[Pdns-users] Mail delivery failed: returning message to sender

Sat Jul 26 06:28:20 UTC 2014

I have checked the with test engineer and confirmed that the query
packet is the same for both successful and unsuccessful query (we dit
the packet capture). The server was serving some client at the time of
testing therefore invalid packet may come from these clients. I will
isolate the server and run the test again.

The packet capture of this test is uploaded here for further investigation:
https://dl.dropboxusercontent.com/u/1932762/test-pdns-recursor.pcap  (350KB)

Vu.

On Fri, Jul 25, 2014 at 5:30 PM, abang <abang at t-ipnet.net> wrote:
> Am 25.07.2014 02:06, schrieb Vu Le:
>
> #tail /var/log/messages
> Jul 24 17:59:50 SERVER pdns_recursor[13859]: Error processing or aging
> answer packet: out of bounds: 16 >= 16
>
> This is an exception in doProcessUDPQuestion:
>
> https://github.com/PowerDNS/pdns/blob/master/pdns/pdns_recursor.cc#L893
>
> May be the Spirent testcenter sends sometimes invalid query packets?
>
> Winfried

On Sat, Jul 26, 2014 at 11:50 AM, Mail Delivery System
<Mailer-Daemon at xs.powerdns.com> wrote:
> This message was created automatically by mail delivery software.
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
>   pipe to |/var/lib/mailman/mail/mailman post pdns-users
>     generated by pdns-users at xs.powerdns.com
>     local delivery failed
>
> The following text was generated during the delivery attempt:
>
> ------ pipe to |/var/lib/mailman/mail/mailman post pdns-users
>        generated by pdns-users at xs.powerdns.com ------
>
> Group mismatch error.  Mailman expected the mail
> wrapper script to be executed as group "daemon", but
> the system's mail server executed the mail script as
> group "Debian-exim".  Try tweaking the mail server to run the
> script as group "daemon", or re-run configure,
> providing the command line option `--with-mail-gid=Debian-exim'.
>
> ------ This is a copy of the message, including all the headers. ------
>
> Return-path: <lev.fpt at gmail.com>
> Received: from mail-ig0-x233.google.com ([2607:f8b0:4001:c05::233])
>         by xs.powerdns.com with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16)
>         (Exim 4.71)
>         (envelope-from <lev.fpt at gmail.com>)
>         id 1XAtw7-000836-Uw
>         for pdns-users at xs.powerdns.com; Sat, 26 Jul 2014 06:50:27 +0200
> Received: by mail-ig0-f179.google.com with SMTP id h18so1656103igc.12
>         for <pdns-users at xs.powerdns.com>; Fri, 25 Jul 2014 21:50:22 -0700 (PDT)
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
>         d=gmail.com; s=20120113;
>         h=mime-version:in-reply-to:references:date:message-id:subject:from:to
>          :cc:content-type;
>         bh=vHqq30y1d3aAqjB9I7cXfmxIwK5DbL+MtUE6VTH96SI=;
>         b=DG2Uzb6ZozZfR5jeB9uBvbueNbt8J0mLANor1eRJM4kYq1gWJg4U9VclP8Xox7z89R
>          Y/Ib+SVpN7kSJet9S1E9EhMNQlhrqDbcia70BJH20C/Ley28Y/ZTWw0Vmfo8F8aUZIII
>          9W8N+bwHjy1FpVm89PKzS+/EbFnbAAQgIDaBWTMYzpsI7DBTSR94Fsj0CilCpjHMc7aT
>          sf4bSu7gJHHG4Kr0l5t+B9C9oB3ej1qbyuebAo2TaZh4ST+i/UNggodNZKEnZJsNADaO
>          zcMD3gTED0MJ+1+tToE0DoX7YlypbzqLLKKR5P0LM0KX/9YdE1u1oXZ5TLBJ9z4nlpGu
>          bd7w==
> MIME-Version: 1.0
> X-Received: by 10.42.101.77 with SMTP id d13mr26265634ico.53.1406350221857;
>  Fri, 25 Jul 2014 21:50:21 -0700 (PDT)
> Received: by 10.64.73.33 with HTTP; Fri, 25 Jul 2014 21:50:21 -0700 (PDT)
> In-Reply-To: <53D231BA.3090803 at t-ipnet.net>
> References: <20140724140154.GA28500 at pi.ip.fi>
>         <CANHmLzXN_LAVL41fL8yf-DwP50r+_ey4XekcNyQ9Ng5TCujufQ at mail.gmail.com>
>         <53D231BA.3090803 at t-ipnet.net>
> Date: Sat, 26 Jul 2014 11:50:21 +0700
> Message-ID: <CANHmLzVB=13cW11gYr0YWO1705TJ4=2pQgysnTrR_sf9_DL-jg at mail.gmail.com>
> Subject: Re: [Pdns-users] Missing Answers RR in some response
> From: Vu Le <lev.fpt at gmail.com>
> To: abang <abang at t-ipnet.net>
> Cc: "pdns-users at xs.powerdns.com" <pdns-users at xs.powerdns.com>
> Content-Type: text/plain; charset=UTF-8
> X-Spam_score: -1.9
> X-Spam_score_int: -18
> X-Spam_bar: -
> X-Spam_report: Spam detection software, running on the system "xs.powerdns.com", has
>  identified this incoming email as possible spam.  The original message
>  has been attached to this so you can view it (if it isn't spam) or label
>  similar future email.  If you have any questions, see
>  the administrator of that system for details.
>
>  Content preview:  I have checked the with test engineer and confirmed that the
>     query packet is the same for both successful and unsuccessful query (we dit
>     the packet capture). The server was serving some client at the time of testing
>     therefore invalid packet may come from these clients. I will isolate the
>    server and run the test again. [...]
>
>  Content analysis details:   (-1.9 points, 5.0 required)
>
>   pts rule name              description
>  ---- ---------------------- --------------------------------------------------
>   0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
>                              (lev.fpt[at]gmail.com)
>  -0.0 SPF_PASS               SPF: sender matches SPF record
>  -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
>                              [score: 0.0000]
>   0.0 T_DKIM_INVALID         DKIM-Signature header exists but is not valid
>
> I have checked the with test engineer and confirmed that the query
> packet is the same for both successful and unsuccessful query (we dit
> the packet capture). The server was serving some client at the time of
> testing therefore invalid packet may come from these clients. I will
> isolate the server and run the test again.
>
> The packet capture of this test is uploaded here for further investigation:
> https://dl.dropboxusercontent.com/u/1932762/test-pdns-recursor.pcap  (350KB)
>
> Vu.
>
> On Fri, Jul 25, 2014 at 5:30 PM, abang <abang at t-ipnet.net> wrote:
>> Am 25.07.2014 02:06, schrieb Vu Le:
>>
>> #tail /var/log/messages
>> Jul 24 17:59:50 SERVER pdns_recursor[13859]: Error processing or aging
>> answer packet: out of bounds: 16 >= 16
>>
>> This is an exception in doProcessUDPQuestion:
>>
>> https://github.com/PowerDNS/pdns/blob/master/pdns/pdns_recursor.cc#L893
>>
>> May be the Spirent testcenter sends sometimes invalid query packets?
>>
>> Winfried