Hostname/DNS "A Record" name

We are having an issue with one domain bellsouth.net we are basically getting this back from them.
12:18:29 928 MSG 10801 Recipient: [email protected]
12:18:30 888 DMN: MSG 10802 Send Failure: 521 Error - Blocked for abuse. Contact [email protected]
12:18:30 888 DMN: MSG 10802 Send Failure: 521 Error - Blocked for abuse. Contact [email protected]
12:18:59 480 MSG 10803 Analyzing result file: /media/nss/MAIL/ndhdom/wpgate/gwia/result/rae59395.645
12:18:59 480 MSG 10803 Detected error on SMTP command
12:18:59 480 MSG 10803 Command: bellsouth.net
12:18:59 480 MSG 10803 Response: 521 Error - Blocked for abuse. Contact [email protected]
When I looked up the Detected error on SMTP command, I found some information about the Hostname, currently on our server it is setup as Hostname/DNS "A Record" name: ndhc.org (according to the internet domain holder (godaddy) the host name is ndhc.org and the "A" record name is mail. What should we have in the Hostname/DNS "A Record" name field? I believe that we have tried the servername.domain name (liberxx.ndhc.org) and that failed and I think that we also tried (mail.ndhc.org) I cannot confirm that we actually have it has been awhile since we did this project, but I am just wondering if someone can help clear this up for me. Thank you. This issue only started happen with Bellsouth.net when we switched from the NetWare GWIA to the Linux GWIA is there something else that might have been missed.

Originally Posted by mrosen
Hi,
dschaldedfg wrote:
>
> We are having an issue with one domain bellsouth.net we are basically
> getting this back from them.
>
> 12:18:29 928 MSG 10801 Recipient: [email protected]
> 12:18:30 888 DMN: MSG 10802 Send Failure: 521 Error - Blocked for
> abuse. Contact [email protected].
> 12:18:30 888 DMN: MSG 10802 Send Failure: 521 Error - Blocked for
> abuse. Contact [email protected].
> 12:18:59 480 MSG 10803 Analyzing result file:
> /media/nss/MAIL/ndhdom/wpgate/gwia/result/rae59395.645
> 12:18:59 480 MSG 10803 Detected error on SMTP command
> 12:18:59 480 MSG 10803 Command: bellsouth.net
> 12:18:59 480 MSG 10803 Response: 521 Error - Blocked for abuse.
> Contact [email protected].
>
> When I looked up the Detected error on SMTP command, I found some
> information about the Hostname, currently on our server it is setup as
> Hostname/DNS "A Record" name: ndhc.org (according to the internet domain
> holder (godaddy) the host name is ndhc.org and the "A" record name is
> mail. What should we have in the Hostname/DNS "A Record" name field?
mail.ndhc.org
Okay, so you think we should try putting "mail.ndhc.org" into that section (Hostname/DNS "A Record" name field) instead of what we currently have "ndhc.org"
But that error doesn't sound like it's related to DNS. It much more
sounds like you're really blacklisted for sending spam. If it's really
the hostname, then their system is giving out extremely stupid result
messages. Have you tried to contact the given email address in the
message?
I know when we first setup the system we were having an issue with the GWIA relaying, but that has since been rectified, they are the only ones that are blacklisting us, because I have checked on other sites (blacklisting websites that is) and there is nothing about our site being blacklisted. I think basically the people that are trying to receive the messages respond back saying that they never received emails from the people here at ndhc. If memory serves they have been emailed from other accounts and those go through because Bellsouth.net is not blocking those accounts, like yahoo, gmail, etc.
CU,
Massimo Rosen
Novell Product Support Forum Sysop
No emails please!
Untitled Document

Similar Messages

What Is an Appropriate Hostname & DNS Zone Configuration for External DNS Setup?

