Re: DNS lookups - bug with recursive lookups, or shoddy bind config?

2016-01-04 Thread Chris J
On 04/01/2016 20:48, Joe Quinn wrote: By the way, have you considered subscribing to the dev@ list and contributing to SA? You ran through this issue pretty much perfectly, other than the bad luck with our Bugzilla's results on Google. Time is my main issue (that and being a rather rusty with p

Re: DNS lookups - bug with recursive lookups, or shoddy bind config?

2016-01-04 Thread Joe Quinn
On 1/4/2016 3:39 PM, Quanah Gibson-Mount wrote: --On Monday, January 04, 2016 8:28 PM + Chris J wrote: Before I raise this on Bugzilla, I just want to run this past people as I'm quite happy that I've failed to configure something, but can't see what. In short, RBL blacklists haven't bee

Re: DNS lookups - bug with recursive lookups, or shoddy bind config?

2016-01-04 Thread Chris J
On 04/01/2016 20:39, Quanah Gibson-Mount wrote: If you're using Net::DNS 1.01 or later, you must patch SA. There is an entire thread dedicated to this issue.

Re: DNS lookups - bug with recursive lookups, or shoddy bind config?

2016-01-04 Thread Quanah Gibson-Mount
--On Monday, January 04, 2016 8:28 PM + Chris J wrote: Before I raise this on Bugzilla, I just want to run this past people as I'm quite happy that I've failed to configure something, but can't see what. In short, RBL blacklists haven't been working and I've finally, with tcpdump, traced

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Quanah Gibson-Mount
--On Wednesday, December 16, 2015 6:28 PM +0100 Mark Martinec wrote: Tried it now with 3.4.1 and Net::DNS 1.04. You still need to apply the patch from Bug 7223 (in addition to a patch from Bug 7231), then it passes all tests with Net::DNS 1.04 (even without patches from Bug 7265). Seems easi

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Mark Martinec
Not sure about SPF. It's supposed to be fixed in the current 3.4 branch and in trunk, which is why I'm not seeing a problem with Net::DNS 1.03 or Net::DNS 1.04. Will check how the released version of 3.4.1 fares with Net::DNS 1.04 regarding SPF. The emergency patches were applied to FreeBSD ports,

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Quanah Gibson-Mount
--On Wednesday, December 16, 2015 4:13 PM + Ian Eiloart wrote: On 16 Dec 2015, at 16:09, Reindl Harald wrote: Am 16.12.2015 um 17:00 schrieb Ian Eiloart: On 16 Dec 2015, at 15:30, Kevin A. McGrail wrote: Downgrade tour netdns. There were changes in 1.03 that are fixed in trunk.

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Mark Martinec
Ian Eiloart wrote: I had this problem after upgrading from a rather old version of SA. After upgrading to Net::DNS 1.04, the errors aren’t logged, but SpamAssassin isn’t finding SPF records. I wonder whether anyone can offer any suggestions. [...] Yesterday, I upgraded Net::DNS 1.03 to Net::D

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Kevin A. McGrail
On 12/16/2015 11:00 AM, Ian Eiloart wrote: On 16 Dec 2015, at 15:30, Kevin A. McGrail wrote: Downgrade tour netdns. There were changes in 1.03 that are fixed in trunk. Regards, KAM Downgrade? I upgraded to 1.04: does that not fix the problem? Are you running 3.4.1 or trunk? If trunk, 1.04 mig

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Kevin Golding
On Wed, 16 Dec 2015 16:13:03 -, Ian Eiloart wrote: On 16 Dec 2015, at 16:09, Reindl Harald wrote: Am 16.12.2015 um 17:00 schrieb Ian Eiloart: On 16 Dec 2015, at 15:30, Kevin A. McGrail wrote: Downgrade tour netdns. There were changes in 1.03 that are fixed in trunk. Regards, K

