JF Mezei:
[ Charset ISO-8859-1 unsupported, converting... ]
> Wietse Venema wrote:
>
> >> connect from cpe-67-252-139-22.buffalo.res.rr.com [67.252.139.22]
> >> May 19 01:09:15 velo postfix/smtpdP26473]: warning:
> >> 22.139.252.67.zen.spamhaus.org: RBL lookup error: Host or domain name
> >> not found. Name service error for name=22.139.252.67.zen.spamhaus.org
> >> type=A: Host not found, try again
> >
> > You have a mis-configured name service that breaks Postfix's
> > DNS lookups.
>
> But I have plenty of hits where the RBL lookups work fine and block
> messages (or let them pass through). If my DNS was problematic, wouldn't
> it fail for all RBL lookups ?
Your problem report had ZERO evidence that other Spamhaus lookups
succeed. Given a useless problem report, we are just wasting each
other's time.
> Every "RBL lookup error" IP I have manually tested with nslookup
> returned multiple ip addresses as response to the zen.spamhaus.org
> request. But I can't say that they ALL did it because I didn't test all
> such messages.
Your manual DNS tests are made at a different time than Postfix's
DNS lookups. Successful measurements made at a different time prove
nothing about the conditions when the lookup failed.
If the same lookup fails or succeeds at different times, then that
is almost certainly a problem with DNS requests being dropped.
If you believe that dropped replies depend on the form of the
response, then you need to prove that with evidence.
All this is easy enough to debug by recording the DNS traffic at
your end with a network sniffer over a longer period of time. Then,
you can go back in time and see what queries were sent and what
replies were returned, if any.
Wietse