I setup servers that are hosted on a secure external data centre. The data centre has its own DNSS, so the DNS service is never setup on the server itself, and is handled by the data centre. I have already setup a handful of servers, and they all seem to be working well. Nevertheless, a couple of people in these discussions have told me, that I'm not setting the servers up 'properly' because of the way I'm naming the server - ie., they believe I'm assigning a 'wrong' hostname - and because of the way I'm setting up subdomains in the zone file. Here is how I'm currently doing it:
CURRENT SETUP:
The server is public, and it is also the ONLY machine publicly in the domain zone. So, if the client's domain is "example.com", there is only one machine that will respond to all services in that domain. Because of this:
- Server Hostname: "example.com"
- reverse DNS PTR record points to "example.com"
- 'mail.example.com', 'www.example.com', 'ftp.example.com', etc, are all setup as A records that point to the same IP address as "example.com".
This has been working fine so far. I have not had any problems with any service, including mail. However, a couple of people suggested that "example.com" is not a fully qualified domain name, and that this setup is therefore 'incorrect', and that it will cause me problems in the future. They suggest I should be setting these servers up like this:
SUGGESTED SETUP:
- Server Hostname: "server.example.com"
- reverse DNS PTR record points to "server.example.com"
- setup "www.example.com" as a record pointing to the same IP address as "server.example.com", but avoid setting up other subdomains unless absolutely necessary - ie., tell client to use "server.example.com" as the 'proper' address for mail/ftp/etc.
Technically, 'net', 'company.net' and 'server.company.net' can all be fully qualified domain names, if each one of them points unequivocally to a single IP address. An domain name is not fully qualified, for instance, when it points to a subnet instead of a single IP address. Using "example.com" as a FQDN is technically correct. However, what is 'technically correct' and what Server considers acceptable are not always the same thing....
I certainly don't want my clients to have problems in the future, and if OS X Server is going to misbehave because of the way I'm setting up my hostname and zone files, I need to know for sure NOW rather than later!

I'm the "other people" referenced here.
For general information on DNS, please acquire and skim a copy of Cricket Liu's DNS and BIND book. It was on its fifth edition when last I checked. DNS server on OS X Server is the ISC BIND server, which is discussed in that book in some detail.
If configuring OS X Server in a data center, the OS X Server box probably does not want (nor need) to be running a local DNS server. (Running local DNS services just means that DNS server will potentially become part of a DNS DDoS, if who can issue queries to the server isn't carefully controlled.) Use the DC DNS server(s).
If you want the domain itself to be used as an IP address (eg: example.com), then that's usually an A record, particularly if you're getting email via that domain (and not an MX record going elsewhere). Some versions of OS X Server have had some issues with setting up this record within Server Admin.app and Server.app.
The previous issues were likely due to stale DNS translations lurking within the configuration, and caching of that data up to the TTL. (FWIW, this discussion is related to this thread and this thread.)

DNS "A" Record Preventing Networked Users from Seeing Own Website

I just set up a DNS "a" record in Server Admin to point "mail.xyz.com" to my server's internal ip (10.0.1.1).
I did this so users could stay on the network with sending and receiving mail, as opposing to going out onto the web to do so. (I have MX records on Network Solutions point "mail.xyz.com" to my server's external ip.) All of their mail clients list "mail.xyz.com" as the mail server, instead of the server's internal ip.
Trouble is, when users on the network try to access our website, "xyz.com," their browsers now return an error, saying they cannot find the server.
Any idea?
Lost count Mac OS X (10.4.9)

Steve and David --
This works. I am using Server Admin. To reiterate, I
added a zone "mysite.com" and a primary server "mail"
and pointed it at my server's internal ip so my users
can stay "inside" while checking mail.
Then, to follow your suggestion, I added a machine
named "www" to zone "mysite.com" pointed to my
server's external ip.
Some questions: How can I be sure the client's
machines are going interally to the server for mail?
(When I dig it in terminal, "mail.mysite.com" returns
an "a" record for the server's internal ip -- I
suppose that is sufficient.)
Yep!
Should the primary name server for the zone be "mail"
with "www" as an added machine, or vice versa?
The primary name server just identifies the machine which is responsible for holding records for that zone (domain). Add www as a 'machine' - think of each 'machine' as a specific IP address which identifies a host, hence IP / Name partnership. Any other hostname on same IP is an 'alias' (which becomes a CNAME record in the dns file).
You say I have to do this with "any record hosted in
my public dns as a mirror." I am running three
websites from my server, all with public dns pointed
at my server. (I use the same mail
server--mail.mysite.com--for all three.) Do I need to
set up a "www" record for each website? I have no
problem accessing the sites from internal client
machines.
the basic issue is that any zone (domain) defined in your own dns becomes 'authoritative' for that domain. So when clients ask your internal dns about any zone (domain) which is defined in it, and your server does not have that record, it will respond with "no such record" and your clients must take that on face value.
Therefore, you only need to mirror records for domains which you have defined in your own dns. If you have external www.domain1.com and www.domain2.com but only have domain1.com established on your internal dns, then you only need that domain's www record mirrored. Your server will therefore not be authoritative for domain2.com and will pass all requests out to whichever external dns is authoritative for it.
-david

