LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 11-27-2006, 12:55 PM   #1
kragemp3
LQ Newbie
 
Registered: May 2004
Location: Washington
Posts: 10

Rep: Reputation: 0
Sending Mail Fails (timesout)


I am using dovecot and sendmail on a FC5 server. Actually I have two servers that are almost identical and they are having the same problems and they started over this weekend. Now no one can sendmail. Basically I think the problem is with sendmail. If I telnet over to the system on port 25 it takes a very long time before I see a response. If I try to send a message manually it works. However it takes so long for a response that my mail client will timeout. I have checked all of my yum logs and nothing has been updated recently. I am very confused on this one especially since it is happening in two different locations. The one thing that these locations have in common is the same ISP. Any ideas?

UPDATE: I have this to the point now where if I telnet to port 25 from outside the building it responds very quickly. If I telnet to port 25 from the internal network it takes quite a while. I have a feeling this has something to do with name resolution. Still no solution.

Thanks,

Kris

Last edited by kragemp3; 11-27-2006 at 02:01 PM.
 
Old 11-27-2006, 02:45 PM   #2
chort
Senior Member
 
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660

Rep: Reputation: 75
It most likely is name resolution as you guess.

What DNS servers are the sendmail servers using?

If you log in to the sendmail servers with SSH, can you perform DNS queries?

What about reverse DNS queries?

Have any firewall changes been made, maybe to block outbound traffic?

Have the IP addresses of the internet networks changed?
 
Old 11-27-2006, 02:51 PM   #3
kragemp3
LQ Newbie
 
Registered: May 2004
Location: Washington
Posts: 10

Original Poster
Rep: Reputation: 0
It most likely is name resolution as you guess.

What DNS servers are the sendmail servers using?
- I am using DNS server provided by my ISP. Do you want the ip address of those servers?

If you log in to the sendmail servers with SSH, can you perform DNS queries?
- I can ping servers by name and the address resolution works. Is there another method for testing dns queries?

What about reverse DNS queries?
- I am a little hazy on what to do here. How do I do a reverse DNS query?

Have any firewall changes been made, maybe to block outbound traffic?
- No changes here. Although our isp had some problems over the weekend. I am not sure what they were.

Have the IP addresses of the internet networks changed?
- These are sill the same as always.

I think it may have something to do with the reverse dns lookup? If I am on the server and I try to telnet to localhost 25 I get connected to sendmail instantly. However if I telnet to 192.168.1.4 25 then it will take about 30 seconds to connect to sendmail.

Last edited by kragemp3; 11-27-2006 at 02:57 PM.
 
Old 11-27-2006, 03:33 PM   #4
chort
Senior Member
 
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660

Rep: Reputation: 75
Sounds like your ISP may have started filtering requests for reverse DNS on non-routable IPs.

What I mean is, if you do a reverse DNS lookup for the IP: 192.168.1.4, your ISP is not going to know the right answer. That IP address is non-routable and is being used all over the world by thousands of companies on their internal network. It can never exist on the open Internet, and thus your ISP can't return an answer for it. IANA resolves these requests to prisoner.iana.org, but recently it seems that due to some concerns over cache poisoning, a lot of DNS operators have stopped answering requests for such reserved IPs.

For a solution, you could either setup your own DNS servers internally to be authoritative just for the reserved IP ranges and forward all other requests to your ISP's DNS server, or you could use a script to add every IP address in your internal network to the /etc/hosts file on each mail server. It would look something like:

Code:
192.168.0.0 reversedns.mydomain.com
192.168.0.1 reversedns.mydomain.com
192.168.0.2 reversedns.mydomain.com
...
192.168.1.0 reversedns.mydomain.com
192.168.1.1 reversedns.mydomain.com
192.168.1.2 reversedns.mydomain.com
...
192.168.254.254 reversedns.mydomain.com
You could also see if it's possible to turn off the reverse DNS features in sendmail so it wouldn't time-out waiting for the answer.
 
Old 11-29-2006, 11:30 AM   #5
kragemp3
LQ Newbie
 
Registered: May 2004
Location: Washington
Posts: 10

Original Poster
Rep: Reputation: 0
Fixed

Ok I setup a dns server for myself and this started working perfectly. Thanks for the help.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Postfix mail transfer agent not sending mail locally or to other servers sketelsen Linux - Software 3 02-09-2006 11:16 AM
Cron mail sending using outside SMTP mail server Utah Linux - Software 6 08-24-2005 07:44 PM
MySQL timesout when booting up after updating RH9.0 to Fedora Nytehawk Fedora - Installation 1 06-05-2004 11:45 AM
sending mail between two mail server !! hitesh_linux Linux - General 3 12-14-2003 12:53 PM
Sending an automatic mail using bash + mail Minuteman Linux - Software 4 08-21-2003 12:49 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 08:44 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration