Re: intermittent DNS lookup failure in combination with reject_unknown_client_hostname

2012-12-01 Thread Wietse Venema
IMAP List Administration: > Summary: > - upgraded OS > - upgraded Postfix > - cut local named out of system > > but no change. Anyone have a suggestion as to how to pursue this problem? Obviously, the above attempts all share the same problem, i.e. the problem is your network or some

Re: intermittent DNS lookup failure in combination with reject_unknown_client_hostname

2012-12-01 Thread Viktor Dukhovni
On Sat, Dec 01, 2012 at 09:31:41PM +0100, IMAP List Administration wrote: > At any rate, we periodically see (1-5 times per day) a "Client host rejected: > cannot find your hostname" rejection, followed by a successful retry from the > remote MTA. When we check the DNS records, they always appear

Re: intermittent DNS lookup failure in combination with reject_unknown_client_hostname

2012-12-01 Thread IMAP List Administration
[original post at bottom] in the meantime I've upgraded the OS to OpenBSD v5.2, which offers 2 postfix versions as packages: postfix-2.10.20120630 postfix-2.9.3 I chose v2.9.3. bind is still "BIND 9.4.2-P2" On 11/13/2012 10:50 PM, /dev/rob0 wrote: > On Tue, Nov 13, 2012 at 09:55:11PM +

Re: intermittent DNS lookup failure in combination with reject_unknown_client_hostname

2012-11-14 Thread Wietse Venema
IMAP List Administration: > > On 11/14/2012 11:06 AM, Jamie Paul Griffin wrote: > > I've been getting client requests from this ip as well, i've put it into a > > permenant spamd(8) blacklist. > that's highly interesting, but: > > 1) the sender was legitimate > 2) my problem is some sort of int

Re: intermittent DNS lookup failure in combination with reject_unknown_client_hostname

2012-11-14 Thread IMAP List Administration
On 11/14/2012 11:06 AM, Jamie Paul Griffin wrote: > I've been getting client requests from this ip as well, i've put it into a > permenant spamd(8) blacklist. that's highly interesting, but: 1) the sender was legitimate 2) my problem is some sort of intermittent DNS lookup failure 3) that addre

Re: intermittent DNS lookup failure in combination with reject_unknown_client_hostname

2012-11-14 Thread Jamie Paul Griffin
/ IMAP List Administration wrote on Tue 13.Nov'12 at 21:55:11 +0100 / > [example of delivery failure] > Nov 13 15:10:29 dna prefilter/smtpd[9340]: connect from unknown[8.7.42.206] I've been getting client requests from this ip as well, i've put it into a permenant spamd(8) blacklist.

Re: intermittent DNS lookup failure in combination with reject_unknown_client_hostname

2012-11-13 Thread /dev/rob0
On Tue, Nov 13, 2012 at 09:55:11PM +0100, IMAP List Administration wrote: > I'm running a postfix (postfix-2.9.20120102-sasl2) server on That's a pre-release snapshot. Postfix 2.9 is up to patchlevel 4. > OpenBSD v5.1. We have a number of anti-UCE postfix measures in > place, including "reje

Re: intermittent DNS lookup failure in combination with reject_unknown_client_hostname

2012-11-13 Thread Wietse Venema
IMAP List Administration: > 1) is it possible that we are observing a bug in postfix in conjunction with > DNS-queries? Are there any such known bugs? If Postfix replies with 4xx unknown client, Postfix got an "soft" error FROM THE SYSTEM LIBRARY ROUTINES that the domain could not be looked up. Th

intermittent DNS lookup failure in combination with reject_unknown_client_hostname

2012-11-13 Thread IMAP List Administration
Hello Folks, I'm running a postfix (postfix-2.9.20120102-sasl2) server on OpenBSD v5.1. We have a number of anti-UCE postfix measures in place, including "reject_unknown_client_hostname", which we quite like. It's hard to believe there are so many spammers that can't overcome such a low obstacle.