DNS host record

We recently successfully decommissioned a child domain. However, we have found a non-domain system which was referenced in the child domain DNS as a host record - xyz.child.root.com
Where can I add this host record in the root.com domain, so it can resolve to services contacting that name? The child domain no longer exists.
Thanks.

Hi,
What does a non-domain system record mean?
This host record seems
for a computer located in child domain. If this record is for a computer located in child domain, this record will not efficient.
To add a host record to root domain, you can create a new host record in the root domain and input the corresponding IP and record name for the new record.
Besides, after you decommissioned the child domain, you can run dcdiag /test:DNS to check the health of DNS.
Best Regards,
Erin

DNS Host Records Missing

Hi,
We are having an issue where DNS Host records seem to be missing, a user logs on and they don't get their group policies. They can logon again and get their group policies. However the DNS Host record is still not created on the DNS Servers.
If we reboot the PC the DNS record is created. What is going on.
We have 2 DC's running DNS, and one of them runs DHCP.

Hi,
According to your description, my understanding is that client does not registry record in DNS server when user logon. And the DNS record will be created after rebooting the client.
DNS updates can be sent for any of the following reasons or events:
1. An IP address is added, removed, or modified in the TCP/IP properties configuration for any one of the installed network connections.
2. An IP address lease changes or renews with the DHCP server any one of the installed network connections. For example, when the computer is started or if the
ipconfig /renew command is used.
3. The ipconfig /registerdns command is used to manually force a refresh of the client name registration in DNS.
4. At startup time, when the computer is turned on.
5. A member server is promoted to a domain controller.
A user logon behavior will not trigger DNS update/registry. You may Open CMD on client and type
ipconfig /registerdns command to manually force a refresh of the client name registration in DNS.
If I have any misunderstanding about your question, please correct.
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Unable to run the application via DNS CName record.

I have Windows Server 2008R2 running an application that connects to a database via a DNS CNAME record. The application was working fine until after yesterday when it could no longer
connect to the database. The database server is up and running without any issues. You have verified remote connectivity to the database server from your workstation.
How would you troubleshoot the issue and what are the steps to resolve it?

It might be that the application does not support using aliases for DNS resolution. You will need to contact your application developer/vendor for assistance.
To make sure that DNS resolution works properly from the infrastructure level, you can simply use
nslookup and make sure that the resolution is done properly.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

"recording name conflict" error

Hi,
I have a dependency problem building a new copy of Heimdal Kerberos (SS12.1 on SPARC) that I don't know how to work around. When make begins linking a number of the shared libraries together, it bombs out with:
ld: fatal: recording name conflict: file `../krb5/.libs/libkrb5.so' and file `/opt/heimdal/lib/sparcv9/libkrb5.so' provide identical dependency names: libkrb5.so.25 (possible multiple inclusion of the same file)
Libtool is finding /opt/heimdal/lib/sparcv9/libkrb5.so, listed in an .la file for openldap. But, since I built a new version of libkrb5.so, located at ../krb5/.libs/libkrb5.so, it fails. I tried to rename the old directory, but then it fails when it can't find it:
ggrep: /opt/heimdal/lib/sparcv9/libgssapi.la: No such file or directory
/opt/gnu/bin/sed: can't read /opt/heimdal/lib/sparcv9/libgssapi.la: No such file or directory
libtool: link: `/opt/heimdal/lib/sparcv9/libgssapi.la' is not a valid libtool archive
gmake[3]: *** [libhdb.la] Error 1
gmake[3]: Leaving directory `/opt/ws/dists/Services/heimdal-1.2.1/lib/hdb'
gmake[2]: *** [all] Error 2
gmake[2]: Leaving directory `/opt/ws/dists/Services/heimdal-1.2.1/lib/hdb'
gmake[1]: *** [all-recursive] Error 1
gmake[1]: Leaving directory `/opt/ws/dists/Services/heimdal-1.2.1/lib'
gmake: *** [all-recursive] Error 1
How do I get libtool to ignore the old file & use the new one? Any help would be greatly appreciated.
Thanks.
-John