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Ian Eiloart
> On 16 Dec 2015, at 16:09, Reindl Harald wrote: > > > > Am 16.12.2015 um 17:00 schrieb Ian Eiloart: >> >>> On 16 Dec 2015, at 15:30, Kevin A. McGrail wrote: >>> >>> Downgrade tour netdns. There were changes in 1.03 that are fixed in trunk. >>> Regards, >>> KAM >> >> Downgrade? I upgraded

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Reindl Harald
only get SPF_NONE Weitergeleitete Nachricht Betreff: Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03 Datum: Wed, 16 Dec 2015 14:49:38 + Von: Ian Eiloart An: users@spamassassin.apache.org Hi, I had this problem after upgrading from a rather old version of SA

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Ian Eiloart
> On 16 Dec 2015, at 15:30, Kevin A. McGrail wrote: > > Downgrade tour netdns. There were changes in 1.03 that are fixed in trunk. > Regards, > KAM Downgrade? I upgraded to 1.04: does that not fix the problem? -- Ian Eiloart Postmaster, University of Sussex +44 (0) 1273 87-3148

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Kevin A. McGrail
Downgrade tour netdns. There were changes in 1.03 that are fixed in trunk. Regards, KAM On December 16, 2015 9:49:38 AM EST, Ian Eiloart wrote: >Hi, > >I had this problem after upgrading from a rather old version of SA. >After upgrading to Net::DNS 1.04, the errors aren’t logged, but >SpamAssass

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-16 Thread Ian Eiloart
Hi, I had this problem after upgrading from a rather old version of SA. After upgrading to Net::DNS 1.04, the errors aren’t logged, but SpamAssassin isn’t finding SPF records. I wonder whether anyone can offer any suggestions. I’m calling spamd from Exim. /opt/local/bin/spamd --version Spa

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-08 Thread Quanah Gibson-Mount
--On Tuesday, December 08, 2015 4:55 PM -0800 Quanah Gibson-Mount wrote: --On Friday, November 13, 2015 2:01 PM -0500 "Kevin A. McGrail" wrote: On 11/13/2015 2:00 PM, Mark Martinec wrote: To me, this is an incompatible documented change - not something one would expect in an 1.02 -> 1.03

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-12-08 Thread Quanah Gibson-Mount
--On Friday, November 13, 2015 2:01 PM -0500 "Kevin A. McGrail" wrote: On 11/13/2015 2:00 PM, Mark Martinec wrote: To me, this is an incompatible documented change - not something one would expect in an 1.02 -> 1.03 update. +1. An API change in a minor rev is not acceptable. Net::DNS 1.0

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-11-13 Thread Kevin A. McGrail
On 11/13/2015 2:00 PM, Mark Martinec wrote: To me, this is an incompatible documented change - not something one would expect in an 1.02 -> 1.03 update. +1. An API change in a minor rev is not acceptable. -- *Kevin A. McGrail* CEO Peregrine Computer Consultants Corporation 3927 Old Lee Highw

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-11-13 Thread Mark Martinec
Net::DNS 1.03 breaks compatibility with SpamAssassin: DNS lookups no longer work, and warnings like the following pop up: On 2015-11-13 19:22, Quanah Gibson-Mount wrote: Well, IO::Socket::IP support is new in Net::DNS 1.03, but it is only used if IO::Socket::INET6 is not present. I would assum

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-11-13 Thread Quanah Gibson-Mount
--On Friday, November 13, 2015 10:22 AM -0800 Quanah Gibson-Mount wrote: Well, IO::Socket::IP support is new in Net::DNS 1.03, but it is only used if IO::Socket::INET6 is not present. I would assume you can use it as long as you have IO::Socket::INET6 installed, but I haven't tested that assu

Re: DNS lookups fail with SpamAssassin since Net::DNS 1.03

2015-11-13 Thread Quanah Gibson-Mount
--On Friday, November 13, 2015 1:20 AM +0100 Mark Martinec wrote: Net::DNS 1.03 breaks compatibility with SpamAssassin: DNS lookups no longer work, and warnings like the following pop up: lookup failed: Can't locate object method "handles" via package "IO::Socket::IP" at /usr/local/li

