DNS problems

Discussion in 'Installation/Configuration' started by recin, Feb 17, 2021.

Tags:
  1. recin

    recin Active Member

    Can you reach this domain: ***.com?
    I have Ispconfig 3.2.2 on Ubuntu 18.04 with apache installed following the perfect server guide.
    I'm having problems with one domain called ***.com. I have DNS server up and running but I dont use it, I use DNS servers from domain name provider.
    I attached images of DNS config.
    I had this web hosted on my server and mail in another non ispconfig server. Last week I change MX records to point to my ispconfig server but after 2 days, MX record didn't update, when I check it from dnschecker.org it sometimes points to ispconfig server and sometimes to old server.
    I tried changing DNS to cloudflare but now I can't even reach the web and cannot ping domain from ispconfig server itself!
    I change DNS servers again to provider.
    In the meantime, some mails arrive on old server (i keep it as secondary MX Record) and cannot send nor receive from some domains, getting errors like this in mail queue:
    Code:
    (host mx01.1and1.es[217.72.192.67] said: 451 Requested action aborted: local error in processing (in reply to MAIL FROM command))
    
    Sender address rejected: Domain not found (in reply to RCPT TO command)
    While other like gmail or hotmail works fine.
    Somebody knows what could be the problem?
    Should I keep DNS record on ispconfig even if I'm using another DNS server or can I delete them completely?
    Why cannot I ping domain from ispconfig itself?
    Thanks in advance

    edit: hide domain names
     

    Attached Files:

    Last edited: Feb 21, 2021
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    If you don't use ISPConfig for the nameservers, remove the zone to prevent any confusion.

    Have you added the domain in ISPConfig as site and email domain?
    Take a look at: https://intodns.com/example.com and https://zonemaster.net/result/XXX
    One of the first issues is that you added DNSSEC keys to the registry, but DNSSEC is not enabled on the nameserver. This is your first problem, so solve that and then proceed.
     
    Last edited: Feb 21, 2021
  3. nhybgtvfr

    nhybgtvfr Well-Known Member HowtoForge Supporter

    when did you change the records at virtualns.net?
    the record for your backup mx at net2.webcloud.es doesn't exist on ns2.virtualns.net
    and the a record for mail.acusmed.com hasn't updated on their either.

    Code:
    nslookup -q=mx acusmed.com ns1.virtualns.net
    Server:         ns1.virtualns.net
    Address:        185.57.196.10#53
    
    acusmed.com     mail exchanger = 10 net2.webcloud.es.
    acusmed.com     mail exchanger = 0 mail.acusmed.com.
    
    nslookup -q=mx acusmed.com ns2.virtualns.net
    Server:         ns2.virtualns.net
    Address:        31.47.76.130#53
    
    acusmed.com     mail exchanger = 0 mail.acusmed.com.
    
    nslookup  mail.acusmed.com ns2.virtualns.net
    Server:         ns2.virtualns.net
    Address:        31.47.76.130#53
    
    Name:   mail.acusmed.com
    Address: 149.202.228.232
    
    nslookup  mail.acusmed.com ns1.virtualns.net
    Server:         ns1.virtualns.net
    Address:        185.57.196.10#53
    
    Name:   mail.acusmed.com
    Address: 78.47.140.10
    
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Probably due to a problem with the serial number, could be a problem with the hosting provider.
     
  5. recin

    recin Active Member

    Thanks both a lot.
    It seems now my provider enables dnssec by default on new domains. I disable it and delete DNS records on ispconfig server.
    Still no ping from ispconfig but there is from my computer (this morning i haven't).
    Ill be waiting to see if this solve the problem
     
    Last edited: Feb 17, 2021
  6. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Most likely you'll have to wait for it to propagate. This can take quite some time. Check again in 12hrs.
     
  7. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    Yes. It seems working fine on my side.
     
  8. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    You still have problems with your setup. Ask your provider about the incorrect serial. This can cause your nameservers to have difference in the set records.

    Also, make sure your MX record does not point to a CNAME.
    See https://intodns.com/example.com
     
    Last edited: Feb 21, 2021
  9. recin

    recin Active Member

    This should be the problem.

    I have same problem with domain ***.com: I still receive mails in old server, even yesterday I received mails in web server, that is a differente one, totally new and NEVER was MX target.
    I suposse is because of this:
    Code:
    nslookup -q=mx ***.com ns1.virtualns.net
    Servidor:  UnKnown
    Address:  185.57.196.10
    
    ***.com MX preference = 0, mail exchanger = mail.***.com
    ***.com MX preference = 20, mail exchanger = baldajos.com
    ***.com MX preference = 10, mail exchanger = gigastur.net
    mail.***.com    internet address = 78.47.140.10
    Code:
    nslookup -q=mx ***.com ns2.virtualns.net
    Servidor:  UnKnown
    Address:  31.47.76.130
    
    ***.com MX preference = 0, mail exchanger = ***.com
    ***.com internet address = 149.55.55.55
    Secondary DNS server points MX to domain.com instead mail.domain.com. At least now this IP is from the old mail server instead of web server

    I changed secondary DNS server to another provider now and will see.
    On the other hand, still no ping to ***.com from ispconfig server, and the another domain sometimes ping, sometimes don't.
    Will ask to DNS provider
     
    Last edited: Feb 21, 2021
  10. nhybgtvfr

    nhybgtvfr Well-Known Member HowtoForge Supporter

    your new nameservers look ok. so should just be a case of waiting for propagation to complete.
     
  11. recin

    recin Active Member

    Thanks all for your help. It's working now. I think I should change my DNS provider
     
  12. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Glad to hear. Maybe, if they have more issues. When I started with webhosting I used the DNS server's from someone else for the few zones I had. When I got more clients, I started hosting it myself.
     
  13. recin

    recin Active Member

    How you deal with secondary DNS server? I could use ispconfig as primary but then, will I need to get a secondary VPS and install another ispconfig instance? or are there any other simpler DNS server?

    On the other hand, could you please edit your comments and delete any domain reference? Thanks
     
  14. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Yes, set up a second ISPConfig server as slave. There will be a new guide about this soon. There are also providers where you can get a secondary DNS service from them.

    Yes, I will edit them.
     
  15. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    There is link to DNS with ISPConfig tutorial in my signature.
     
  16. nhybgtvfr

    nhybgtvfr Well-Known Member HowtoForge Supporter

    you realise that even if we do that, there isn't anything mentioned in this thread that wouldn't be publicly accessible information anyway simply by virtue of the domain being registered and having a public dns zone configured.
     

Share This Page