I discovered that monit can't reach 127.0.0.1:53.
Strange, since I can see in ISPCP that the DNS is UP at port 53.
But I was thinking maybe this all happens after I secured the DNS server:
Quote:10.) Securing Open DNS server (BIND 9)
After a clean install of a Debian server, dnsstuff.com reports the server as an open dns server(anyone can query the server about any domain ⇒ high load and high transfer). 2 steps for fixing this problem:
a. first edit /etc/bind/named.conf.options (or /etc/named/named.conf for other distros, options paragraph) and add:
recursion no; transfer-format many-answers; //this is for speed up the transfer to a secondary dns b. we need to modify the template used by ISPCP to generate to zone files, on Debian this is /etc/ispcp/bind/parts/cfg_entry.tpl. The file after modification should looks like:
zone "{DMN_NAME}" { type master; file "{DB_DIR}/{DMN_NAME}.db"; notify YES; allow-query { any; }; };
Restart BIND:
/etc/init.d/bind9 restart
Done.
Maybe this is why M$ can't check the SPF from the DNS service?