• Issues with bendel

    From Greg Wooledge@3:633/10 to All on Wednesday, February 18, 2026 14:30:01
    I'm going to try sending this from Yahoo to see whether it will get through. Bendel seems to be having some issues. I don't know whether Yahoo will mangle the terminal commands. I apologize in advance if it does.

    A message that I sent from my primary email address this morning was stuck in the outgoing queue:

    # mailq
    -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
    D9EDA819CA 2475 Wed Feb 18 07:08:40 greg@wooledge.org
    (connect to bendel.debian.org[2001:41b8:202:deb:216:36ff:fe40:4002]:25: Connection timed out)
    debian-user@lists.debian.org


    -- 2 Kbytes in 1 Request.

    # host bendel.debian.org
    bendel.debian.org has address 82.195.75.100
    bendel.debian.org has IPv6 address 2001:41b8:202:deb:216:36ff:fe40:4002

    # ping 2001:41b8:202:deb:216:36ff:fe40:4002
    PING 2001:41b8:202:deb:216:36ff:fe40:4002(2001:41b8:202:deb:216:36ff:fe40:4002) 56 data bytes
    ^C
    --- 2001:41b8:202:deb:216:36ff:fe40:4002 ping statistics ---
    7 packets transmitted, 0 received, 100% packet loss, time 1005ms

    # ping 82.195.75.100
    PING 82.195.75.100 (82.195.75.100) 56(84) bytes of data.
    64 bytes from 82.195.75.100: icmp_seq=1 ttl=47 time=86.8 ms
    64 bytes from 82.195.75.100: icmp_seq=2 ttl=47 time=86.7 ms
    ^C
    --- 82.195.75.100 ping statistics ---
    2 packets transmitted, 2 received, 0% packet loss, time 3ms
    rtt min/avg/max/mdev = 86.717/86.773/86.830/0.299 ms

    So, I configured Postfix to use only ipv4, and now:

    # postqueue -f

    # mailq
    -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
    D9EDA819CA* 2475 Wed Feb 18 07:08:40 greg@wooledge.org
    (host bendel.debian.org[82.195.75.100] said: 450 4.7.25 Client host rejected: cannot find your hostname, [199.231.184.176] (in reply to RCPT TO command))
    debian-user@lists.debian.org


    -- 2 Kbytes in 1 Request.

    However, I do have a working "reverse DNS" on this host. It was configured last night (8-9 hours ago);

    $ h
  • From Byunghee HWANG (???)@3:633/10 to All on Wednesday, February 18, 2026 16:10:02
    Hellow Greg,
    Greg Wooledge <gwooledge@yahoo.com> writes:
    I'm going to try sending this from Yahoo to see whether it will get
    through. Bendel seems to be having some issues. I don't know whether
    Yahoo will mangle the terminal commands. I apologize in advance if it
    does.
    Yahoo is OK: (from my final Gmail Inbox -- soyeomul@gmail.com)
    <quote>
    Authentication-Results: mx.google.com;
    dkim=pass (test mode) header.i=@doraji.xyz header.s=YW header.b=Qbhq5jGh;
    dkim=pass header.i=@yahoo.com header.s=s2048 header.b=tTuE2z2A;
    spf=neutral (google.com: 185.17.255.72 is neither permitted nor denied by manual fallback record for domain of bounce-debian-user=soyeomul=doraji.xyz@lists.debian.org) smtp.mailfrom="bounce-debian-user=soyeomul=doraji.xyz@lists.debian.org";
    dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=yahoo.com
    </quote>
    A message that I sent from my primary email address this morning was
    stuck in the outgoing queue:

    # mailq
    -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
    D9EDA819CA 2475 Wed Feb 18 07:08:40 greg@wooledge.org
    (connect to
    bendel.debian.org[2001:41b8:202:deb:216:36ff:fe40:4002]:25: Connection
    timed out)
    debian-user@lists.debian.org


    -- 2 Kbytes in 1 Request.

