Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Dreamhost bouncing LL mail?

Huns Valen
Don't PM me here.
Join date: 3 May 2003
Posts: 2,749
11-01-2005 07:03
From: Adam Zaius
Your searching 'A' records which are not used for mail. Try MX records instead.
Boy, is my face red!

Oh well... Mark, I'm going to reply to DH support, asking them to call you directly. In the meantime, can you telnet to mx1.postal.mail.dreamhost.net:25 and post what happens?
Mark Linden
Funky Linden Monkey
Join date: 20 Nov 2002
Posts: 179
11-01-2005 10:44
Okay, catching up with this thread:

Our ISP doesn't block traceroute; in fact, I don't know of many high-end ISPs who do. Just makes debugging harder, and the bad guys can map your network anyway.

I can't establish a connection to mx1.postal.mail.dreamhost.net:25. This is almost certainly an IP block or router hiccough.

Anyway, the whois contact information for dreamhost lists a phone number that goes straight to an answering machine. I'll leave a message, but I'm not confident that it'll get checked.
blaze Spinnaker
1/2 Serious
Join date: 12 Aug 2004
Posts: 5,898
11-01-2005 11:09
From: Adam Zaius
blah blah blah


I think if you bothered reading between the lines you would have realised that I pointed out there was an MX record. Just not an A record.

Some systems don't work with email when no A record exists on the host name. Not a lot, but some.
blaze Spinnaker
1/2 Serious
Join date: 12 Aug 2004
Posts: 5,898
11-01-2005 11:12
From: Mark Linden

Our ISP doesn't block traceroute; in fact, I don't know of many high-end ISPs who do. Just makes debugging harder, and the bad guys can map your network anyway.




try

traceroute microsoft.com
traceroute yahoo.com
traceroute ebay.com
traceroute msn.com

etc
etc


Everyone blocks traceroute.

And so do you:

Here's a traceroute from www.net.berkeley.edu to ns0.lindenlab.com

http://www.net.berkeley.edu/cgi-bin/traceroute?ns0.lindenlab.com
blaze Spinnaker
1/2 Serious
Join date: 12 Aug 2004
Posts: 5,898
11-01-2005 11:20
From: Mark Linden
I can't establish a connection to mx1.postal.mail.dreamhost.net:25. This is almost certainly an IP block or router hiccough.



I can't establish a connection either.

Try "telnet mx1.looney.mail.dreamhost.net 25"

Huns, use "dig mx dreamhost.net" or "dig mx dreamhost.com"
blaze Spinnaker
1/2 Serious
Join date: 12 Aug 2004
Posts: 5,898
11-01-2005 11:40
Here's an example of Ipswitch mail smtpd:

From: someone

With the ip of the SMTP client:
Query DNS for PTR record of ip (reverse lookup)

Does the PTR record exist?
No: reject mail.


Does the PTR record refer to the HELO / EHLO hostname?
No: reject mail.



Does the ip address's "PTR hostname" have an A record??
No: reject mail.


Does the ip address's "PTR hostname" have an MX record??
No: reject mail.



http://bind8nt.meiway.com/itsaDNSmess.cfm
blaze Spinnaker
1/2 Serious
Join date: 12 Aug 2004
Posts: 5,898
11-01-2005 11:41
The point is: set an A record for LSL.SECONDLIFE.COM
Mark Linden
Funky Linden Monkey
Join date: 20 Nov 2002
Posts: 179
11-01-2005 11:49
From: blaze Spinnaker
try

traceroute microsoft.com
traceroute yahoo.com
traceroute ebay.com
traceroute msn.com

etc
etc


Everyone blocks traceroute.

And so do you:

Here's a traceroute from www.net.berkeley.edu to ns0.lindenlab.com

http://www.net.berkeley.edu/cgi-bin/traceroute?ns0.lindenlab.com


We're talking past each other. There are two types of traceroute. One uses UDP packets on high ports to generate ICMP Port closed responses, another just uses ICMP.

On the Linux traceroute I have available, traceroute -I uses ICMP. I should have been more clear; that's the one that I usually use (actually, I usually use mtr, but you get the idea).

But you're right, ebay, microsoft, and msn block both. It's their network and they can block ICMP if they want, but we chose not to since it makes debugging more difficult and doesn't actually help you very much.
Mark Linden
Funky Linden Monkey
Join date: 20 Nov 2002
Posts: 179
11-01-2005 11:50
From: blaze Spinnaker
I can't establish a connection either.