Re: DNS lookups

2005-06-10 Thread Jeff Chan
On Thursday, June 9, 2005, 11:00:50 PM, Bob Proulx wrote: > Kenneth Porter wrote: >> Bob Proulx wrote: >> > In both cases you would need to modify /etc/resolv.conf to use the >> > local nameserver instead of the current one. >> >> Wiki fodder? > Good point. Okay, here is the initial page with th

Re: DNS lookups

2005-06-09 Thread Bob Proulx
Kenneth Porter wrote: > Bob Proulx wrote: > > In both cases you would need to modify /etc/resolv.conf to use the > > local nameserver instead of the current one. > > Wiki fodder? Good point. Okay, here is the initial page with the above information. http://wiki.apache.org/spamassassin/Caching

Re: DNS lookups

2005-06-09 Thread Ralf Hildebrandt
* Jon Dossey <[EMAIL PROTECTED]>: > You'd "hack" SA instead of just installing bind, and letting it just > cache the response? Or djbdns... > Talk about wagging the dog ... Indeed -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin Berlin

Re: DNS lookups

2005-06-09 Thread jdow
From: "Ronan McGlue" <[EMAIL PROTECTED]> > Matt Kettler wrote: > > At 08:32 AM 6/9/2005, Ronan McGlue wrote: > > > >> anyclues as to why SA isnt 'apparently' using the hosts file?? > > > > > > This is because SA doesn't use the system resolver, it uses Net::DNS's > > resolver. This gives SA a lot

Re: DNS lookups

2005-06-09 Thread jdow
From: "Jeff Chan" <[EMAIL PROTECTED]> > On Thursday, June 9, 2005, 5:32:23 AM, Ronan McGlue wrote: > > Niek wrote: > >> On 6/9/2005 2:19 PM +0200, Ronan McGlue wrote: > >> > >>> sry should have added that the DNS order in /etc/resolv.conf is also > >>> correct... > >> > >> > >> What order ? Th

Re: DNS lookups

2005-06-09 Thread List Mail User
>... >On Thursday, June 9, 2005, 5:32:23 AM, Ronan McGlue wrote: >> Niek wrote: >>> On 6/9/2005 2:19 PM +0200, Ronan McGlue wrote: >>> sry should have added that the DNS order in /etc/resolv.conf is also correct... >>> >>> >>> What order ? The nameservers are used randomly... >> again

Re: DNS lookups

2005-06-09 Thread Kenneth Porter
--On Thursday, June 09, 2005 10:25 AM -0600 Bob Proulx <[EMAIL PROTECTED]> wrote: Kenneth Porter wrote: If it's a Red Hat system (including Fedora), just install the caching-nameserver RPM. It pulls in BIND and installs appropriate config files. Then edit resolv.conf to point to localhost. I

Re: DNS lookups

2005-06-09 Thread Bob Proulx
Kenneth Porter wrote: > If it's a Red Hat system (including Fedora), just install the > caching-nameserver RPM. It pulls in BIND and installs appropriate config > files. Then edit resolv.conf to point to localhost. If it is a Debian system just install bind9 and the default configuration is a ca

Re: DNS lookups

2005-06-09 Thread Matt Kettler
Jon Dossey wrote: > > You'd "hack" SA instead of just installing bind, and letting it just > cache the response? Yes, although that would be rather ugly, and probably much harder to implement than installing a caching nameserver. You also wouldn't reap all the benefits that a local caching names

Re: DNS lookups

2005-06-09 Thread Kenneth Porter
--On Thursday, June 09, 2005 11:03 AM -0400 Steven Dickenson <[EMAIL PROTECTED]> wrote: We run bind with no zones on our SA gateway to serve as a DNS cache. Helps take a load off DNS lookups for common hosts. You can easily do this with any other DNS daemon as well. Google for caching nameser

