Re: [bitfolk] Odd mail issue - kohinoorfoods.co.uk

Top Page

Reply to this message
Author: Jan Henkins
Date:  
To: users
Subject: Re: [bitfolk] Odd mail issue - kohinoorfoods.co.uk
Hmm... Whois against nss365.com comes up with something interesting. A
small excerpt:

nns365.com

Registrant Contact Information :
Private
Registration
WhoisGuardService.com
nns365.com@???
Tian Hong Shan Zhuang, BLd. 7, Office 104
Nanjing
210049
86 2584752362
86 2584752360

One can start following the breadcrumbs from there and come up with
something that looks perhaps a little bit suspicious... :-/

On 31/12/12 15:53, Gavin Westwood wrote:
> Thank you both. I've been doing some further "dig"ing and it seems
> that the nameservers that are supposed to be being used, aren't always
> - instead different nameservers (ns1.nns365.com, ns2.nns365.com) are
> being used. Their whois seems to be correct (ns1.csiplhosting.net,
> ns2.csiplhosting.net), so I'm still rather puzzled as to why this is...
>
> Gavin
>
> On 31/12/2012 15:45, James Gregory wrote:
>> There seem to be several issues actually:
>>
>> 1) the MX records are sometimes there, and sometimes not...
>> dig kohinoorfoods.co.uk <http://kohinoorfoods.co.uk> MX
>> from my machine (using Google DNS), the MX records are present. >From
>> my Bitfolk VPS, they are missing.
>>
>> 2) While they have two MX records, they both point to the same IP
>> address (85.119.248.7) and that machine doesn't appear to be
>> accepting SMTP requests (telnet a.mx.apm-internet.net
>> <http://a.mx.apm-internet.net> 25 seems to fail to connect)
>>
>> James
>>
>>
>> On 31 December 2012 15:39, Daniel Case <danielcase10@???
>> <mailto:danielcase10@gmail.com>> wrote:
>>
>>     It looks like a problem on their end to me, it seems to be
>>     finding an ip address okay but their server is refusing the
>>     connection.....

>>
>>     On 31 Dec 2012 15:34, "Gavin Westwood"
>>     <bitfolk-lists@???
>>     <mailto:bitfolk-lists@gavinwestwood.me.uk>> wrote:

>>
>>         I'm having some odd issues with one of my clients not being
>>         able to send emails to the domain kohinoorfoods.co.uk
>>         <http://kohinoorfoods.co.uk> via my server.

>>
>>         From Exim's logs:

>>
>>         2012-12-31 12:01:09 1Tpe3E-0001wT-Fy kohinoorfoods.co.uk
>>         <http://kohinoorfoods.co.uk> [50.57.203.17]
>>         Connection refused
>>         2012-12-31 12:01:09 1Tpe3E-0001wT-Fy ==
>>         xxx@??? <mailto:xxx@kohinoorfoods.co.uk>
>>         R=dnslookup T=remote_smtp defer (111): Connection refused
>>         2012-12-31 12:01:09 1Tpe3E-0001wT-Fy ==
>>         yyy@??? <http://kohinoorfoods.co.uk>
>>         R=dnslookup T=remote_smtp defer (111): Connection refused
>>         2012-12-31 12:01:09 1Tpe3E-0001wT-Fy ==
>>         zzz@??? <mailto:zzz@kohinoorfoods.co.uk>
>>         R=dnslookup T=remote_smtp defer (111): Connection refused

>>
>>         Oddly they can send mail to them from their Blackberry, but
>>         to me their DNS looks wrong - no MX records for a start (ip
>>         is of their web server).

>>
>>         I checked the following two websites to verify that it wasn't
>>         just me:

>>
>>         http://centralops.net/co/DomainDossier.aspx?addr=kohinoorfoods.co.ukanddom_dns=trueandsvc_scan=true

>>
>>         http://dnscheck.iis.se/?time=1356957861&id=2916138&view=advanced&test=standard

>>
>>         However their IT support advise: "Looking at their logs it
>>         appears that when they are doing the DNS lookup to find the
>>         MX records for your domain its unable to find any records,
>>         this to me indicates a problem with their DNS server, the
>>         site they have used to check http://centralops.net doesn’t
>>         seem to find any MX records for your domain, but if I google
>>         MX Lookup and run the same test from at least the top 5 MX
>>         Lookup sites I can successfully see that the MX records are
>>         a.mx.apm-internet.net <http://a.mx.apm-internet.net> and
>>         b.mx.apm-internet.net <http://b.mx.apm-internet.net>

>>
>>         As there is on one person who seems to be having this problem
>>         I would suggest therefore that the problem is actually with
>>         the DNS servers that they are using to route mail out, if
>>         multiple places were reporting the same problem then it may
>>         be a problem with whoever hosts your domain."

>>
>>         Can anyone else verify that this isn't just a problem with my
>>         server?

>>
>>         Thanks

>>
>>         Gavin

>>
>>
>>         _______________________________________________
>>         users mailing list
>>         users@??? <mailto:users@lists.bitfolk.com>
>>         https://lists.bitfolk.com/mailman/listinfo/users

>>
>>
>>     _______________________________________________
>>     users mailing list
>>     users@??? <mailto:users@lists.bitfolk.com>
>>     https://lists.bitfolk.com/mailman/listinfo/users

>>
>>
>>
>>
>> _______________________________________________
>> users mailing list
>> users@???
>> https://lists.bitfolk.com/mailman/listinfo/users
>
>
>
> _______________________________________________
> users mailing list
> users@???
> https://lists.bitfolk.com/mailman/listinfo/users



--

Regards,
Jan Henkins