Package: postfix Version: 3.7.6-0+deb12u2 Severity: important When sending a mail to some @helpdesk.inria.fr address, postfix tries to connect to helpdesk.inria.fr (which does not have a MX) instead of using the MX of the parent domain inria.fr:
Nov 21 15:43:26 joooj postfix/smtp[748304]: D1A104A9: to=<[...]@helpdesk.inria.fr>, relay=none, delay=76462, delays=76431/0.1/30/0, dsn=4.4.1, status=deferred (connect to helpdesk.inria.fr[128.93.128.88]:25: Connection timed out) Some admin at Inria tells me that this is incorrect and that postfix should connect to the MX of the parent domain in such a case. FYI: joooj:~> dig -t mx helpdesk.inria.fr ; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> -t mx helpdesk.inria.fr ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4551 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;helpdesk.inria.fr. IN MX ;; ANSWER SECTION: helpdesk.inria.fr. 2260 IN CNAME prod-symfonyu20-app.inria.fr. ;; AUTHORITY SECTION: inria.fr. 644 IN SOA dns.inria.fr. hostmaster.inria.fr. 2023112008 7200 1800 3600000 900 ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP) ;; WHEN: Tue Nov 21 15:53:12 CET 2023 ;; MSG SIZE rcvd: 131 joooj:~> dig -t mx prod-symfonyu20-app.inria.fr ; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> -t mx prod-symfonyu20-app.inria.fr ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30346 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;prod-symfonyu20-app.inria.fr. IN MX ;; AUTHORITY SECTION: inria.fr. 586 IN SOA dns.inria.fr. hostmaster.inria.fr. 2023112008 7200 1800 3600000 900 ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP) ;; WHEN: Tue Nov 21 15:54:10 CET 2023 ;; MSG SIZE rcvd: 108 joooj:~> dig -t mx inria.fr ; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> -t mx inria.fr ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33064 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;inria.fr. IN MX ;; ANSWER SECTION: inria.fr. 1951 IN MX 10 mail3-smtp-sop.national.inria.fr. inria.fr. 1951 IN MX 10 mail2-smtp-roc.national.inria.fr. ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP) ;; WHEN: Tue Nov 21 15:58:03 CET 2023 ;; MSG SIZE rcvd: 108 -- System Information: Debian Release: 12.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 6.1.0-13-amd64 (SMP w/1 CPU thread; PREEMPT) Kernel taint flags: TAINT_WARN Locale: LANG=POSIX, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages postfix depends on: ii adduser 3.134 ii cpio 2.13+dfsg-7.1 ii debconf [debconf-2.0] 1.5.82 ii dpkg 1.21.22 ii e2fsprogs 1.47.0-2 ii init-system-helpers 1.65.2 ii libc6 2.36-9+deb12u3 ii libdb5.3 5.3.28+dfsg2-1 ii libicu72 72.1-3 ii libnsl2 1.3.0-2 ii libsasl2-2 2.1.28+dfsg-10 ii libssl3 3.0.11-1~deb12u2 ii netbase 6.4 ii ssl-cert 1.1.2 Versions of packages postfix recommends: ii ca-certificates 20230311 ii python3 3.11.2-1+b1 Versions of packages postfix suggests: ii bsd-mailx [mail-reader] 8.1.2-0.20220412cvs-1 ii emacs-nox [mail-reader] 1:28.2+1-15 ii libsasl2-modules 2.1.28+dfsg-10 ii mailutils [mail-reader] 1:3.15-4 ii mutt [mail-reader] 2.2.12-0.1~deb12u1 pn postfix-cdb <none> ii postfix-doc 3.7.6-0+deb12u2 pn postfix-ldap <none> pn postfix-lmdb <none> pn postfix-mta-sts-resolver <none> pn postfix-mysql <none> ii postfix-pcre 3.7.6-0+deb12u2 pn postfix-pgsql <none> ii postfix-sqlite 3.7.6-0+deb12u2 ii procmail 3.22-27 pn resolvconf <none> ii sasl2-bin 2.1.28+dfsg-10 pn ufw <none> -- debconf information: * postfix/main_mailer_type: Internet Site postfix/dynamicmaps_conversion_warning: postfix/relay_restrictions_warning: postfix/bad_recipient_delimiter: * postfix/mailbox_limit: 1073741824 postfix/main_cf_conversion_warning: true * postfix/mynetworks: 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 postfix/mydomain_warning: postfix/not_configured: postfix/rfc1035_violation: false * postfix/root_address: postfix/newaliases: false postfix/sqlite_warning: * postfix/recipient_delim: - * postfix/destinations: joooj.vinc17.net, vinc17.net, joooj, localhost.localdomain, localhost postfix/compat_conversion_warning: true * postfix/procmail: true postfix/relayhost: postfix/lmtp_retired_warning: true * postfix/mailname: vinc17.net postfix/kernel_version_warning: postfix/retry_upgrade_warning: * postfix/protocols: all postfix/tlsmgr_upgrade_warning: * postfix/chattr: true -- Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