    # host bendel.debian.org
    bendel.debian.org has address 82.195.75.100
    bendel.debian.org has IPv6 address 2001:41b8:202:deb:216:36ff:fe40:4002

    # ping 2001:41b8:202:deb:216:36ff:fe40:4002
    PING 2001:41b8:202:deb:216:36ff:fe40:4002(2001:41b8:202:deb:216:36ff:fe40:4002)
    56 data bytes
    ^C
    --- 2001:41b8:202:deb:216:36ff:fe40:4002 ping statistics ---
    7 packets transmitted, 0 received, 100% packet loss, time 1005ms

    # ping 82.195.75.100
    PING 82.195.75.100 (82.195.75.100) 56(84) bytes of data.
    64 bytes from 82.195.75.100: icmp_seq=1 ttl=47 time=86.8 ms
    64 bytes from 82.195.75.100: icmp_seq=2 ttl=47 time=86.7 ms
    ^C
    --- 82.195.75.100 ping statistics ---
    2 packets transmitted, 2 received, 0% packet loss, time 3ms
    rtt min/avg/max/mdev = 86.717/86.773/86.830/0.299 ms

    So, I configured Postfix to use only ipv4, and now:

    # postqueue -f

    # mailq
    -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
    D9EDA819CA* 2475 Wed Feb 18 07:08:40 greg@wooledge.org
    (host bendel.debian.org[82.195.75.100] said: 450 4.7.25 Client host
    rejected: cannot find your hostname, [199.231.184.176] (in reply to
    RCPT TO command))
    debian-user@lists.debian.org


    -- 2 Kbytes in 1 Request.

    However, I do have a working "reverse DNS" on this host. It was
    configured last night (8-9 hours ago);

    $ host 199.231.184.176
    176.184.231.199.in-addr.arpa domain name pointer wooledge.org.
    Below is mine. I am in South Korea:
    <quote>
    soyeomul@thinkpad-e495:~$ host 199.231.184.176 kns.kornet.net.
    Using domain server:
    Name: kns.kornet.net.
    Address: 64:ff9b::a87e:3f01#53
    Aliases:
    176.184.231.199.in-addr.arpa domain name pointer wooledge.org. soyeomul@thinkpad-e495:~$
    </quote>
    A message that I queued up the other day and which was being rejected
    for the same reason did manage to go through successfully after
    that. I don't know what's going on with bendel, but I hope it gets
    fixed.
    Bendel's rule/status is normal. I think time will solve this problem.


    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Michel Verdier@3:633/10 to All on Wednesday, February 18, 2026 23:10:02
    On 2026-02-18, Greg Wooledge wrote:

    However, I do have a working "reverse DNS" on this host. It was configured last night (8-9 hours ago);

    $ host 199.231.184.176
    176.184.231.199.in-addr.arpa domain name pointer wooledge.org.

    $ dig +short org. NS
    d0.org.afilias-nst.org.
    [...]

    $ dig +norec @d0.org.afilias-nst.org. wooledge.org ns
    [...]
    ;; AUTHORITY SECTION:
    wooledge.org. 3600 IN NS greg.wooledge.org. wooledge.org. 3600 IN NS remote.wooledge.org.

    ;; ADDITIONAL SECTION:
    greg.wooledge.org. 3600 IN A 209.142.155.49 remote.wooledge.org. 3600 IN A 199.231.184.176
    [...]

    $ dig +short @209.142.155.49 remote.wooledge.org.
    ;; communications error to 209.142.155.49#53: timed out
    ;; communications error to 209.142.155.49#53: timed out
    ;; communications error to 209.142.155.49#53: timed out
    ;; no servers could be reached

    $ ping 209.142.155.49
    PING 209.142.155.49 (209.142.155.49) 56(84) bytes of data.
    ^C
    --- 209.142.155.49 ping statistics ---
    11 packets transmitted, 0 received, 100% packet loss, time 10232ms

    You should correct this or find another secondary more available

    $ dig +short @199.231.184.176 remote.wooledge.org.
    199.231.184.176

    $ dig +short @199.231.184.176 -x 199.231.184.176
    ;; communications error to 199.231.184.176#53: timed out
    ;; communications error to 199.231.184.176#53: timed out
    ;; communications error to 199.231.184.176#53: timed out
    ;; no servers could be reached

    $ ping 199.231.184.176
    PING 199.231.184.176 (199.231.184.176) 56(84) bytes of data.
    64 bytes from 199.231.184.176: icmp_seq=1 ttl=51 time=80.9 ms
    [...]

    So your DNS do not resolve your IP. Perhaps you filter request from
    outside ? Or your host/resolv.conf asks your ISP ?