Try "telnet mx1.looney.mail.dreamhost.net 25"

Huns, use "dig mx dreamhost.net" or "dig mx dreamhost.com"


Same. I'm going to wait until they call back to do anything else; there's no point in beating a dead horse any more.
Huns Valen
Don't PM me here.
Join date: 3 May 2003
Posts: 2,749
11-01-2005 12:01
From: blaze Spinnaker
I can't establish a connection either.

Try "telnet mx1.looney.mail.dreamhost.net 25"

Huns, use "dig mx dreamhost.net" or "dig mx dreamhost.com"

That's odd, I just typed telnet mx1.postal.mail.dreamhost.net 25 and got the following:
220 sack.dreamhost.com ESMTP

Anyway, I wrote back to DH and asked them to give Mark a call.
Sapphire Bombay
Avatar
Join date: 8 Oct 2003
Posts: 341
11-01-2005 12:05
Mark, you might try [email]support@dreamhost.com[/email] referencing that ticket #1148608.
_____________________
Avatar: A temporary manifestation or aspect of a continuing entity.
Sapphire Bombay
Avatar
Join date: 8 Oct 2003
Posts: 341
11-02-2005 11:10
This is really becoming a problem. I have products that I can't release because of this. Mark, is there a status? Or do I need to find another web host and get off of Dreamhost?
_____________________
Avatar: A temporary manifestation or aspect of a continuing entity.
Huns Valen
Don't PM me here.
Join date: 3 May 2003
Posts: 2,749
11-02-2005 12:30
From: Sapphire Bombay
This is really becoming a problem. I have products that I can't release because of this. Mark, is there a status? Or do I need to find another web host and get off of Dreamhost?
I've had the same thought (leaving Dreamhost) but that raises the question of what to do the next time something like this happens. I'd hate to spend a lot of time (and more than a little money) moving all my domains and databases and crap to some other host, only to have this happen again.
Sapphire Bombay
Avatar
Join date: 8 Oct 2003
Posts: 341
11-02-2005 12:33
From: Huns Valen
I've had the same thought (leaving Dreamhost) but that raises the question of what to do the next time something like this happens. I'd hate to spend a lot of time (and more than a little money) moving all my domains and databases and crap to some other host, only to have this happen again.


I totally agree. I really really don't want to have to go through the hassle and expense. But we are at 2 weeks of downtime here. I have to do something. I have one whole product line totally defunct. I am at wits end on this. And I think we have all been very patient so far.
_____________________
Avatar: A temporary manifestation or aspect of a continuing entity.
Alondria LeFay
Registered User
Join date: 2 May 2003
Posts: 725
11-02-2005 17:54
Perhaps all the SL'ers whom host on Dreamhost should act in unison, just to draw more attention to this whole problem. I know of there is at least 38 SL'ers whom at least at one point had an account - I am sure there is more than that in total.
Adam Brokken
Registered User
Join date: 16 Jun 2005
Posts: 21
11-02-2005 18:08
add one...

39
cua Curie
secondlifes.com/*****
Join date: 14 Nov 2003
Posts: 196
11-02-2005 18:33
I'm a Dreamhost user. So far I have sat back through this episode, thinking it would be taken care of fairly quickly. I can see now thats not happening.

I signed up for their special a year ago with the crowd. They have been the best inexpensive web host I have ever used. They are totally responsive to my issues. They have added worthwhile upgraded features to my account every month I have been a member. Their documentation is awesome. My plan is a hundred times better than when I paid my initial $9.95, without me paying even another dime. I just re-signed with them for 2 years in advance. I highly suggest everyone who needs web hosting use them.

In short they are the company I wish SL was.

Dreamhost is providing the back end services to many SL scripters that Linden Lab should be providing themselves, and at a very affordable price. We are using this service because Linden Lab won't or can't offer it.

You should be making superhuman efforts to fix any broken communications between Dreamhost and SL grid.

If you need any information or assistance please feel free to contact me.
_____________________
"It is better to keep your mouth shut and appear stupid than to open it and remove all doubt." - Mark Twain

"We are what we pretend to be, so we must be careful what we pretend to be." - Kurt Vonnegut
Hiro Pendragon
bye bye f0rums!
Join date: 22 Jan 2004
Posts: 5,905
11-02-2005 22:53
sapphire, perhaps you can start adding email addresses to the Trouble Ticket?

hiro dot pendragon at gmail dot com - and I will pull my hosting and badmouth them to friends if they can't resolve this.
_____________________
Hiro Pendragon
------------------
http://www.involve3d.com - Involve - Metaverse / Emerging Media Studio

Visit my SL blog: http://secondtense.blogspot.com
Huns Valen
Don't PM me here.
Join date: 3 May 2003
Posts: 2,749
11-03-2005 03:06
I'm forwarding the DreamHost tech's latest traceroute to [email]noc@pnap.net[/email] to see if they have any ideas. If I don't get an answer I will try [email]noc@internap.com[/email]. (Mark, sorry if you are already talking to them about the issue.) Maybe that will help bring this outage to an end.
Sapphire Bombay
Avatar
Join date: 8 Oct 2003
Posts: 341
11-03-2005 04:19
From: Hiro Pendragon
sapphire, perhaps you can start adding email addresses to the Trouble Ticket?

hiro dot pendragon at gmail dot com - and I will pull my hosting and badmouth them to friends if they can't resolve this.