You probably have a shared library with a runpath that includes the location of the old libkrb5.so, and that does not include the location of the new version. The reference to libkrb5.so then can't be satisfied if you remove or rename the old directory. That dependency would also explain the linker complaint about the two copies of libkrb5.so when both are visible.
Run ldd on the various project libraries to find ones with a dependency on /opt/heimdal/lib/sparcv9/libkrb5.so. Rebuild them with a new runpath (-R option) that does not include /opt/heimdal/lib/sparcv9 but does include the directory containing the new library version.
If you can't remove /opt/heimdal/lib/sparcv9 from the runpath because the applciation needs other libraries in that directory, you need to replace the libkrb5.so in the directory with your new version. (I would rename the old directory so that you don't lose it.)
(Note: the -L option tells the linker where to look for libraries at program link time. The -R option tells the run-time loader where to look for libraries when the program is run.)
You also mention a ".la" file. I don't know what that is. I don't find a mention of such a thing in the Solaris Linker and Libraries Guide.

Make a Mac's Computer Name the Same as it's OD Computer Record Name?

I heard someone mention that its possible (at least in 10.5 server) to make a Mac's Computer name become exactly as its OD Computer Record name is (at the time of binding). I assume this would be a setting in Server Admin/OD or in WGM perhaps. I cant find the setting. Can you locate it for me?
Im running a test Leopard OD master in Advanced mode on an Xserve Xeon.

OK, let me give you a similar scenario regarding computer record names.
I had previously setup OD to set computer names based the computer record name once the Macs were bound to OD.
I decided later that that naming scheme will not work (I need the computer (host) name and the OD computer record name to be different for logisitical reasons - long story). I unbound my OD clients and trash all LDAP settings to start over from scratch. One problem:
I cant for the life of me find that checkbox on my OD server to disable that setting. I have looked everywhere. I check WGM and Server Admin too. The post you made earlier doesn't look like the steps I took to setup the option to force the computer name from the record name. I simply checked a box. I also did enable authenticated binding either.
I have a test OD lab right now. None of the servers and clients are in production, so I have the luxury of experimenting a little before we go live in Q1 2008.

Access Ciscoworks by IP address as opposed to hostname/DNS

I'm trying to find the link that shows the changes/edits that need to be made to Ciscoworks in order to access it via IP address as opposed to hostname/DNS. I also believe I need to regenerate the self-signed cert. Could someone provide a link on how to do that? I am running the current version. Thanks.

You don't need to do anything. Just change your browser URL from the hostname to the IP. You may get a warning about the certificate, but everything will work.

Authentication popups after computer name changed to computer record name

Hi
I'm not sure if anyone else is facing this issue, but I have been unable to find anything in the forums.
I have setup a number of client machines on Lion Server, all using 10.7.4. I used WGM and Remote Desktop to make some changes and deploy software
Since then, I have been getting the following authentication popup on all client machines (twice after login, and then every 30 mins or so afterwards):
Mac OS S wants to make changes. Type an administrator's name and password to allow this.
The changes made prior to this happening were:
- Overplay VPN installed (using RD pkg install)
- Adobe CS 5.5 installed (using Adobe Enterprise Deployment Tool and RD package install)
- Evernote installed (using RD copy)
- Set computer name to computer record name (From WGM > Computer Groups > Preferences > Options)
I have now removed all the installed software from one machine, and log in as administrator, unbind the machine, rename the computer manually to the record name, rebind the computer.
As far as I can see, I have reverted all changes one at a time, and am still receiving the admin password requests when logged in as a network user.
The only machine that seems to be ok, is the one where the name change to computer record name was unsuccessful.
Does anyone have any suggestions as to how I can fix this issue?
Thanks
Suraj

Issue resolved. It turns out none of my changes caused the issue as much as Google Chrome Autoupdates. The new version constantly checks for updates which makes clients on Lion Server go haywire. Solution to turn off auto-updating:
Open a Terminal window:
defaults write com.google.Keystone.Agent checkInterval 0
Relaunch Chrome.

