<div dir="auto">Thanks for your efforts! It's definitely a black art.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 8 Dec 2021, 6.43 Gershom B, <<a href="mailto:gershomb@gmail.com">gershomb@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">We migrated our secondary mail server, and have been working on<br>
bringing its reputation back up. As Viktor diagnosed, it also had a<br>
sending IP that did not have a PTR record, and that should now be<br>
resolved, as of last week. But I realized just now that the ptr and<br>
fwd lookup also have to correspond exactly, which they did not. That<br>
should also be now fixed. Further, I've tried to turn off sending most<br>
of our mailinglists through the secondary server, while the<br>
configuration settles down further. Apologies for the delays --<br>
getting a proper email host set up and acquiring proper reputation is<br>
a rather expert task, and I'm far from an expert.<br>
<br>
Cheers,<br>
Gershom<br>
<br>
On Tue, Dec 7, 2021 at 11:12 PM Kim-Ee Yeoh <<a href="mailto:ky3@atamo.com" target="_blank" rel="noreferrer">ky3@atamo.com</a>> wrote:<br>
><br>
> Mailman still isn’t reflecting all mail. Just recently, this arrived in my email:<br>
><br>
> <a href="https://mail.haskell.org/pipermail/haskell-cafe/2021-December/134940.html" rel="noreferrer noreferrer" target="_blank">https://mail.haskell.org/pipermail/haskell-cafe/2021-December/134940.html</a><br>
><br>
> But not the earlier two posts in the same thread:<br>
><br>
> <a href="https://mail.haskell.org/pipermail/haskell-cafe/2021-December/134938.html" rel="noreferrer noreferrer" target="_blank">https://mail.haskell.org/pipermail/haskell-cafe/2021-December/134938.html</a><br>
> <a href="https://mail.haskell.org/pipermail/haskell-cafe/2021-December/134939.html" rel="noreferrer noreferrer" target="_blank">https://mail.haskell.org/pipermail/haskell-cafe/2021-December/134939.html</a><br>
><br>
> What has changed in the email infrastructure recently?<br>
><br>
> On Mon, Nov 22, 2021 at 10:18 PM Gershom B <<a href="mailto:gershomb@gmail.com" target="_blank" rel="noreferrer">gershomb@gmail.com</a>> wrote:<br>
>><br>
>> Thanks! We're looking into this with our host.<br>
>><br>
>> -g<br>
>><br>
>> On Mon, Nov 22, 2021 at 3:34 AM Viktor Dukhovni <<a href="mailto:ietf-dane@dukhovni.org" target="_blank" rel="noreferrer">ietf-dane@dukhovni.org</a>> wrote:<br>
>> ><br>
>> > On Mon, Nov 22, 2021 at 07:33:43AM +0000, Tom Smeding wrote:<br>
>> ><br>
>> > > I got at least one message from Tom Ellis in the Logging conversation,<br>
>> > > one from Joachim Durchholz, and some more. I'm definitely not included<br>
>> > > in the conversation personnally.<br>
>> > ><br>
>> > > I have no idea what might be going wrong, but I think it's not<br>
>> > > forgetting to reply to all.<br>
>> ><br>
>> > [ TL;DR <a href="http://haskell.org" rel="noreferrer noreferrer" target="_blank">haskell.org</a> DNS is misconfigured ]<br>
>> ><br>
>> > I guess I can put my SMTP/DNS guru hat on and explain what is happening.<br>
>> > Here's some (cryptic) data from my logs:<br>
>> ><br>
>> > Nov 22 01:42:13 straasha postfix/smtpd[52426]:<br>
>> > disconnect from unknown[145.40.99.54]<br>
>> > ehlo=2 starttls=1 mail=1<br>
>> > --> rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8<br>
>> ><br>
>> > Nov 22 02:19:13 straasha postfix/smtpd[52686]:<br>
>> > disconnect from unknown[2604:1380:4641:a100::5]<br>
>> > ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7<br>
>> ><br>
>> > Nov 22 02:35:10 straasha postfix/smtpd[53049]:<br>
