Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » E-mail rejected from good source
  •  
BobH

Messages: 123
Karma: 0
Send a private message to this user
I'm trying to figure out why e-mail is being rejected from a customer of our. The message is
Quote:
[23/Mar/2010 10:31:42] Message from IP address 64.26.60.137, sender <pcriswell<_at_>dixiepac.com> rejected: sender domain does not exist

I've done an MX lookup on the domain and it looks good.
Quote:
Pref Hostname IP Address TTL
10 mx.dixiepac.com 64.26.60.153 60 min

We do have "Block if sender's DNS mail domain is not found in DNS" checked. Is the problem that the dixiepac.com mx record shows 64.26.60.153 which doesn't match the reported source for the e-mail which is 64.26.60.137?

Both of these IP addresses resolve to a website called "siteprotect.com" which makes me think that our customer has someone else hosting their e-mail for them.

If that's the problem, what are my options? If I want to accept their e-mail, is the only option to stop checking for the DNS mail domain?

Thanks.
  •  
freakinvibe

Messages: 1552
Karma: 62
Send a private message to this user
Quote:
Is the problem that the dixiepac.com mx record shows 64.26.60.153 which doesn't match the reported source for the e-mail which is 64.26.60.137?

No, the IP addresses don't have to match. Your KMS couldn't lookup the domain for a reason. Can you do the same nslookup from the KMS? Does it work as well?

Any indication in the warning/error logs?

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
BobH

Messages: 123
Karma: 0
Send a private message to this user
From the KMS, I ran the following command...
Quote:
C:\Documents and Settings\Administrator.WISCOIND>nslookup -q=mx dixiepac.com
Server: main-pdc.wiscoind.local
Address: 172.16.1.15

Non-authoritative answer:
dixiepac.com MX preference = 10, mail exchanger = mx.dixiepac.com

mx.dixiepac.com internet address = 64.26.60.153

It appears the KMS is able to resolve the mailhost for dixiepac.com. Not sure what effect the "Non-authoritative" would have.
  •  
sedell

Messages: 1168
Karma: 1
Send a private message to this user
It's been a while, but I've run into problems in the past where Kerio cached a bad DNS response. All the nslookups looked good, but Kerio was using a different cached value. The DNS server was extremely overworked, and once we got a another server to take the load, we stopped seeing those issues.

The only way I know of to clear the DNS cache is to restart the Kerio service. That should start things fresh. It's a long shot, but how often is it the fix you didn't expect to work is what fixes the problem.

Scott
Previous Topic: Webmail attachments opening twice, no double clicking
Next Topic: IMAP Performance Issue
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sun Nov 19 11:45:03 CET 2017

Total time taken to generate the page: 0.00452 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.