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Michel Verdier@3:633/10 to All on Wednesday, February 18, 2026 23:30:01
    On 2026-02-18, Michel Verdier wrote:
    some wrong things

    $ dig -x 199.231.184.176
    ;; communications error to ::1#53: timed out
    ;; communications error to ::1#53: timed out
    ;; communications error to ::1#53: timed out
    ;; communications error to 127.0.0.1#53: timed out

    $ dig +trace -x 199.231.184.176
    [...]
    176.184.231.199.in-addr.arpa. 86400 IN PTR wooledge.org. 184.231.199.in-addr.arpa. 86400 IN NS dns.trouble-free.net. 184.231.199.in-addr.arpa. 86400 IN NS dns2.trouble-free.net.
    ;; Received 170 bytes from 69.164.249.155#53(dns2.trouble-free.net) in 115 ms

    $ dig @dns.trouble-free.net. -x 199.231.184.176
    [...]
    ;; ANSWER SECTION:
    176.184.231.199.in-addr.arpa. 86400 IN PTR wooledge.org.

    ;; Query time: 83 msec
    ;; SERVER: 66.45.228.79#53(dns.trouble-free.net.) (UDP)
    ;; WHEN: Wed Feb 18 23:15:52 CET 2026
    ;; MSG SIZE rcvd: 111

    So it seems that you correctly set a reverse. But there is a timeout
    during revolving. You should tell this to your provider.

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Greg Wooledge@3:633/10 to All on Thursday, February 19, 2026 00:30:02
    On Wed, Feb 18, 2026 at 23:08:37 +0100, Michel Verdier wrote:
    ;; ADDITIONAL SECTION:
    greg.wooledge.org. 3600 IN A 209.142.155.49 remote.wooledge.org. 3600 IN A 199.231.184.176
    [...]

    You should correct this or find another secondary more available

    Fair point. The 209 address was my home system's static IP address
    for several years, but after the switch from DSL to fiber Internet, I
    no longer have a static IP at home. This complicates things.

    The registrar won't let me simply remove the second DNS server.
    They want two. So, I guess the *least difficult* path is to run the
    secondary DNS on my non-static-addressed home system, the same way I
    used to run it on my static-addressed home system in the past.

    I've got some infrastructure in place to update DNS on the remote VPS
    with my home IP address when it changes, but it'll need a minor tweak
    to update the instance on my home system as well, so they remain in sync.

    I believe I've successfully updated the "glue" records on the registrar's
    web site, but it will take time to propagate.

    $ dig +short @199.231.184.176 -x 199.231.184.176
    ;; communications error to 199.231.184.176#53: timed out
    ;; communications error to 199.231.184.176#53: timed out
    ;; communications error to 199.231.184.176#53: timed out
    ;; no servers could be reached

    So your DNS do not resolve your IP. Perhaps you filter request from
    outside ? Or your host/resolv.conf asks your ISP ?

    I'm not authoritative for the reverse lookup.


    On Wed, Feb 18, 2026 at 23:25:25 +0100, Michel Verdier wrote:
    On 2026-02-18, Michel Verdier wrote:
    some wrong things

    $ dig -x 199.231.184.176
    ;; communications error to ::1#53: timed out
    ;; communications error to ::1#53: timed out
    ;; communications error to ::1#53: timed out
    ;; communications error to 127.0.0.1#53: timed out

    So it seems that you correctly set a reverse. But there is a timeout
    during revolving. You should tell this to your provider.

    I'll take that under advisement, I suppose.

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Greg Wooledge@3:633/10 to All on Thursday, February 19, 2026 13:20:01
    On Thu, Feb 19, 2026 at 11:37:14 +0100, Marco Moock wrote:
    On 18.02.2026 14:30 Greg Wooledge wrote:

    # ping 2001:41b8:202:deb:216:36ff:fe40:4002
    PING 2001:41b8:202:deb:216:36ff:fe40:4002(2001:41b8:202:deb:216:36ff:fe40:4002) 56 data bytes ^C

    Currently it works for me. Please use traceroute and check whether that
    is a local issue or at the remote side or during transit.

    I don't think IPv6 works from this host at all. I tried a few other IPv6 addresses, and couldn't ping any of them. If I'm correct then disabling
    IPv6 in Postfix (which I've already done) seems like the best solution
    to that.

    # traceroute 2001:41b8:202:deb:216:36ff:fe40:4002
    traceroute to 2001:41b8:202:deb:216:36ff:fe40:4002 (2001:41b8:202:deb:216:36ff:fe40:4002), 30 hops max, 80 byte packets
    1 * * *
    2 * * *
    3 * * *
    4 * * *
    5 * * *
    6 * * *
    7 * * *
    8 * * *
    9 * * *
    10 * * *
    [...]