Re: DNS lookups

2005-06-09 Thread Steven Dickenson
Ronan McGlue wrote: This is because SA doesn't use the system resolver, it uses Net::DNS's resolver. This gives SA a lot of control over queries, but doesn't take advantage of things like /etc/hosts, and only uses your primary DNS. ahhh ok anyway i can hack it?? *go

RE: DNS lookups

2005-06-09 Thread Jon Dossey
> Matt Kettler wrote: > > At 08:32 AM 6/9/2005, Ronan McGlue wrote: > > > >> anyclues as to why SA isnt 'apparently' using the hosts file?? > > > > > > This is because SA doesn't use the system resolver, it uses Net::DNS's > > resolver. This gives SA a lot of control over queries, but doesn't take

Re: DNS lookups

2005-06-09 Thread Ronan McGlue
Matt Kettler wrote: At 08:32 AM 6/9/2005, Ronan McGlue wrote: anyclues as to why SA isnt 'apparently' using the hosts file?? This is because SA doesn't use the system resolver, it uses Net::DNS's resolver. This gives SA a lot of control over queries, but doesn't take advantage of things li

Re: DNS lookups

2005-06-09 Thread Matt Kettler
At 08:32 AM 6/9/2005, Ronan McGlue wrote: anyclues as to why SA isnt 'apparently' using the hosts file?? This is because SA doesn't use the system resolver, it uses Net::DNS's resolver. This gives SA a lot of control over queries, but doesn't take advantage of things like /etc/hosts, and onl

Re: DNS lookups

2005-06-09 Thread Ronan McGlue
Victor Brilon wrote: --- Ronan McGlue <[EMAIL PROTECTED]> wrote: yes, but BIND isnt running on the machine in question... (atm) The nets guys here are seeing a lot of lookups from this SPAMD machine for our mailhubs to the Local dns... which is an extra couple of miliseconds i want to avoid

Re: DNS lookups

2005-06-09 Thread Ronan McGlue
Jeff Chan wrote: On Thursday, June 9, 2005, 5:32:23 AM, Ronan McGlue wrote: Niek wrote: On 6/9/2005 2:19 PM +0200, Ronan McGlue wrote: sry should have added that the DNS order in /etc/resolv.conf is also correct... What order ? The nameservers are used randomly... again, my semantics

Re: DNS lookups

2005-06-09 Thread Jeff Chan
On Thursday, June 9, 2005, 5:32:23 AM, Ronan McGlue wrote: > Niek wrote: >> On 6/9/2005 2:19 PM +0200, Ronan McGlue wrote: >> >>> sry should have added that the DNS order in /etc/resolv.conf is also >>> correct... >> >> >> What order ? The nameservers are used randomly... > again, my semantics

Re: DNS lookups

2005-06-09 Thread Ronan McGlue
Niek wrote: On 6/9/2005 2:19 PM +0200, Ronan McGlue wrote: sry should have added that the DNS order in /etc/resolv.conf is also correct... What order ? The nameservers are used randomly... again, my semantics need work... :S the DNS *is in* order in /etc/resolv.conf... anyclues as to why

Re: DNS lookups

2005-06-09 Thread Niek
On 6/9/2005 2:19 PM +0200, Ronan McGlue wrote: sry should have added that the DNS order in /etc/resolv.conf is also correct... What order ? The nameservers are used randomly... Niek Baakman

Re: DNS lookups

2005-06-09 Thread Ronan McGlue
Niek wrote: On 6/9/2005 2:15 PM +0200, Ronan McGlue wrote: hi SA is continually looking up my 3 mailhubs to our local DNS even though i have them hardcoded into /etc/hosts and /etc/nsswitch.conf is configured properly etc etc... How can I make SA use the hosts file if such an option exists

Re: DNS lookups

2005-06-09 Thread Niek
On 6/9/2005 2:15 PM +0200, Ronan McGlue wrote: hi SA is continually looking up my 3 mailhubs to our local DNS even though i have them hardcoded into /etc/hosts and /etc/nsswitch.conf is configured properly etc etc... How can I make SA use the hosts file if such an option exists... anyone el