DHCP Reservation Sync and DNS Host record sync etc shown in IPAM GUI

Hello all,
I am aware of the scripts in the TechNet script center to sync DHCP leases etc to IPAM, however my question is about something else -
If you highlight an IP address (IP address inventory->select an IP), You can see fields that say: "DHCP reservation sync", "DNS PTR record sync" and "DNS host record sync" as below:
I was curious as to what these are for. Is there some built-in sync functionality for these that I perhaps have not enabled? (Don't see such options any where..)
thanks,
-Ravi

Hi Ravi ,
The three columns tell us the information of the synchronization between IPAM server and DNS server (or DHCP server) .
Here is the detailed guide for using IPAM :
Using the IPAM Client Console :
https://technet.microsoft.com/en-us/library/jj878351.aspx#inventory
IPAM can sync DNS and DHCP records .
The IPAM database is separate from DHCP and DNS servers on our network ,and full synchronization of hosts and IP addresses between IPAM and managed DNS or DHCP servers does not occur automatically
unless we have configured automated tasks to perform this synchronization .
For detailed information ,see
DNS and DHCP record synchronization chapter in the following link :
Multi-server Management :
https://technet.microsoft.com/en-us/library/jj878329.aspx
Best Regards,
Leo
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Technical details of permanent failure: DNS Error: Domain name not found

I have tried to test eprint and keep getting an error. DNS Error: Domain name not found
I can print thru my network fine, but I get this error with eprint. My eprint address ends in hpeprint.co
Is this correct?

Found the problem. The printer display shorten my eprint address and dropped the "m" from com. Now to enjot my HP eeprinter.

Unable to set node credentials for /LDAPv3/127.0.0.1 with record name n`.

When starting Server Preferences, I receive a window with the following text:Unable to set node credentials for /LDAPv3/127.0.0.1 with record name n`. There may be an error with the Open Directory Service.
This started to occur after I used the command changeip to change the ip of the service.
I've tried (Re)starting Open Directory Service, but that doesn't resolve it.
Does anyone know how I can resolve this error? I'd like to be able to user Server Preferences again!

One of our servers (10.6.8) that had been running for months suddenly started generating that error message when trying to access Server Preferences. Workgroup Manager, which seems to use the same login information, accessed just fine. We tried deleting access information in Keychain, to no avail. What finally worked for US was:
- Via Server Admin, (in Open Directory > Settings > General) change the Role: Open Directory from Master to Standalone
- This (for us) then restored access to Server Prefs
- Use Server Admin to change the Role back to Master
Warnings - 1) backup first 2) you will have to reinstall the master password, and 3) ALL accounts were lost and had to be recreated.

Save recorded name as a .wav file - Unity Connection v8.6

I need to backup a user's greeting, but they just have their name recorded (in their own voice). I know where to grab the standard greetings, alternate greetings, but not where to find the recorded name. Can anyone assist?

Nevermind, I found it. The recorded name can be found on the media bar on the subscriber's main page.

CUCM & CUP DNS and Domain name

Hello
CUCM 9.1, CUP 9.1 and CUC 9.1
I have not mentioned DNS or domain name on my CUCM and on my CUP, if i enable the DNS and domain name on the CUCM does it will change the license mac of CUCM AND CUP ???? which will cause me to rehost the license from the cisco licensing team.
thanks

Hi Jack,
You can do that. Nothing would happen.
please follow the links
https://supportforums.cisco.com/message/4109569#4109569
https://supportforums.cisco.com/thread/2227236
regds,
aman

Hostname/DNS "A Record" name

Similar Messages

Maybe you are looking for