It is actually Hun's ticket. But why don't we try this? Everybody that is affected send an email to [email]support@dreamhost.com[/email] copying [email]support@secondlife.com[/email].

Subject: I have lost all communications between Dreamhost and Linden Labs

Body: Approximately 2 weeks ago I lost all ability to communicate between dreamhost.com and lindenlab.com. The ticket # 1148608 has been opened with Dreamhost in reference to this. Mark Linden at Linden Labs has been working this from their side. Could you please let me know the status of this outage and what steps are being taken to resolve it?
_____________________
Avatar: A temporary manifestation or aspect of a continuing entity.
Huns Valen
Don't PM me here.
Join date: 3 May 2003
Posts: 2,749
11-03-2005 11:55
From: someone
Hello,

Internap has received the following concern from a customer of yours that does not appear to be related to a problem with your Internap connectivity (routing or filtering). They request that you please confirm that you are not filtering their source address range, or confirm that you can reach their source, and respond back to their contact.

In their trace below, the next responding hop would be from your LAN.

If you have any questions or concerns please address them to [email]noc@internap.com[/email], or give us a call at one of the numbers below.

Thank you,
-mike _____________________________________________________________________
Mike Buschmann EMAIL: [email]noc@internap.com[/email]
NOC Engineer PHONE: (206) 256-9500 /
Network Operations Center (877) 843-4662 US
Internap Network Services 00800-468-37627 UK
The thing that gets my attention in this email is the following line: "In their trace below, the next responding hop would be from your LAN." (That was the trace that DH support sent me, of trying to traceroute to ns0.lindenlab.com.) It does seem that border1.ge2-1-bbnet2.sfo002.pnap.net is the last hop between Internap and LL's network. I am able to trace ns0.lindenlab.com from my desktop, and it goes through the same last hop.

It seems like either that border router is dropping outbound traffic to DreamHost, or DreamHost has some router that is dropping inbound traffic from Linden Lab.
blaze Spinnaker
1/2 Serious
Join date: 12 Aug 2004
Posts: 5,898
11-03-2005 11:58
Either that or they're just doing a UDP traceroute and not an ICMP one as Mark explained above.

border1.ge2-1-bbnet2.sfo002.pnap.net drops UDP tracroute packets, which is the default traceroute on linux

You need to go tracroute -I in order to do an ICMP traceroute.
Huns Valen
Don't PM me here.
Join date: 3 May 2003
Posts: 2,749
11-03-2005 12:15
From: blaze Spinnaker
Either that or they're just doing a UDP traceroute and not an ICMP one as Mark explained above.

border1.ge2-1-bbnet2.sfo002.pnap.net drops UDP tracroute packets, which is the default traceroute on linux

You need to go tracroute -I in order to do an ICMP traceroute.

$ traceroute -I www.lindenlab.com
traceroute: Warning: www.lindenlab.com has multiple addresses; using 66.150.244.150
traceroute to lindenlab.com (66.150.244.150), 30 hops max, 38 byte packets
1 gw-66-33-192-1 (66.33.192.1) 3.808 ms 4.809 ms 4.361 ms
2 gw-L3 (4.78.192.65) 4.477 ms 1.576 ms 4.360 ms

(etc. etc. etc.)

6 4.78.242.18 (4.78.242.18) 14.304 ms 18.194 ms 14.353 ms
7 border1.ge1-1-bbnet1.sfo002.pnap.net (63.251.63.1) 14.723 ms 14.078 ms 17.847 ms
8 * * *
blaze Spinnaker
1/2 Serious
Join date: 12 Aug 2004
Posts: 5,898
11-03-2005 12:28
Funky.
Huns Valen
Don't PM me here.
Join date: 3 May 2003
Posts: 2,749
11-03-2005 17:52
This is the latest from Brian at DreamHost, a response to my request to call LL:
From: someone
Hello,

I only got a voicemail. There's not too much that we can do, as the block seems to be on their side. We don't block anything on this end.

If you need anything else, please let us know.

Thanks!
Brian
So, what's the score here? What's next?
1 2 3 4 5 6 7 8