From owner-freebsd-stable@FreeBSD.ORG Thu Aug 1 09:44:16 2013 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id DE78CA24 for ; Thu, 1 Aug 2013 09:44:16 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 7046325D0 for ; Thu, 1 Aug 2013 09:44:16 +0000 (UTC) Received: from rufus.webfusion.com (mail.heartinternet.co.uk [79.170.40.31]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.7/8.14.7) with ESMTP id r719iB9B062991 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for ; Thu, 1 Aug 2013 10:44:12 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) DKIM-Filter: OpenDKIM Filter v2.8.3 smtp.infracaninophile.co.uk r719iB9B062991 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201001-infracaninophile; t=1375350252; bh=MiBN1A4UFHuGFMgD8DEyamn0yhX5SmmFHzLxMg8ab5I=; h=Date:From:To:Subject:References:In-Reply-To; z=Date:=20Thu,=2001=20Aug=202013=2010:44:11=20+0100|From:=20Matthew =20Seaman=20|To:=20freebsd-stable @freebsd.org|Subject:=20Re:=20Strange=20sendmail=20behaviour=20aft er=20upgrade=20to=209.1-BETA2|References:=20=20=20=20= 20=20=20=20=20|In-Reply-To:=20; b=FRfsX3t4zwBAHd1JDUi7QJ/MgYSmce3RgPsofgv/3lUFhK/ci1A92TGVe+/W1N+2G w8WQErXp5T4QAlytRh6R9itzvwmK0kWhaUUzh71V0PbMsU92mVZKykj3deJTkYDJkO KWdBbmE7i7iCSW/rDE7AonUfNjeSeld5fNlUetKE= X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host mail.heartinternet.co.uk [79.170.40.31] claimed to be rufus.webfusion.com Message-ID: <51FA2DEB.40106@infracaninophile.co.uk> Date: Thu, 01 Aug 2013 10:44:11 +0100 From: Matthew Seaman Organization: Infracaninophile User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:17.0) Gecko/20130715 Thunderbird/17.0.7 MIME-Version: 1.0 To: freebsd-stable@freebsd.org Subject: Re: Strange sendmail behaviour after upgrade to 9.1-BETA2 References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.97.8 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.1 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Aug 2013 09:44:16 -0000 On 01/08/2013 09:41, Pavel Timofeev wrote: > to Matthew Seaman > No luck > > root@test:/etc/mail # grep ip /etc/rc.conf > #ipv6_activate_all_interfaces="NO" > #ipv6_network_interfaces="none" > ip6addrctl_enable="YES" > ip6addrctl_policy="ipv4_prefer" > > root@test:/etc/mail # ip6addrctl > Prefix Prec Label Use > ::1/128 50 0 0 > ::/0 40 1 0 > ::ffff:0.0.0.0/96 100 4 0 <<<----**** > 2002::/16 30 2 0 > 2001::/32 5 5 0 > fc00::/7 3 13 0 > ::/96 1 3 0 > fec0::/10 1 11 0 > 3ffe::/16 1 12 0 > Why do you think this hasn't worked? The line I indicate there is for IPv4 mapped addresses in IPv6 (RFC r6052). ie. it says that IPv4 mapped addresses have the highest precedence out of all of the IPv6 routable blocks. For your original problem, where sendmail is asking for an AAAA record for an MX -- you're seeing a sequence of queries where sendmail asks first for the MX and then an AAAA record but no explicit query for an A record? This is not necessarily ignoring the A record: if you look up an MX, usually an A record will be returned in the Additional section. eg: rufus:~:% dig infracaninophile.co.uk IN MX ; <<>> DiG 9.8.4-P2 <<>> infracaninophile.co.uk IN MX ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9434 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;infracaninophile.co.uk. IN MX ;; ANSWER SECTION: infracaninophile.co.uk. 86400 IN MX 10 smtp.infracaninophile.co.uk. infracaninophile.co.uk. 86400 IN MX 10 smtp6.infracaninophile.co.uk. ;; ADDITIONAL SECTION: smtp.infracaninophile.co.uk. 86400 IN A 81.2.117.97 <<<---** ;; Query time: 29 msec ;; SERVER: 192.168.0.252#53(192.168.0.252) ;; WHEN: Thu Aug 1 10:34:28 2013 ;; MSG SIZE rcvd: 99 so no separate query for the A record required. (This behaviour appears to be OS/resolver dependent: on another host that happens to be runnign Linux, I see the A and AAAA records for the domain name servers in the Additional section, rather than the A (or AAAA) records for the MX. Perhaps it's more to do with the version of bind (or unbound or whatever) you're using as your recursive resolver rather than anything else.) Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey JID: matthew@infracaninophile.co.uk