>> > disconnect from unknown[2604:1380:4641:a100::5]<br>
>> > ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7<br>
>> ><br>
>> > Nov 22 02:42:51 straasha postfix/smtpd[53100]:<br>
>> > disconnect from unknown[145.40.99.54]<br>
>> > ehlo=2 starttls=1 mail=1<br>
>> > --> rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8<br>
>> ><br>
>> > The first and last message were rejected: "rcpt=0/1, data=0/1" mean that<br>
>> > "RCPT TO" and "DATA" commands were refused. The middle two messages<br>
>> > were accepted.<br>
>> ><br>
>> > The reason is DNS misconfiguration of the of <a href="http://mta1.haskell.org" rel="noreferrer noreferrer" target="_blank">mta1.haskell.org</a>:<br>
>> ><br>
>> > $ set -- <a href="http://mta1.haskell.org" rel="noreferrer noreferrer" target="_blank">mta1.haskell.org</a> <a href="http://misc-services-origin-migration.haskell.org" rel="noreferrer noreferrer" target="_blank">misc-services-origin-migration.haskell.org</a><br>
>> > $ brief() { dig +noall +ans +nocl +nottl "$@"; }<br>
>> > $ echo; for fwd; do brief -t a $fwd; brief -t aaaa $fwd; done<br>
>> ><br>
>> > <a href="http://mta1.haskell.org" rel="noreferrer noreferrer" target="_blank">mta1.haskell.org</a>. A 145.40.99.54<br>
>> ><br>
>> > $ brief() { dig +noall +ans +nocl +nottl "$@"; }<br>
>> > $ set -- 145.40.99.54 2604:1380:4641:a100::5<br>
>> > $ echo; for rev; do brief -t ptr -x $rev; done<br>
>> ><br>
>> > 5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.a.1.4.6.4.0.8.3.1.4.0.6.2.ip6.arpa. PTR <a href="http://misc-services-origin-migration.haskell.org" rel="noreferrer noreferrer" target="_blank">misc-services-origin-migration.haskell.org</a>.<br>
>> ><br>
>> > Only the IPv6 address has a PTR record, and even then it does not<br>
>> > forward resolve. SMTP clients with no PTR records are routinely refused<br>
>> > service. My mail server tolerates lack of forward mappings, but the PTR<br>
>> > is required.<br>
>> ><br>
>> > The correct DNS configuration would be:<br>
>> ><br>
>> > forward zone:<br>
>> > <a href="http://mta1.haskell.org" rel="noreferrer noreferrer" target="_blank">mta1.haskell.org</a>. A 145.40.99.54<br>
>> > <a href="http://mta1.haskell.org" rel="noreferrer noreferrer" target="_blank">mta1.haskell.org</a>. AAAA 2604:1380:4641:a100::5<br>
>> ><br>
>> > reverse IPv6 zone<br>
>> > 5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.a.1.4.6.4.0.8.3.1.4.0.6.2.ip6.arpa. PTR <a href="http://mta1.haskell.org" rel="noreferrer noreferrer" target="_blank">mta1.haskell.org</a>.<br>
>> ><br>
>> > reverse IPv4 zone<br>
>> > 54.99.40.145.in-addr.arpa. PTR <a href="http://mta.haskell.org" rel="noreferrer noreferrer" target="_blank">mta.haskell.org</a>.<br>
>> ><br>
>> > --<br>
>> > Viktor.<br>
>> _______________________________________________<br>
>> Haskell-Cafe mailing list<br>
>> To (un)subscribe, modify options or view archives go to:<br>
>> <a href="http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe" rel="noreferrer noreferrer" target="_blank">http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe</a><br>
>> Only members subscribed via the mailman list are allowed to post.<br>
><br>
> --<br>
> -- Kim-Ee<br>
_______________________________________________<br>
Haskell-Cafe mailing list<br>
To (un)subscribe, modify options or view archives go to:<br>
<a href="http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe" rel="noreferrer noreferrer" target="_blank">http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe</a><br>
Only members subscribed via the mailman list are allowed to post.</blockquote></div>