From owner-freebsd-current@freebsd.org Thu Feb 27 18:18:06 2020 Return-Path: Delivered-To: freebsd-current@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 58439249570 for ; Thu, 27 Feb 2020 18:18:06 +0000 (UTC) (envelope-from bsd-lists@BSDforge.com) Received: from udns.ultimatedns.net (static-24-113-41-81.wavecable.com [24.113.41.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "ultimatedns.net", Issuer "Let's Encrypt Authority X3" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 48T1B41Q1pz3JY7 for ; Thu, 27 Feb 2020 18:18:03 +0000 (UTC) (envelope-from bsd-lists@BSDforge.com) Received: from udns.ultimatedns.net (localhost [IPv6:0:0:0:0:0:0:0:1]) by udns.ultimatedns.net (8.15.2/8.15.2) with ESMTPS id 01RIIE8t091753 (version=TLSv1.2 cipher=DHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Thu, 27 Feb 2020 10:18:20 -0800 (PST) (envelope-from bsd-lists@BSDforge.com) X-Mailer: Cypht MIME-Version: 1.0 In-Reply-To: <20200227155655.GA1730@mail.bsd4all.net> From: Chris Reply-To: bsd-lists@BSDforge.com To: freebsd-current Subject: Re: lame reverse DNS? Date: Thu, 27 Feb 2020 10:18:20 -0800 Message-Id: <479c542c953ec5d9edf96ea1d33940c3@udns.ultimatedns.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Rspamd-Queue-Id: 48T1B41Q1pz3JY7 X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of bsd-lists@BSDforge.com has no SPF policy when checking 24.113.41.81) smtp.mailfrom=bsd-lists@BSDforge.com X-Spamd-Result: default: False [0.68 / 15.00]; ARC_NA(0.00)[]; HAS_REPLYTO(0.00)[bsd-lists@BSDforge.com]; XM_UA_NO_VERSION(0.01)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; IP_SCORE(-0.30)[ip: (-0.56), ipnet: 24.113.0.0/16(-0.28), asn: 11404(-0.62), country: US(-0.05)]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-current@freebsd.org]; DMARC_NA(0.00)[BSDforge.com]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-0.997,0]; NEURAL_SPAM_MEDIUM(0.07)[0.073,0]; REPLYTO_ADDR_EQ_FROM(0.00)[]; TO_DN_ALL(0.00)[]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:11404, ipnet:24.113.0.0/16, country:US]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Feb 2020 18:18:06 -0000 On Thu, 27 Feb 2020 16:56:55 +0100 Herbert J=2E Skuhra herbert@gojira=2Eat said > On Thu, Feb 27, 2020 at 10:31:59AM +0100, Kurt Jaeger wrote: > > Hi! > >=20 > > > The problem has been resolved but I still sometimes see "connect from > > > unknown[2610:1c1:1:606c::19:2]" in the maillog (today: 6 of 131 > > > connections)=2E Local unbound issue? > >=20 > > That IPv6 has a valid reverse DNS record, so please try to investigate=2E >=20 > Yes, I know=2E Otherwise it would fail permanently=2E >=20 > - Postfix sends two standard queries (PTR) to local unbound within 5 > seconds (05:51:23 and 05:51:28) > - Unbound sends multiple queries to 2610:1c0::1104 and 2610:1c0::1204 > without receiving a reply (05:51:23 - 05:51:41) > - Unbound replies twice with Server failure (05:51:53) >=20 > I have this issue only with [2610:1c1:1:606c::19:2]: >=20 > # grep " connect from unknown" /var/log/maillog > Feb 27 03:37:53 mail postfix/smtpd[93921]: connect from > unknown[2610:1c1:1:606c::19:2] > Feb 27 08:40:27 mail postfix/smtpd[33354]: connect from > unknown[2610:1c1:1:606c::19:2] > Feb 27 09:43:39 mail postfix/smtpd[41982]: connect from > unknown[2610:1c1:1:606c::19:2] > Feb 27 10:53:38 mail postfix/smtpd[4960]: connect from > unknown[2610:1c1:1:606c::19:2] > Feb 27 15:30:28 mail postfix/smtpd[87816]: connect from > unknown[2610:1c1:1:606c::19:2] > Feb 27 15:50:30 mail postfix/smtpd[98816]: connect from > unknown[2610:1c1:1:606c::19:2] >=20 > I've already set cache-min-ttl to 3600=2E FreeBSD=2Eorg uses ttl=3D60=2E Why? > I'll try to set do-ip6=3Dno=2E Meanwhile I've whitelisted the IPv6 address > in postfix=2E=20 >=20 FWIW I thought I might chime in here to report that I'm also seeing *periodic* failures=2E IOW lookups fail, but aren't *completely* fatal=2E :) --Chris FreeBSD 14=2E0-FUTURE #0=2E000 cray256 > --=20 > Herbert > _______________________________________________ > freebsd-current@freebsd=2Eorg mailing list > https://lists=2Efreebsd=2Eorg/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd=2Eorg= "