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Andy Smith@3:633/10 to All on Thursday, February 19, 2026 13:40:01
    Hi,

    On Wed, Feb 18, 2026 at 06:26:39PM -0500, Greg Wooledge wrote:
    The registrar won't let me simply remove the second DNS server.
    They want two. So, I guess the *least difficult* path is to run the secondary DNS on my non-static-addressed home system, the same way I
    used to run it on my static-addressed home system in the past.

    There are ,lots of places on the Internet that offer free DNS secondary service, so if my hosting provider didn't offer this service and I
    didn't want to buy more hosting, I'd probably use one of those. Add
    their server(s) and then remove the one that doesn't work anymore.

    On Thu, Feb 19, 2026 at 07:10:00AM -0500, Greg Wooledge wrote:
    I don't think IPv6 works from this host at all. I tried a few other IPv6 addresses, and couldn't ping any of them. If I'm correct then disabling
    IPv6 in Postfix (which I've already done) seems like the best solution
    to that.

    I think you must have a global scope IPv6 address in order for
    applications to start trying to use IPv6 at all. If IPv6 can't be made
    to work it would be best to disable it so that it doesn't have to be
    disabled in every piece of software.

    Maybe your host is picking up a SLAAC address from the router but the
    thing otherwise doesn't work.

    Thanks,
    Andy

    --
    https://bitfolk.com/ -- No-nonsense VPS hosting

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Dan Ritter@3:633/10 to All on Thursday, February 19, 2026 15:00:02
    Andy Smith wrote:
    There are ,lots of places on the Internet that offer free DNS secondary service, so if my hosting provider didn't offer this service and I
    didn't want to buy more hosting, I'd probably use one of those. Add
    their server(s) and then remove the one that doesn't work anymore.

    Useful services:

    - ns-global.zone
    - buddyns.com
    - puck.nether.net
    - dns.he.net


    The last one, Hurricane Electric, will also offer you a free
    IPv6 tunnel with a static address.


    -dsr-

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Greg Wooledge@3:633/10 to All on Thursday, February 19, 2026 15:10:01
    On Thu, Feb 19, 2026 at 14:22:26 +0100, Marco Moock wrote:
    On 19.02.2026 13:20 Greg Wooledge wrote:

    I don't think IPv6 works from this host at all. I tried a few other
    IPv6 addresses, and couldn't ping any of them. If I'm correct then disabling IPv6 in Postfix (which I've already done) seems like the
    best solution to that.

    That is the worst solution.
    Make sure IPv6 works or remove all GUA addresses from your system, so
    no other application will try to use it and fail.

    How did you set it up?

    I didn't. I have no idea how IPv6 works, or is intended to work.
    I've never seen a system where it works.

    This is what the hosting provider provided:

    # ip a
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
    valid_lft forever preferred_lft forever
    2: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default
    link/void
    inet 127.0.0.2/32 scope host venet0
    valid_lft forever preferred_lft forever
    inet 199.231.184.176/32 brd 199.231.184.176 scope global venet0:0
    valid_lft forever preferred_lft forever

    # cat /etc/network/interfaces
    # This configuration file is auto-generated.
    #
    # WARNING: Do not edit this file, your changes will be lost.
    # Please create/edit /etc/network/interfaces.head and
    # /etc/network/interfaces.tail instead, their contents will be
    # inserted at the beginning and at the end of this file, respectively.
    #
    # NOTE: it is NOT guaranteed that the contents of /etc/network/interfaces.tail # will be at the very end of this file.
    #

    # Auto generated lo interface
    auto lo
    iface lo inet loopback

    # Auto generated venet0 interface
    auto venet0
    iface venet0 inet manual
    up ifconfig venet0 up
    up ifconfig venet0 127.0.0.2
    up route add default dev venet0
    down route del default dev venet0
    down ifconfig venet0 down


    iface venet0 inet6 manual
    up route -A inet6 add default dev venet0
    down route -A inet6 del default dev venet0

    auto venet0:0
    iface venet0:0 inet static
    address 199.231.184.176
    netmask 255.255.255.255

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Andy Smith@3:633/10 to All on Thursday, February 19, 2026 15:20:01
    Hi,

    On Thu, Feb 19, 2026 at 09:04:11AM -0500, Greg Wooledge wrote:
    # cat /etc/network/interfaces
    # This configuration file is auto-generated.
    #
    # WARNING: Do not edit this file, your changes will be lost.
    # Please create/edit /etc/network/interfaces.head and
    # /etc/network/interfaces.tail instead, their contents will be
    # inserted at the beginning and at the end of this file, respectively.
    #
    # NOTE: it is NOT guaranteed that the contents of /etc/network/interfaces.tail
    # will be at the very end of this file.

