Strange sendmail behaviour after upgrade to 9.1-BETA2

[Pavel Timofeev]

Got some new info. I read this
https://lists.isc.org/pipermail/bind-users/2006-August/063528.html
Perhaps, the problem because our MS DNS server returns SERVFAIL on AAAA query.
It happens in case of often AAAA queries. It's 9.2-RC1:
....
14:59:50.973445 IP reticulum.xxx.ru.29244 > hercules.xxx.ru.domain:
53419+ MX? xxx.ru. (24)
14:59:50.973754 IP hercules.xxx.ru.domain > reticulum.xxx.ru.29244:
53419* 1/0/1 MX kalmar.xxx.ru. 10 (63)
14:59:50.974061 IP reticulum.xxx.ru.56461 > hercules.xxx.ru.domain:
53420+ AAAA? kalmar.xxx.ru. (31)
14:59:50.974340 IP hercules.xxx.ru.domain > reticulum.xxx.ru.56461:
53420* 0/1/0 (82)
14:59:50.974570 IP reticulum.xxx.ru.28332 > hercules.xxx.ru.domain:
53421+ AAAA? kalmar.xxx.ru. (31)
14:59:50.974887 IP hercules.xxx.ru.domain > reticulum.xxx.ru.28332:
53421* 0/1/0 (82)
14:59:50.974919 IP reticulum.xxx.ru.21453 > hercules.xxx.ru.domain:
53422+ AAAA? kalmar. (24)
14:59:50.975290 IP hercules.xxx.ru.domain > reticulum.xxx.ru.21453:
53422 ServFail 0/0/0 (24)
....
At third time MS DNS returned SERVFAIL. Why sendmail asks AAAA for 3 times?
Something wrong with bind libraries? I think if there was no SERVFAIL
on AAAA it would ask for A record then.

The opposite situation on 9.1-RELEASE. Here sendmail asks AAAA only
for 1 time. Then it asks A.
...
14:30:45.061950 IP 10.0.2.15.30979 > hercules.xxx.ru.domain: 62684+
MX? xxx.ru. (24)
14:30:45.063064 IP hercules.xxx.ru.domain > 10.0.2.15.30979: 62684*
1/0/1 MX kalmar.xxx.ru. 10 (63)
14:30:45.063624 IP 10.0.2.15.39212 > hercules.xxx.ru.domain: 62685+
AAAA? kalmar.xxx.ru. (31)
14:30:45.064460 IP hercules.xxx.ru.domain > 10.0.2.15.39212: 62685* 0/1/0 (82)
14:30:45.064766 IP 10.0.2.15.44381 > hercules.xxx.ru.domain: 62686+ A?
kalmar.xxx.ru. (31)
14:30:45.065530 IP hercules.xxx.ru.domain > 10.0.2.15.44381: 62686*
1/0/0 A 192.168.31.190 (47)
...

I will continue investigation.



