Linode Forum
https://forum.linode.com/

550 invalid DNS MX or A/AAAA resource record
https://forum.linode.com/viewtopic.php?f=11&t=11810
Page 1 of 1

Author:  Webkungen [ Sat May 09, 2015 7:50 pm ]
Post subject:  550 invalid DNS MX or A/AAAA resource record

Hi!

Got a few of these in my mail.log:
Code:
May  8 16:32:23 epost postfix/smtp[30168]: B43188284B: to=<foobar@europe.com>, relay=mx00.gmx.com[74.208.5.4]:25, delay=1.3, delays=0.05/0/0.41/0.87, dsn=5.0.0, status=bounced (host mx00.gmx.com[74.208.5.4] said: 550-Requested action not taken: mailbox unavailable 550 invalid DNS MX or A/AAAA resource record (in reply to MAIL FROM command))


Same errors appear and whats in common seems to be MX gmx.com. The addresses ends with europe.com, email.com, web.de etc. but all seem to belong to gmx.com.

Have googled and there aren't that much info, except people who says it's due to rDNS (reverse lookup). Only thing is that I've got rDNS properly setup, which makes me believe this error is on the other side (GMX.COM).

Any ideas, or info on this would be highly appreciated.

Thanks!

Author:  sanvila [ Sat May 09, 2015 8:12 pm ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

Your MX record is a CNAME instead of an A or AAAA record?

Apparently that's what they dislike, based on RFC 2181 section 10.3:

http://www.iredmail.org/forum/topic8938 ... d-dns.html

Author:  sweh [ Sat May 09, 2015 9:20 pm ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

You do a "MAIL FROM xxx@yyy.zzz" as part of the SMTP transaction. "yyy.zzz" must have an MX that resolves to an A or AAAA record (depending on IP4 or IP6). If there's no MX then there must be an A or AAAA record. An MX record can not point to a CNAME, it must point to an A/AAAA record.

This is a pretty common anti-spam ruleset used on many servers and catches quite a lot of spam.

Author:  Webkungen [ Sat May 09, 2015 9:39 pm ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

Right on target!

I'm using CNAME records as MX with prio 10 and 20. I added another M now with priority 5, and used the IP4 instead, just to make sure everything works before I change the other two.

Thanks!

Author:  Webkungen [ Sun Aug 02, 2015 1:14 am ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

Hi!

I'm still having problems with this. The other day I noticed this in the postfix log again:
Code:
550 invalid DNS MX or A/AAAA resource record


In my DNS configuration I've got 3 MX records:
Code:
epost    MX   5 123.123.123.123
epost    MX   10 123.123.123.123
epost    MX   20 123.123.123.123


Earlier the two with prio 10 and 20 was CNAME records pointing to a host name, but I changed them yesterday to A records with TTL 3600, which means it SHOULD work now after more than 24 hours. But when sending an email to a gmx.net address, the same error appear in the postfix log.

Can anyone point me in the right direction? I have no idea how to solve this.

Thank you!

Author:  Stever [ Mon Aug 03, 2015 11:51 am ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

RFC 5321 wrote:
When a domain name associated with an MX RR is looked up and the
associated data field obtained, the data field of that response MUST
contain a domain name. That domain name, when queried, MUST return
at least one address record (e.g., A or AAAA RR) that gives the IP
address of the SMTP server to which the message should be directed.


MX records should be domain names, not IP addresses. Said domain names should resolve directly to IP addresses via A or AAAA records, not CNAMEs. Looks like you took care of the CNAME problem but you aren't supposed to use IP addresses directly.

Author:  Webkungen [ Tue Aug 04, 2015 9:08 am ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

Hmm okay.. So you mean I have to add at least one MX like this:
Code:
mailx   MX   5 email.mydomain.com
email   A    123.123.123.123


Would that make the mentioned error to go away?

Thanks!

Author:  Stever [ Tue Aug 04, 2015 10:03 am ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

The MX record needs to correspond to the sending email domain for it to have any impact on the error message. If you are sending/receiving mail from an address like someone@mailx.yourdomain.com, then your latest DNS records should be correct.

If you are sending/receiving mail from someone@yourdomain.com, then you would want to lose the "mailx" part of the MX entry and leave it blank
Code:
        MX   5 email.mydomain.com
email   A    123.123.123.123

Author:  Webkungen [ Tue Aug 04, 2015 7:09 pm ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

Ok thanks, I'm sending e-mails from name@email.mydomain.com. Should the setup be like your sample above?

Author:  Webkungen [ Fri Aug 07, 2015 5:25 am ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

Hi!

Just to confirm, should it be like this?
Code:
email   MX   5 email.mydomain.com
email   A    123.123.123.123


My sender address is name@email.domain.tld i.e. a subdomain.

Thanks!

Author:  Vance [ Fri Aug 07, 2015 8:34 pm ]
Post subject:  Re: 550 invalid DNS MX or A/AAAA resource record

That should work. Actually in that case, you don't really need an MX record (if you don't, the A record will be treated as an implicit MX record), but it hurts nothing to have one.

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/