    An odd setup. Below when I say "edit" that will have to mean doing
    whatever it takes in those other files to accomplish that edit.

    # Auto generated lo interface
    auto lo
    iface lo inet loopback

    # Auto generated venet0 interface
    auto venet0
    iface venet0 inet manual
    up ifconfig venet0 up
    up ifconfig venet0 127.0.0.2
    up route add default dev venet0
    down route del default dev venet0
    down ifconfig venet0 down


    iface venet0 inet6 manual
    up route -A inet6 add default dev venet0
    down route -A inet6 del default dev venet0

    So the problem is that you have a default route for IPv6, without having anything else for IPv6. If you were interested in having it work then
    your next step would probably be to find out from the hosting company
    what IPv6 addresses should be statically configured in the above block
    for the venet0 interface.

    If you are just wanting the problem to go away you just need to not have
    the default route, so should remove that block above and then "ip -6
    route delete default" (or ifdown/ifup, or reboot).

    Thanks,
    Andy

    --
    https://bitfolk.com/ -- No-nonsense VPS hosting

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Greg Wooledge@3:633/10 to All on Thursday, February 19, 2026 17:10:02
    On Thu, Feb 19, 2026 at 16:29:11 +0100, Marco Moock wrote:
    On 19.02.2026 15:10 Greg Wooledge wrote:

    I didn't. I have no idea how IPv6 works, or is intended to work.

    There are courses online by people who know.

    I've never seen a system where it works.

    Then it seems you are living behind the moon.

    We call it the United States.

    Millions of machines use
    it every day and terabits per second of traffic flows.

    Oh, I'm not saying it doesn't exist, or doesn't work well for billions
    of people. Just that I've personally never had access to a system
    where it works.

    My home system gives:

    hobbit:~$ ping 2001:41b8:202:deb:216:36ff:fe40:4002
    ping: connect: Network is unreachable

    And the VPS with the IPv6 route but no IPv6 address has already been
    covered.

    In your case: Investigate how the route came there. Use tcpdump and
    monitor for router advertisments. If there are some, check from which
    mac address they are and investigate why that device send them out.

    I have an alternative plan: don't touch it at all, so I don't break
    anything, especially since I don't understand it.

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Marco Moock@3:633/10 to All on Friday, February 20, 2026 10:50:02
    On 19.02.2026 17:10 Uhr Greg Wooledge wrote:

    On Thu, Feb 19, 2026 at 16:29:11 +0100, Marco Moock wrote:
    On 19.02.2026 15:10 Greg Wooledge wrote:

    I didn't. I have no idea how IPv6 works, or is intended to work.


    There are courses online by people who know.

    I've never seen a system where it works.

    Then it seems you are living behind the moon.

    We call it the United States.

    Millions of users there exist with IPv6.

    Millions of machines use
    it every day and terabits per second of traffic flows.

    Oh, I'm not saying it doesn't exist, or doesn't work well for billions
    of people. Just that I've personally never had access to a system
    where it works.

    Many ISPs provide it, many VPS too. If you want a test system, you can
    rent one for ~5$ per month.

    My home system gives:

    hobbit:~$ ping 2001:41b8:202:deb:216:36ff:fe40:4002
    ping: connect: Network is unreachable

    That means you don't have global IPv6 connectivity.

    And the VPS with the IPv6 route but no IPv6 address has already been
    covered.

    In your case: Investigate how the route came there. Use tcpdump and
    monitor for router advertisments. If there are some, check from
    which mac address they are and investigate why that device send
    them out.

    I have an alternative plan: don't touch it at all, so I don't break
    anything, especially since I don't understand it.

    As your posts here shows, your system is already broken. Please don't
    come back and ask again if something is not working, if you still have
    the non-working route. :-)

    --
    kind regards
    Marco

    Send spam to 1771517402muell@stinkedores.dorfdsl.de

    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)