Registro reverso de DNS e PTR

Question

Eu tenho um site configurado em um servidor contratado. Eu tenho acesso total a este servidor e configurei tudo o que é necessário para o site funcionar, incluindo o servidor de e-mail. Eu também quero adicionar que eu não sou um cara do Linux e nem mesmo perto de um administrador do sistema.

Quando meu sistema (mail.dappwall.com) envia um e-mail, ele não está chegando em uma caixa de correio do Gmail. Eu verifiquei mail.log e ele diz

stats=bounced (..some text) Our system has detected that this 550-5.7.1 message does not meet IPv6 sending guidelines regarding PTR records 550-5.7.1 and authentication.

No link , forneci o endereço IP do domínio (46.4.88.247) e cliquei em Dig. O resultado:

247.88.4.46.in-addr.arpa. 21600 IN  PTR static.247.88.4.46.clients.your-server.de.

Isso deve estar certo, certo?

Então eu tentei isso:

    dig 247.88.4.46.in-addr.arpa

; <<>> DiG 9.8.1-P1 <<>> 247.88.4.46.in-addr.arpa
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7842
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;247.88.4.46.in-addr.arpa.    IN    A

;; AUTHORITY SECTION:
88.4.46.in-addr.arpa.    86106    IN    SOA    ns1.your-server.de. postmaster.your-server.de. 2013092900 86400 1800 3600000 86400

;; Query time: 2 msec
;; SERVER: 213.133.100.100#53(213.133.100.100)
;; WHEN: Mon Oct  7 21:03:48 2013
;; MSG SIZE  rcvd: 107

Eu não sei o que isso significa e não sei o que fazer agora.

No postfix main.cf, preenchai a linha abaixo porque quando estava vazia por padrão, nem todas as mensagens chegaram nas caixas de correio do gmail (status = bounced, o email para mail.dappwall.com retorna para mim).

mydestination = mail.dappwall.com, localhost.dappwall.com, localhost

Mas agora eu tenho esse erro IPv4 do Gmail.

Eu tenho acesso a certas informações do servidor. Eu descobri que

1. Nameserver: ns1.something-ns.de (eu mudei 'alguma coisa'). Existem mais dois servidores de nomes e também posso adicionar alguns.

Eu acho que algo está errado no resultado do comando dig com isso:

ns1.your-server.de. postmaster.your-server.de. Eu não mudei nada nisso, então deve ser outra coisa em vez de seu servidor , certo? E também no resultado do link eu não gosto disso ' static.876.54.3.21.clients.your-server. de. '(eu não mudei isso também).

Estou usando o postfix para enviar e-mails.

EDITAR Depois de adicionar 88.4.46.in-addr.arpa à entrada DNS reversa no link sugerido pelo problema, ainda permanece. / p>

Mail.log sem mascarar nada:

