mxtoolbox not work with dns

SeLi

Hello,
I am a bit confusing. I using DNS Server role from enhance. If I check a record via dig from different servers all is working. If I try check with mxtoolbox it is not working but I can’t understand why. Is there some special config need ? It seems if I run command like check

dig @ns.mydns.de example.com A
No response but with
dig example.com A
Get response. I can check all 3 dns every where the same direct I not get response…

cPFence

SeLi

Hi SeLi,

Did you whitelist your server IPs using this guide?

How to Whitelist Your Enhance Cluster's IPs in cPFence (Important)

We’ve been encouraging all users to do this and also sent out an email notice. While DDoS protection with IPv6 support is a great feature (and something unique to cPFence), it’s important to make sure your server and DNS IPv6 addresses are properly whitelisted. DNS tends to need far more than 100 connections limit.

If you’re on Enhance v12 with the latest version of cPFence, your DNS IPs should already be whitelisted automatically. But if you're still running v11, please open a ticket and we’ll assist you further.

Steamon

I use cloudns as slave and enhance as master dns server what I normally do when everything is connected make a new text record make it 1 min and then it processes and remove the record again to move the serial higher.

Then it show up on mxtoolbox for me.

Try that.

SeLi

You mean add a txt inside domain ttl 60 wait short time and delete it and then try on mxtoolbox ?

SeLi

SeLi that will be not work. I was try. He not find any entry.

Steamon

I mean the existing records you check then the A record for that domain you added the text record to. For me I needed to whitelist other notify and transfer servers in:

https://www.cloudns.net/wiki/article/360/

if other DNS servers are doing slave. I think Enhance does that automatically if all are Enhance.

Also be sure that UDP and TCP port 53 is open on all DNS servers.

Set nameservers and records to shorter TTL not 1 day.

More i don't know currently what can cause your situation.

SeLi

TCP / UDP Port 53 open and work. If not dig command will not work on different servers.
TTL set to 5 min. (But that occur on all dns entry’s. They also more old then 1 day…)
It seems only mxtoolbox not work … but that I never was have before. 🙁

Kosta

Maybe something in your system doesn’t allow mxtoolbox IP to connect

mendozal

Something like this happened to me but with mxtoolbox's email server testing tool.

The issue was that I'm using crowdsec and Mxtoolbox was triggering the open proxy rule and it was blocking the IP altogether.

I don't know if you use crowewec but maybe another tool that blocks the IPs similarly.

SeLi

After run cpfence --disable-ipdb it is work. So it depend on cpfence.

xyzulu

SeLi make sure you let @cPFence know.

SeLi

Sure I was inform them.

cPFence

We’ve added MxToolbox IPs to our global whitelist, this should resolve the issue.