Domain not found when using LDN nameserver (80.67.188.188)

[nqb]

Hello,

My YunoHost server

I have two YunoHost servers (two different domains) with following config:

Hardware: VPS bought online
YunoHost version: 3.7.1.1
I have access to my server : Through SSH | through the webadmin
Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : no

Description of my issue

Since 21/05/2020, I noticed that some legit mails are rejected or not sent by my YunoHost server. Issue is completely random.

Example error message I see in /var/log/mail.log is:

$ sudo zgrep -i "Domain not found" /var/log/mail.log*
/var/log/mail.log:Jun  1 14:03:34 azyx postfix/smtpd[17258]: NOQUEUE: reject: RCPT from unknown[51.68.43.218]: 450 4.1.8 <REDACTED@actilis.net>: Sender address rejected: Domain not found; from=<REDACTED@actilis.net> to=<REDACTED@azyx.fr> proto=ESMTP helo=<smtp.actilis.fr>
[..]

I got same kind of message on my two YunoHost servers for different domains.

I modified my dnsmasq configuration in order to log queries. Now in /etc/default/dsnmasq, I had:

[..]
DNSMASQ_OPTS="--log-queries"
[..]

Each error message in /var/log/mail.log is related to a query to 80.67.188.188 DNS server which is a LDN server according to resolv.dnsmasq.conf.

Example in /var/log/syslog:

Jun  1 14:03:34 azyx dnsmasq[26771]: query[MX] actilis.net from 127.0.0.1                                                                                                                                        
Jun  1 14:03:34 azyx dnsmasq[26771]: forwarded actilis.net to 80.67.188.188                                                                                                                                     
Jun  1 14:03:34 azyx dnsmasq[26771]: query[MX] actilis.net from 127.0.0.1                                                                                                                                        
Jun  1 14:03:34 azyx dnsmasq[26771]: forwarded actilis.net to 80.67.188.188                                                                                                                                      
Jun  1 14:03:34 azyx dnsmasq[26771]: query[A] actilis.net from 127.0.0.1                                                                                                                                         
Jun  1 14:03:34 azyx dnsmasq[26771]: forwarded actilis.net to 80.67.188.188                                                                                                                                      
Jun  1 14:03:34 azyx dnsmasq[26771]: query[A] actilis.net from 127.0.0.1                                                                                                                                         
Jun  1 14:03:34 azyx dnsmasq[26771]: forwarded actilis.net to 80.67.188.188                                                                                                                                      
Jun  1 14:03:34 azyx dnsmasq[26771]: query[AAAA] actilis.net from 127.0.0.1                                                                                                                                      
Jun  1 14:03:34 azyx dnsmasq[26771]: forwarded actilis.net to 80.67.188.188                                                                                                                                      
Jun  1 14:03:34 azyx dnsmasq[26771]: query[AAAA] actilis.net from 127.0.0.1                                                                                                                                      
Jun  1 14:03:34 azyx dnsmasq[26771]: forwarded actilis.net to 80.67.188.188  

I didn’t get any answer and the next message in /var/log/syslog is the one posted above.

Hopefully, messages are delivered when mail server make a new attempt and YunoHost server use a different DNS server.

I supposed there is some LDN administrators on the forum that can help me troubleshoot the issue.

[nqb]

I’m also interested if some people noticed same behavior on their ynh servers.

[nqb]

Anybody have a contact at LDN ?

@Aleks, could you help me solve this problem ? I prefer an upstream solution in place of putting DNS server 80.67.188.188 in comment.

[Aleks]

Suite à question posée sur IRC :

Aleks │ chépa si quelqu’un gère le DNS de ldn mais on a quelqu’un sur le forum qui rapport un soucis
petrus │ la zone est mal fichue
petrus │ 212.83.186.116 /dns2.actilis.net est listé comme ns glue de la zone
petrus │ mais il n’est pas NS dans la zone, et il ne répond pas
Aleks │ petrus: du coup pour toi c’est un probleme dans la zone et pas trop du côté de LDN ?
petrus │ Aleks: je dirais que oui y’a un soucis dans la zone qui est peut-être manifesté par une configuration spécifique / exigeante coté ldn

[nqb]

Hi @Aleks and @petrus,

Thanks for your feedback. As I mentioned previously, I have this behavior with several domains (not only actilis.net). I’m not sure issue is related to source or destination domains.

Thanks.