Oct  7 23:22:05 www postfix/pickup[22424]: 98C0F2C41544: uid=33 from=<www-data>
Oct  7 23:22:05 www postfix/cleanup[22434]: 98C0F2C41544: message-id=<[e-mail]>
Oct  7 23:22:05 www postfix/qmgr[22425]: 98C0F2C41544: from=<[email protected]>, size=3438, nrcpt=1 (queue active)
Oct  7 23:22:06 www postfix/smtp[22443]: 98C0F2C41544: to=<[email protected]>, relay=gmail-smtp-in.l.google.com[2a00:1450:4001:c02::1b]:25, delay=0.58, delays=0.16/0.1/0.17/0.15, dsn=5.7.1, status=bounced (host gmail-smtp-in.l.google.com[2a00:1450:4001:c02::1b] said: 550-5.7.1 [2a01:4f8:140:71ed::2      16] Our system has detected that this 550-5.7.1 message does not meet IPv6 sending guidelines regarding PTR records 550-5.7.1 and authentication. Please review 550-5.7.1 https://support.google.com/mail/?p=ipv6_authentication_error for more 550 5.7.1 information. 7si24941299eeo.229 - gsmtp (in reply to end of DATA command))
Oct  7 23:22:06 www postfix/cleanup[22434]: 2312F2C4155C: message-id=<[e-mail]>
Oct  7 23:22:06 www postfix/bounce[22445]: 98C0F2C41544: sender non-delivery notification: 2312F2C4155C
Oct  7 23:22:06 www postfix/qmgr[22425]: 2312F2C4155C: from=<>, size=6231, nrcpt=1 (queue active)
Oct  7 23:22:06 www postfix/qmgr[22425]: 98C0F2C41544: removed
Oct  7 23:22:06 www postfix/local[22438]: 2312F2C4155C: to=<[email protected]>, relay=local, delay=0.1, delays=0.05/0/0/0.05, dsn=2.0.0, status=sent (delivered to mailbox)
Oct  7 23:22:06 www postfix/qmgr[22425]: 2312F2C4155C: removed
Oct  7 23:24:01 www postfix/pickup[22424]: C05F32C41544: uid=0 from=<root>
Oct  7 23:24:01 www postfix/cleanup[22455]: C05F32C41544: message-id=<[e-mail]>
Oct  7 23:24:01 www postfix/qmgr[22425]: C05F32C41544: from=<[email protected]>, size=766, nrcpt=1 (queue active)
Oct  7 23:24:01 www postfix/local[22459]: C05F32C41544: to=<[email protected]>, orig_to=<root>, relay=local, delay=0.2, delays=0.13/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to mailbox)
Oct  7 23:24:01 www postfix/qmgr[22425]: C05F32C41544: removed

EDIT 2:

Oct  8 21:42:12 www postfix/pickup[31192]: B32672C414E4: uid=33 from=<www-data>
Oct  8 21:42:12 www postfix/cleanup[31198]: B32672C414E4: message-id=<[e-mail]>
Oct  8 21:42:12 www postfix/qmgr[22425]: B32672C414E4: from=<[email protected]>, size=3425, nrcpt=1 (queue active)
Oct  8 21:42:13 www postfix/smtp[31254]: B32672C414E4: to=<[email protected]>, relay=gmail-smtp-in.l.google.com[2a00:1450:4001:c02::1a]:25, delay=0.99, delays=0.15/0/0.22/0.62, dsn=5.7.1, status=bounced (host gmail-smtp-in.l.google.com[2a00:1450:4001:c02::1a] said: 550-5.7.1 [2a01:4f8:140:71ed::2      16] Our system has detected that this 550-5.7.1 message does not meet IPv6 sending guidelines regarding PTR records 550-5.7.1 and authentication. Please review 550-5.7.1 https://support.google.com/mail/?p=ipv6_authentication_error for more 550 5.7.1 information. z8si29131291eee.203 - gsmtp (in reply to end of DATA command))
Oct  8 21:42:13 www postfix/cleanup[31198]: A937F2C4155F: message-id=<[e-mail]>
Oct  8 21:42:13 www postfix/bounce[31276]: B32672C414E4: sender non-delivery notification: A937F2C4155F
Oct  8 21:42:13 www postfix/qmgr[22425]: A937F2C4155F: from=<>, size=6218, nrcpt=1 (queue active)
Oct  8 21:42:13 www postfix/qmgr[22425]: B32672C414E4: removed
Oct  8 21:42:13 www postfix/local[31271]: A937F2C4155F: to=<[email protected]>, relay=local, delay=0.09, delays=0.06/0/0/0.03, dsn=2.0.0, status=sent (delivered to mailbox)
Oct  8 21:42:13 www postfix/qmgr[22425]: A937F2C4155F: removed
Oct  8 21:44:01 www postfix/pickup[31192]: 668DD2C414E4: uid=0 from=<root>
Oct  8 21:44:01 www postfix/cleanup[31282]: 668DD2C414E4: message-id=<[e-mail]>
Oct  8 21:44:01 www postfix/qmgr[22425]: 668DD2C414E4: from=<[email protected]>, size=766, nrcpt=1 (queue active)
Oct  8 21:44:01 www postfix/local[31286]: 668DD2C414E4: to=<[email protected]>, orig_to=<root>, relay=local, delay=0.21, delays=0.16/0.01/0/0.05, dsn=2.0.0, status=sent (delivered to mailbox)
Oct  8 21:44:01 www postfix/qmgr[22425]: 668DD2C414E4: removed

