¿ªÔÆÌåÓý

Mysterious delivery failure reason


SBL webmaster
 

Hi --

I have a user who hasn't been receiving messages from our group for the past
several days, following a slight mix-up in his ISP account billing.

On the website, under his "Email Delivery History", it gives the reason the
most recent delivery attempt failed as:

MX lookup returned: lookup mpeks.tomsk.su on 173.230.155.5:53: server misbehaving

"Misbehaving" is not very descriptive. Does anyone know what this is really
indicating?

Also, I can't find any link between the user's domain name and the IP address
173.230.155.5. A reverse lookup on the address returns

resolver05.fremont.linode.com.

Is this somehow associated with groups.io itself?

(I have sent substantially the same message to <[email protected]>. But maybe
someone here has seen this before and has some suggestions.)

-- Dave Tweed
SBL webmaster


 

Dave,

? ?MX lookup returned: lookup on : server misbehaving

"Misbehaving" is not very descriptive. Does anyone know what this is really
indicating?

For a usual rejection case That text (and the three-digit code that should have preceded it) would have been issued by the member's email service during the connection from Groups.io. So most likely that service would have to be asked what it means.

But in particular, port 53 in that IP address suggests that the receiving service mistook Groups.io as its DNS service provider, and attempted to look up that domain there. That's one seriously confused receiver.

Also, I can't find any link between the user's domain name and the IP address
173.230.155.5. A reverse lookup on the address returns

? ?.

Is this somehow associated with itself?

Yes, Linode is a commercial service hosting Groups.io's web and mail servers.
(I have sent substantially the same message to <[email protected]>. But maybe
someone here has seen this before and has some suggestions.)
?
Good. Groups.io will want to make sure that its servers have the correct DNS entries in place. Or that there wasn't a glitch in the transaction with the receiver's service.

But most likely this is not a Groups.io problem. It sounds like the recipient's server is rather confused about how to authenticate the message.
Shal

--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


 

On Fri, Oct 5, 2018 at 05:43 PM, SBL webmaster wrote:
"Misbehaving" is not very descriptive. Does anyone know what this is really
indicating?
Looks to my as if a nameserver somewhere along the line could not resolve the provided domain into an IP address.

Google cannot find it either. I'm surprised that this tld is still being used. Try tomsk.ru instead.

Hope this helps,
Bruce?
--
The system Help is your friend.??/static/help


 

Yes, that does look odd and it could be a misbehaving dns server.? Be nice if you would post the resolution from support on this.
The MS lookup is:
> set type=mx
> mpeks.tomsk.su
Server:? google-public-dns-a.google.com
Address:? 8.8.8.8
?
Non-authoritative answer:
mpeks.tomsk.su? MX preference = 10, mail exchanger = admin.sibptus.ru

The IP address of the mail server is:
> set type=a
> admin.sibptus.ru
Server:? google-public-dns-a.google.com
Address:? 8.8.8.8
?
Non-authoritative answer:
Name:? ? admin.sibptus.ru
Address:? 95.179.154.55
So the lookup works on google dns servers at the present time.
Toby


 

MX lookup returned: lookup mpeks.tomsk.su on 173.230.155.5:53: server misbehaving
The :53 means that the error was during a NS lookup. The domain mpeks.tomsk.su currently has no NS records:

~ $ dig mpeks.tomsk.su ns
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7063
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

The "ANSWER: 0" means zero NS records. It's not normal, it confuses groups.io software. Consider email addresses @ mpeks.tomsk.su currently invalid, misconfigured. A NS check tool finds multiple errors:


Coincidentally, the mail admin with an address @ mpeks.tomsk.su yesterday posted to the Russian-language mailing list for users of mail server software "Exim" I participate in:

I'll notify him.


SBL webmaster
 

Toby Kraft <toby@...> wrote:
Yes, that does look odd and it could be a misbehaving dns server.
Be nice if you would post the resolution from support on this.
Thanks for all of the responses! The problem seems to have resolved on its
own, and we'll be keeping an eye on it for a while to see whether it recurs.

I never heard anything from <[email protected]>, however.

-- Dave Tweed
SBL webmaster