender} ${recipient}
scache unix - - n - 1 scache
discard unix - - n - - discard
tlsmgr unix - - n 1000? 1 tlsmgr

Jan 14 07:06:20 mind master[26352]: process 29592 exited, status 75
Jan 14 07:06:20 mind master[26352]: service pop3 pid 29592 in READY state: terminated abnormally
Jan 14 07:06:20 mind master[29593]: about to exec /usr/lib/cyrus/bin/pop3d
Jan 14 07:06:20 mind pop3[29593]: Fatal error: invalid option name on line 23 of configuration file
Jan 14 07:06:20 mind master[26352]: process 29593 exited, status 75
Jan 14 07:06:20 mind master[26352]: service pop3 pid 29593 in READY state: terminated abnormally
Jan 14 07:06:20 mind master[29594]: about to exec /usr/lib/cyrus/bin/pop3d
Jan 14 07:06:20 mind pop3[29594]: Fatal error: invalid option name on line 23 of configuration file
Jan 14 07:06:20 mind master[26352]: process 29594 exited, status 75
Jan 14 07:06:20 mind master[26352]: service pop3 pid 29594 in READY state: terminated abnormally
Jan 14 07:06:20 mind master[29595]: about to exec /usr/lib/cyrus/bin/pop3d
Jan 14 07:06:20 mind pop3[29595]: Fatal error: invalid option name on line 23 of configuration file
Jan 14 07:06:20 mind master[26352]: process 29595 exited, status 75
Jan 14 07:06:20 mind master[26352]: service pop3 pid 29595 in READY state: terminated abnormally
Jan 14 07:06:20 mind master[29596]: about to exec /usr/lib/cyrus/bin/pop3d
Jan 14 07:06:20 mind pop3[29596]: Fatal error: invalid option name on line 23 of configuration file
Jan 14 07:06:20 mind master[26352]: process 29596 exited, status 75
Jan 14 07:06:20 mind master[26352]: service pop3 pid 29596 in READY state: terminated abnormally
Jan 14 07:06:20 mind master[29597]: about to exec /usr/lib/cyrus/bin/pop3d
Jan 14 07:06:20 mind pop3[29597]: Fatal error: invalid option nam

Sapient · 01-14-2006, 12:46 PM

An Update.

Was able to get rid of the error:
Jan 14 09:26:32 mind authdaemond: modules="authmysql authpam", daemons=5
Jan 14 09:26:32 mind authdaemond: Installing libauthmysql
Jan 14 09:26:32 mind authdaemond: Installation complete: authmysql
Jan 14 09:26:32 mind authdaemond: Installing libauthpam
Jan 14 09:26:32 mind authdaemond: libauthpam.so: cannot open shared object file: No such file or directory

By modifying the following in: /authdaemonrc

Before:
#authmodulelist="authmysql authpam"
After:
authmodulelist="authmysql"

Before:
#authmodulelistorig="authcram authuserdb authpgsql authldap authpipe"
After:
authmodulelistorig="authcustom authcram authuserdb authmysql authpgsql authldap authpipe"

It is not compiled with pam, so?????????? The logs never complained...

Jan 14 10:05:11 mind authdaemond: modules="authmysql", daemons=5
Jan 14 10:05:11 mind authdaemond: Installing libauthmysql
Jan 14 10:05:11 mind authdaemond: Installation complete: authmysql

However, I am back to this error when trying to send. I might add this error was here prior to any changes(read above somewhere way up there). I checked the privs, database, files/configs (again and again).

The passwords are correct etc.

mind:/var/log # mailq
-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
45A66352D2 615 Sat Jan 14 10:20:04 sapient@hingedmind.com
(temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user.)
sapient@hingedmind.com