2013/8/4 Pavel Timofeev <timp87 at gmail.com>:
> Same thing on RELENG/9.2
>
> 2013/8/3 Pavel Timofeev <timp87 at gmail.com>:
>> 2013/8/2 Ruben de Groot <mail25 at bzerk.org>:
>>> On Wed, Jul 31, 2013 at 04:54:08PM +0400, Pavel Timofeev typed:
>>>> I've just installed new fresh 9.2-BETA2 amd64 on another machine.
>>>> Same behaviour - Sendmail asks DNS only for AAAA record of mx server.
>>>> We don't use IPv6 in our company.
>>>>
>>>> 2013/7/31 Pavel Timofeev <timp87 at gmail.com>:
>>>> > I wanted to say that sendmail asks only AAAA (IPv6) record of mx
>>>> > server, but not A (IPv4).
>>>> > Any ideas?
>>>> >
>>>> > 2013/7/31 Pavel Timofeev <timp87 at gmail.com>:
>>>> >> Looks like my sendmail uses only IPv6 to resolve mx server dns name to
>>>> >> ip address.
>>>> >>
>>>> >> 14:59:50.793338 IP reticulum.xxx.ru.19032 > hercules.xxx.ru.domain:
>>>> >> 53417+ AAAA? xxx.ru. (24)
>>>> >>                                                    [13/98]
>>>> >> 14:59:50.793662 IP hercules.xxx.ru.domain > reticulum.xxx.ru.19032:
>>>> >> 53417* 0/1/0 (75)
>>>> >> 14:59:50.793696 IP reticulum.xxx.ru.55299 > hercules.xxx.ru.domain:
>>>> >> 53418+ A? xxx.ru. (24)
>>>
>>> Here it is definately asking an A record.
>>
>> And? It's not A record of mx server.
>>
>>>> >> 14:59:50.794087 IP hercules.xxx.ru.domain > reticulum.xxx.ru.55299:
>>>> >> 53418* 7/0/0 A 192.168.2.11, A 192.168.2.12, A 192.168.41.4, A
>>>> >> 192.168.14.12, A 192.168.34.100, A 192.168.34.110, A 192.168.44.19
>>>> >>  (136)
>>>
>>> And here is the reply. The quetion is more why is it repeating the same
>>> query (below) over and over.
>>
>> Yes, reply about xxx.ru, not about mx server's IP which is kalmar.xxx.ru
>>
>>>
>>> Ruben
>>>
>>>> >> 14:59:50.973445 IP reticulum.xxx.ru.29244 > hercules.xxx.ru.domain:
>>>> >> 53419+ MX? xxx.ru. (24)
>>>> >> 14:59:50.973754 IP hercules.xxx.ru.domain > reticulum.xxx.ru.29244:
>>>> >> 53419* 1/0/1 MX kalmar.xxx.ru. 10 (63)
>>>> >> 14:59:50.974061 IP reticulum.xxx.ru.56461 > hercules.xxx.ru.domain:
>>>> >> 53420+ AAAA? kalmar.xxx.ru. (31)
>>>> >> 14:59:50.974340 IP hercules.xxx.ru.domain > reticulum.xxx.ru.56461:
>>>> >> 53420* 0/1/0 (82)
>>>> >> 14:59:50.974570 IP reticulum.xxx.ru.28332 > hercules.xxx.ru.domain:
>>>> >> 53421+ AAAA? kalmar.xxx.ru. (31)
>>>> >> 14:59:50.974887 IP hercules.xxx.ru.domain > reticulum.xxx.ru.28332:
>>>> >> 53421* 0/1/0 (82)
>>>> >> 14:59:50.974919 IP reticulum.xxx.ru.21453 > hercules.xxx.ru.domain:
>>>> >> 53422+ AAAA? kalmar. (24)
>>>> >> 14:59:50.975290 IP hercules.xxx.ru.domain > reticulum.xxx.ru.21453:
>>>> >> 53422 ServFail 0/0/0 (24)
>>>> >> 14:59:50.975314 IP reticulum.xxx.ru.63038 > hercules.xxx.ru.domain:
>>>> >> 53422+ AAAA? kalmar. (24)
>>>> >> 14:59:50.975674 IP hercules.xxx.ru.domain > reticulum.xxx.ru.63038:
>>>> >> 53422 ServFail 0/0/0 (24)
>>>> >> 14:59:50.975749 IP reticulum.xxx.ru.38393 > hercules.xxx.ru.domain:
>>>> >> 53423+ AAAA? kalmar.xxx.ru. (31)
>>>> >> 14:59:50.976105 IP hercules.xxx.ru.domain > reticulum.xxx.ru.38393:
>>>> >> 53423* 0/1/0 (82)
>>>> >> 14:59:50.976176 IP reticulum.xxx.ru.45558 > hercules.xxx.ru.domain:
>>>> >> 53424+ AAAA? kalmar. (24)
>>>> >> 14:59:50.976483 IP hercules.xxx.ru.domain > reticulum.xxx.ru.45558:
>>>> >> 53424 ServFail 0/0/0 (24)
>>>> >> 14:59:50.976512 IP reticulum.xxx.ru.45297 > hercules.xxx.ru.domain:
>>>> >> 53424+ AAAA? kalmar. (24)
>>>> >> 14:59:50.976864 IP hercules.xxx.ru.domain > reticulum.xxx.ru.45297:
>>>> >> 53424 ServFail 0/0/0 (24)
>>>> >>
>>>> >> How to force it to use IPv4?
>>>> _______________________________________________
>>>> freebsd-stable at freebsd.org mailing list
>>>> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
>>>> To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"