#haraka

_smf_ I got that grafana stuff working. It's a bit of a pain to setup but at least it's there now.

Do you just instrument everything with lynx?

or something else?

baudehlo: I just used lynx

I can't figure out how to query diskio in grafana. Did you ever do that?

I'm not monitoring diskio here, but I can't see why you couldn't?

It's a standard feature of telegraf, but I can't figure out what the actual query should be.

I think I found it.

SELECT non_negative_derivative("read_bytes", 10s) FROM "diskio" WHERE $timeFilter

I am supposed to receive e-mail from this domain: telesol.com.gh

but it gets rejected with this error by Haraka: MX without A/AAAA records

Sounds like your dns is busted.

install a local resolver and use that.

that's what I am doing

local bind cache

I am querying against it and it returns results just fine

$ host -t mx telesol.com.gh

telesol.com.gh mail is handled by 10 mx.telesol.com.gh.

$ host mx.telesol.com.gh

mx.telesol.com.gh has address 197.159.130.213

did you update your resolv.conf?

oh yes, it's running the same without issues

ah wait

now it's failing

mx.telesol.com.gh has address 197.159.130.213

Host mx.telesol.com.gh not found: 2(SERVFAIL)

I wonder what that second part is

I need to run tcpdump. the flow of dns queries will kill me

12:57:35.068920 IP 192.168.1.139.50535 > 192.168.1.24.domain: 15278+ AAAA? mx.telesol.com.gh. (35)

it tries to do an AAAA lookup against that name which gets the SERVFAIL

the question is, why does Haraka attempt an AAAA lookup

because we support IPv6

so AAAA lookup on 8.8.8.8 returns no answer for mx.telesol.com.gh

my cache returns SERVFAIL

I think there's something wrong with that domain

origin = dns, that's got to be wrong

and even so, shouldn't Haraka return a positive result if at least one of the lookups was good ? In this case, the A lookup

looking at the code, the problem appears to be in net_utils

in the get_ips_by_host() function

it returns the error for both records. I'll try and fix

hmm, or not. something is amiss here

why would the host command work but nslookup/haraka dns resolution fail ?

gah, restarting my bind cache solved the issue but this makes no sense whatsoever

Some of the node DNS functions use getaddrbyname and some use internal dns resolver library.

That might explain the difference.

I restarted bind cache, both host & nslookup return an IP for mx.telesol.com.gh

but now Haraka still complains: 450 [BE892A@haraka4] Temp. resolver error (ESERVFAIL)

oh yeah, because now my cache returns SERVFAIL for the mx records of telesol.com.gh

what do you use as local resolver ?

ok, it wasn't a Haraka issue..rather a weird Ghanian issue

in fact, it's a Google Public DNS is evil problem

you should never use 8.8.8.8 on a mail server

I'm not, I use a local resolver

but Google is resolving that name and that serves as proof to the remote end that all is good

when in fact their bind config is broken

bind -> dns