gpg: Signature made Tue Apr 12 10:48:50 2022 UTC
gpg: using DSA key 0E4236CB52951E14536066222099B64CBF15490B
gpg: Good signature from "Andy Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andrew James Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andy Smith (UKUUG) <andy.smith@ukuug.org>" [unknown]
gpg: aka "Andy Smith (BitFolk Ltd.) <andy@bitfolk.com>" [unknown]
gpg: aka "Andy Smith (Linux User Groups UK) <andy@lug.org.uk>" [unknown]
gpg: aka "Andy Smith (Cernio Technology Cooperative) <andy.smith@cernio.com>" [unknown]
Hello,
On Tue, Apr 12, 2022 at 08:31:08AM +0100, Keith Williams wrote:
> Here was the error message
> host mx.lb.btinternet.com[213.120.69.89]
> refused to talk to me: 421 re-prd-rgin-002.btmx-prd.synchronoss.net
> Service
> not available - no PTR record for 85.119.84.35
So pretty clear that they see no PTR record. The next step would be
to query the PTR record yourself, which is what I did in the earlier
email and that confirms there is a problem.
> Here is the reverse zone file ( /var/lib/bind/35-32.84.119.85) for the IP
> address
So by the file name ("35-32.84.119.85") you do perhaps believe that
you are serving the zone "35-32.84.119.85.in-addr.arpa", but by the
actual zone contents:
> 35.84.119.85.in-addr.arpa. IN SOA ns2.keiths-place.co.uk.
[…]
> $ORIGIN 35.84.119.85.in-addr.arpa.
… you are serving the zone "35.84.119.85.in-addr.arpa".
So all these entries:
> PTR keynesmail.com.
> PTR www.keynesmail.com.
> PTR mx10.keynesmail.com.
> PTR webmail.keynesmail.com.
> PTR aakanee.com.
> PTR www.aakanee.com.
> PTR leightonbuzzard.net.
> PTR keiths.space.
> PTR www.keiths.space.
> PTR splog.keiths.space.
> PTR ns1.keiths-place.co.uk.
> PTR www.leightonbuzzard.net.
> PTR newportpagnell.net.
> PTR www.newportpagnell.net.
> PTR mail.wingravegolf.co.uk.
> PTR webmail.wingravegolf.co.uk.
… are for "35.84.119.85.in-addr.arpa" which is not the query that
arrives at your nameservers.
On the Panel web page for this:
https://panel.bitfolk.com/dns/
…when you select to have the reverse DNS for the single IP address
delegated to your nameservers, it does tell you on the page the name
of the zone that you should serve (plus example content):
https://ibb.co/bP5jP9p
If you (or anyone else) has any suggestions on how to make this
clearer please do let us know.
Alternatively if it is not straightforward, it may be best to just
directly set the reverse DNS of your single IP there in that
interface. You aren't really gaining much by having this delegated;
it's just one more thing to have to configure.
Cheers,
Andy
--
https://bitfolk.com/ -- No-nonsense VPS hosting