-- 0 Kbytes in 1 Request.
mind:/var/log #

Jan 14 10:10:41 mind postfix/smtpd[9994]: warning: 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]: SASL PLAIN authentication failed
Jan 14 10:10:41 mind postfix/smtpd[9994]: lost connection after AUTH from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]
Jan 14 10:10:41 mind postfix/smtpd[9994]: disconnect from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]
Jan 14 10:11:11 mind postfix/smtpd[9994]: connect from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]
Jan 14 10:11:11 mind postfix/smtpd[9994]: disconnect from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]
Jan 14 10:11:18 mind postfix/smtpd[9994]: connect from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]
Jan 14 10:11:18 mind postfix/smtpd[9994]: warning: SASL authentication failure: Password verification failed
Jan 14 10:11:18 mind postfix/smtpd[9994]: warning: 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]: SASL PLAIN authentication failed
Jan 14 10:11:18 mind postfix/smtpd[9994]: lost connection after AUTH from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]
Jan 14 10:11:18 mind postfix/smtpd[9994]: disconnect from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]
Jan 14 10:12:36 mind postfix/pickup[9974]: 800B01907D: uid=0 from=<root>
Jan 14 10:12:36 mind postfix/cleanup[10018]: 800B01907D: message-id=<200601141012.36241.sapient@hingedmind.com>
Jan 14 10:12:36 mind postfix/qmgr[9975]: 800B01907D: from=<root@mail.hingedmind.com>, size=502, nrcpt=1 (queue active)
Jan 14 10:12:36 mind postfix/pipe[10025]: 800B01907D: to=<sapient@hingedmind.com>, relay=maildrop, delay=0, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user. )
Jan 14 10:14:38 mind postfix/anvil[10006]: statistics: max connection rate 3/60s for (smtp:24.176.227.138) at Jan 14 10:10:41
Jan 14 10:14:38 mind postfix/anvil[10006]: statistics: max connection count 1 for (smtp:24.176.227.138) at Jan 14 10:10:02
Jan 14 10:14:38 mind postfix/anvil[10006]: statistics: max cache size 1 at Jan 14 10:10:02
Jan 14 10:17:01 mind postfix/pickup[9974]: 0E1DF395AD: uid=0 from=<root>
Jan 14 10:17:01 mind postfix/cleanup[10045]: 0E1DF395AD: message-id=<200601141017.00861.sapient@hingedmind.com>
Jan 14 10:17:01 mind postfix/qmgr[9975]: 0E1DF395AD: from=<root@mail.hingedmind.com>, size=502, nrcpt=1 (queue active)
Jan 14 10:17:01 mind postfix/pipe[10049]: 0E1DF395AD: to=<sapient@hingedmind.com>, relay=maildrop, delay=1, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: You are not a trusted user. )

If one were to poke themself in the eye with a stick and renmove two digits from each hand, it would not get much more difficult...

Sapient · 01-15-2006, 05:32 AM

Now when I attempt to send an email I get this:

Sending failed:
Authentication failed.
Most likely the password is wrong.
The server responded: "Error: authentication failed"
The message will stay in the 'outbox' folder until you either fix the problem (e.g. a broken address) or remove the message from the 'outbox' folder.
The following transport protocol was used:
root@hingedmind.com

From the logs:

Jan 15 03:27:02 mind postfix/smtpd[17835]: connect from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]
Jan 15 03:27:02 mind postfix/smtpd[17835]: warning: SASL authentication failure: Password verification failed
Jan 15 03:27:02 mind postfix/smtpd[17835]: warning: 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]: SASL PLAIN authentication failed
Jan 15 03:27:03 mind postfix/smtpd[17835]: lost connection after AUTH from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]
Jan 15 03:27:03 mind postfix/smtpd[17835]: disconnect from 24-176-227-138.static.snlo.ca.charter.com[24.176.227.138]

Could this be a result of my client configuration? I am using smtp with tls and authentication with password and user id.

Darin · 01-16-2006, 11:44 AM

FYI it looks like your registrar has the correct MX record set now, even though the query you posted showed it didn't

Quote:

mind:/usr/local # dig -t mx mail.hingedmind.com

; <<>> DiG 9.2.3 <<>> -t mx mail.hingedmind.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48130
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

You know, I just remembered something. I have this thing in my firewall ruleset with this note in it, but I can't remember why or where it came from. Despite that, it sounds like it could help with your current problem.

Code:

## Mail protocols
# reject ident probes with tcp reset so you can sent mail to outside
  /sbin/iptables -A INPUT -p tcp --dport 113 -j REJECT

Sapient · 01-16-2006, 06:36 PM

Quote:

Originally Posted by Darin

FYI it looks like your registrar has the correct MX record set now, even though the query you posted showed it didn't

You know, I just remembered something. I have this thing in my firewall ruleset with this note in it, but I can't remember why or where it came from. Despite that, it sounds like it could help with your current problem.

Code:

## Mail protocols
# reject ident probes with tcp reset so you can sent mail to outside
  /sbin/iptables -A INPUT -p tcp --dport 113 -j REJECT

Thanks Darin,
What would that file be called? Having a problem finding it.

You do not think this has anything to do with it?

mind:~ # /etc/init.d/cyrus start
Starting IMAP/POP3 service (cyrus-imapd) failed

Jan 16 16:32:57 mind master[14572]: invalid option name on line 23 of configuration file
Jan 16 16:32:57 mind master[14572]: exiting
Jan 16 16:33:22 mind named[6340]: client 127.0.0.1#1482: query: wmail.ccsi.com IN AAAA