On Monday, December 6, 2004, 8:27:58 AM, Matthew Romanek wrote: > Okay, after my last post, I had the amazingly bright idea to feed > spamd some mail in debug mode. It showed pretty clearly that all the > DNS lookups were timing out at 15 seconds. I increased the timeout to > 30, and now things are resolving at 17 seconds. Duh.
17 seconds is way too long for name resolution. Does it take that long from the command line (for an uncached query)? % time dig test.surbl.org.sc.surbl.org a ; <<>> DiG 8.3 <<>> test.surbl.org.sc.surbl.org a ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35541 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 14 ;; QUERY SECTION: ;; test.surbl.org.sc.surbl.org, type = A, class = IN ;; ANSWER SECTION: test.surbl.org.sc.surbl.org. 1W IN A 127.0.0.2 ;; AUTHORITY SECTION: sc.surbl.org. 15M IN NS b.surbl.org. [...] ;; Total query time: 7 msec ;; FROM: ns1.freeapp.net to SERVER: 127.0.0.1 ;; WHEN: Mon Dec 6 23:55:26 2004 ;; MSG SIZE sent: 45 rcvd: 509 0.003u 0.000s 0:00.01 0.0% 0+0k 0+0io 0pf+0w % time dig test.surbl.org.ws.surbl.org a ; <<>> DiG 8.3 <<>> test.surbl.org.ws.surbl.org a ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37008 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 14 ;; QUERY SECTION: ;; test.surbl.org.ws.surbl.org, type = A, class = IN ;; ANSWER SECTION: test.surbl.org.ws.surbl.org. 1W IN A 127.0.0.2 [...] ;; Total query time: 2 msec ;; FROM: ns1.freeapp.net to SERVER: 127.0.0.1 ;; WHEN: Mon Dec 6 23:57:05 2004 ;; MSG SIZE sent: 45 rcvd: 509 0.000u 0.003s 0:00.00 0.0% 0+0k 0+0io 0pf+0w > The RBLs worked fine on 2.6, but haven't been working since > going to 3.0.1. Are you sure you're using 3.0.1 configs? IIRC one of the recent FreeBSD installations had the 3.0.1 config file going to the wrong directory for some reason. It should be in the recent list archives. Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
