2
dns problem
Problem reported by Sabatino - 1/14/2024 at 12:07 PM
Known
SmarterMail Enterprise 100.0.8664.22089 (Sep 21, 2023)

Sorry but I didn't understand.

Probably the smartermail DNS client went into error and I found myself with many errors of this type:
[2024.01.14] 19:30:52.947 [91712421] Error in getting recipient A records. Message: LookupA.Exception: Query 2078 => clubdelsole.com IN A on 1.1.1.1:53 timed out or is a transient error.
[2024.01.14] 19:30:52.947 [91712421] MXRecord count: '0' for domain 'xxxxx.com'
[2024.01.14] 19:30:52.947 [91712421] Delivery for xxxx@xxx.de to xxxxx@xxxxx.com has bounced. Reason: Failed to connect to the recipient's mail server.  No DNS information was found for the 'xxxx.com' domain.

[2024.01.14] 19:31:37.682 [22213643] Error in getting recipient A records. Message: LookupA.Exception: Query 5194 => gmail.com IN A on 208.67.222.220:53 timed out or is a transient error.
[2024.01.14] 19:31:37.682 [22213643] MXRecord count: '0' for domain 'gmail.com'
[2024.01.14] 19:31:37.682 [22213643] Delivery for info@xcxcxc.com to xcxcxcx@gmail.com has bounced. Reason: Failed to connect to the recipient's mail server.  No DNS information was found for the 'gmail.com' domain.

solved by restarting the service as soon as I noticed it.

What I don't understand, however, is that there was a DNS query error and therefore it should have tried again and instead it bounced

Why?




Sabatino Traini
      Chief Information Officer
Genial s.r.l. 
Martinsicuro - Italy

9 Replies

Reply to Thread
0
Mark Johnson Replied
we're also seeing unusual DNS errors like this since latest upgrade .. 
seems intermittent, ticket logged and currently awaiting response

eg . Error: 600 Failed to connect to the recipient's mail server. No DNS information was found for the 'gmail.com' domain. Status: 544 5.4.4 Host not found (not in DNS).
1
Sabatino Replied
I checked my logs and found this error (many) but only in the last 24 hours and then after restarting sm it disappeared.
So I think that as far as I'm concerned it's not an error that recurs.

But I have to say that I find SM's behavior wrong

How can a DNS exception become a domain not found?

The correct behavior should have been to put the message in waiting to delivery and therefore for there to be a subsequent attempt.

Then if in some installations the DNS error may be repetitive it is right to investigate, but in the event of a timed out error or is a transient error you cannot consider the domain non-existent and bounce




[2024.01.14] 19:31:37.682 [22213643] Error in getting recipient A records. Message: LookupA.Exception: Query 5194 => gmail.com IN A on 208.67.222.220:53 timed out or is a transient error.
[2024.01.14] 19:31:37.682 [22213643] MXRecord count: '0' for domain 'gmail.com'
[2024.01.14] 19:31:37.682 [22213643] Delivery for info@xcxcxc.com to xcxcxcx@gmail.com has bounced. Reason: Failed to connect to the recipient's mail server.  No DNS information was found for the 'gmail.com' domain.

Sabatino Traini Chief Information Officer Genial s.r.l. Martinsicuro - Italy
0
Mark Johnson Replied
we were getting lots of those DNS errors too, i changed the Smartermail DNS to use the server NIC (by setting it blank) as suggested by Tony recently and its reduced these "timeout/transient DNS errors" from 1700+ an hour to just 4 in the last 5 hours! There are also no more messages with 602 errors in the Waiting to deliver queue with DNS errors about legit servers (eg. Gmail same as your getting) that i've seen.

Does that indicate a network issue with access to public DNS from our host machine perhaps?
Will continue to monitor, as these errors were not present prior to the upgrade last week.
4
Sabatino Replied
yes, but I'm not disputing the reasons why the DNS error can be generated. There may be an error.
What shouldn't happen, however, is that in the event of a DNS error, SM considers the domain non-existent and bounces it.
You have to put the message in waiting to delivery and try again and not bounce

This way there is only a delay and not a failed delivery.

How can I justify an error like this to one of my clients?
You know my server didn't deliver your email because at that moment it thought that gmail.com didn't exist.
You understand that this is an argument that doesn't hold up.

It is legitimate that a DNS error may occur. But if a request to a DNS times out, the request must be redone, the domain should not be considered non-existent.
Sabatino Traini Chief Information Officer Genial s.r.l. Martinsicuro - Italy
1
Brian Bjerring-Jensen Replied
Totally agree Sabatino! Also when receiving the mail, we see that they are rejected because of no Reverse PTR or SPF in the lookup.

They have both so its an error and turning on DNS Caching doesnt resolve it.
0
Zach Sylvester Replied
Employee Post
Hey Sabatino, 

Thanks for reaching out to the community. The Sep 21st version has some known DNS issues. We resolved this in the latest build by upgrading the DNS Client Library that we use.
Please upgrade to the latest version and see if this resolves your issue. 

Thanks, 
Zach Sylvester Software Developer SmarterTools Inc. www.smartertools.com
0
Matt Petty Replied
Employee Post
@Sabatino
"Then if in some installations the DNS error may be repetitive it is right to investigate, but in the event of a timed out error or is a transient error you cannot consider the domain non-existent and bounce"

Use the "DNS errors before bounce" in System General settings to configure this behavior.
Matt Petty Software Developer SmarterTools Inc. www.smartertools.com
0
Brian Bjerring-Jensen Replied
Anyone care to explain how this can be 4 attemps and the second highlighted text???


  • Retry Intervals (Minutes separated by commas) - When the mail server is unable to contact the receiving server, the email attempting to be sent is held for a period of time before the mail server attempts to resend it. This is the time between retries. Users can specify multiple retry attempts to resend emails before it is bounced. By default, this is set to 4 attempts - at 1, 5, 5, 15, 30, 30, 30, 30, 60, 90, 120, 240, 480, 960, 1440, 2880.
                
  • DNS Errors Before Bounce- The maximum number of attempts SmarterMail should make before the message is bounced due to a DNS error. The most common cause of a DNS error is a misspelled domain. Limiting the number of attempts before DNS errors are bounced is beneficial because messages will not sit in the queue for long periods of time taking up processing on the mail server and possibly slowing the system down. This will be helpful to users because messages will be bounced sooner and will give users the opportunity to fix any mistakes and get a message resent. By default, the server will make 2 attempts. Note: Setting this at 1 retry can be dangerous if the DNS server fails or if there is a loss of Internet connectivity. To disable this feature, set the number of bounces equal to the number of retry intervals.
1
Sébastien Riccio Replied
How I understand it is that after 4 failed DNS resolving attempts it will give up and bounce.

With the four first retries being after 1 + 5 + 5 + 15 minutes, after 26 minutes it will give up.
If you want to disable bounces due to DNS entries, according to the example, it would need to be set to 16 attempts.

But maybe setting DNS Errors before bounce to 10000000 attempts would also disable it as it will never reach that much attempts... Well that's how I understand it, maybe wrongly.
Sébastien Riccio System & Network Admin https://swisscenter.com

Reply to Thread