Postfix main.cf :

myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name
biff = no
append_dot_mydomain = no
readme_directory = no
mydomain = mail.dappwall.com
mydestination = $mydomain localhost.$mydomain localhost $mydomain
relayhost =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mynetworks_style = host
mailbox_size_limit = 0
virtual_mailbox_limit = 0
recipient_delimiter = +
inet_interfaces = all
message_size_limit = 0

# SMTP Authentication (SASL)

smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain =

# Encrypted transfer (SSL/TLS)

smtp_use_tls = yes
smtpd_use_tls = yes
smtpd_tls_cert_file = /etc/ssl/private/mail.dappwall.com.crt
smtpd_tls_key_file = /etc/ssl/private/mail.dappwall.com.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# Basic SPAM prevention

smtpd_helo_required = yes
smtpd_delay_reject = yes
disable_vrfy_command = yes
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, permit
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination

# Force incoming mail to go through Amavis

content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings

# Virtual user mappings

alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
virtual_mailbox_base = /var/spool/mail/virtual
virtual_mailbox_maps = mysql:/etc/postfix/maps/user.cf
virtual_uid_maps = static:5000
virtual_gid_maps =  static:5000
virtual_alias_maps = mysql:/etc/postfix/maps/alias.cf
virtual_mailbox_domains = mysql:/etc/postfix/maps/domain.cf

Seção de entradas de DNS no robô:

@                        IN NS      robotns3.second-ns.com.
@                        IN NS      robotns2.second-ns.de.
@                        IN NS      ns1.first-ns.de.

@                        IN A       46.4.88.247
localhost                IN A       127.0.0.1
mail                     IN A       46.4.88.247
www                      IN A       46.4.88.247
ftp                      IN CNAME   www
imap                     IN CNAME   www
loopback                 IN CNAME   localhost
pop                      IN CNAME   www
relay                    IN CNAME   www
smtp                     IN CNAME   www
@                        IN MX 10   mail

    

Answer 1

O log está reclamando do seu endereço IPv6, não do seu IPv4. Independentemente disso, parece que o servidor de e-mail de destino (gmail) está reclamando que suas pesquisas de DNS para frente e para trás não coincidem se não me engano.

mail.mydomain.com deve resolver para um IP, e esse IP deve ser resolvido de volta para mail.mydomain.com (mail.mydomain.com sendo qualquer domínio que você configurou seu servidor de email para usar para se identificar ao enviar emails). / p>

Você pode fazer com que o servidor hoster configure as entradas DNS reversas para seus IPs. Ou se o client.your-server.de é válido e não foi alterado, você pode fazê-lo fazendo login no link indo para "servidores", escolha o servidor que você deseja editar e digite o nome DNS reverso ao lado dos IPs (para IPv4 e IPv6).

Editar: Exemplo adicionado

Exemplo de como as pesquisas direta e inversa devem se encaixar (IPv4 e IPv6):

# host us1.dopefish.de
us1.dopefish.de has address 192.249.58.230
us1.dopefish.de has IPv6 address 2604:180::ef4b:4638

# host 192.249.58.230
230.58.249.192.in-addr.arpa domain name pointer us1.dopefish.de.

# host 2604:180::ef4b:4638
8.3.6.4.b.4.f.e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.1.0.4.0.6.2.ip6.arpa domain name pointer us1.dopefish.de.