This issue was solved.

It was EXACTLY a DNS issue. The first DNS server in my /etc/resolve.conf
was NOT configured to listen to its pribvate net interface.
There were couple of externel servers in the /etc/resolve.conf, which
help SA to conclude that DNS resoluiton works:

debug: is Net::DNS::Resolver available? yes
debug: trying (3) google.com...
debug: looking up MX for 'google.com'
debug: MX for 'google.com' exists? 1
debug: MX lookup of google.com succeeded => Dns available (set dns_available to 
hardcode)
debug: is DNS available? 1

but obviously the RBL checks use the FIRST entry in the resolve.conf
for some reason (performance I guess).

After fixing that error, now it runs fine.

Thanks a LOT guyes for your support!

Yassen


On Tuesday 14 December 2004 09:17, Yassen Damyanov wrote:
> Gary, Wolfgang: thank you for replying!
> 
> On Tuesday 14 December 2004 05:09, Gary Verchick wrote:
> >
> > This is a bit of work, but my RBL checks improved dramatically by
> > using a local DNS cache, namely djbdns.
> 
> I actually have it -- the firewall runs BIND9 and the mail box is
> tunned to use it.
> 
> 
> On Tuesday 14 December 2004 00:14, Wolfgang Hamann wrote:
> > does it work within 15 seconds ?
> 
> If you mean the delay of the DNS response of a name query,
> it works immediately. At leats SOME of the rbls should have
> been reached.
> 
> Prior to handing the mail over amavisd, postfix checks with
> two rbl list that are considered moderate: relays.ordb.org and
> sbl-xbl.spamhaus.org and these checks work fine.
> 
> I googled about it and found a post with the same problem, but
> with no solution:
> http://www.mail-archive.com/spamassassin-talk@lists.sourceforge.net/msg25829.html
> 
> I am really helpless in dealing with this. And I think that we
> need rbl tests to improve spam recognition success as still some
> spam gets through.
> 
> If anyone gets an idea what might make the SA rbl tests fail --
> plese post it back here -- thanks!
> 
> Yassen
> 
> -
> 
> Yassen Damyanov
> Troyer Information Systems
> 
> phone: +359-32-968-903
> email: [EMAIL PROTECTED]
> ICQ# : 169382108
> web  : www.troyer-is.com
> 
> 
> 
> > ----------  Original Message  ----------
> > 
> > From: Yassen Damyanov <[EMAIL PROTECTED]>
> > To: users@spamassassin.apache.org
> > Subject: SA RBL checks do NOT work
> > Date: Mon, 13 Dec 2004 21:27:50 +0200
> > User-Agent: KMail/1.6.1
> > MIME-Version: 1.0
> > Content-Disposition: inline
> > Content-Type: text/plain;
> >   charset="windows-1251"
> > Content-Transfer-Encoding: 7bit
> > Message-Id: <[EMAIL PROTECTED]>
> > Status: RO
> > X-Status: RS
> > X-UID: 1102966105
> > 
> > Hi all,
> > 
> > spamassassin v. 2.64 used via amavisd-new (postfix MTA),
> > Gentoo Linux box.
> > 
> > The RBL checks do NOT work:
> > 
> > debug: RBL: success for 0 of 22 queries
> > debug: RBL: timeout for sblxbl after 15 seconds
> > debug: RBL: timeout for njabl-notfirsthop,njabl after 15 seconds
> > debug: RBL: timeout for sblxbl-notfirsthop,sblxbl after 15 seconds
> > debug: RBL: timeout for sorbs-notfirsthop,sorbs after 15 seconds
> > debug: RBL: timeout for sblxbl-notfirsthop,sblxbl after 15 seconds
> > debug: RBL: timeout for njabl after 15 seconds
> > debug: RBL: timeout for sorbs after 15 seconds
> > debug: RBL: timeout for sorbs-notfirsthop,sorbs after 15 seconds
> > debug: RBL: timeout for njabl-notfirsthop,njabl after 15 seconds
> > debug: RBL: timeout for rfci-dsn after 15 seconds
> > debug: RBL: timeout for rfci after 15 seconds
> > debug: RBL: timeout for rfci after 15 seconds
> > debug: RBL: timeout for bsp-firsttrusted after 15 seconds
> > debug: RBL: timeout for bsp-untrusted after 15 seconds
> > debug: RBL: timeout for spamcop after 15 seconds
> > debug: RBL: timeout for spamcop after 15 seconds
> > debug: RBL: timeout for dsbl after 15 seconds
> > debug: RBL: timeout for rfci after 15 seconds
> > debug: RBL: timeout for bsp-untrusted after 15 seconds
> > debug: RBL: timeout for dsbl after 15 seconds
> > debug: RBL: timeout for spamcop after 15 seconds
> > debug: RBL: timeout for dsbl after 15 seconds
> > 
> > the local.cf (/etc/mail/spamassassin/local.cf) has that enabled, so
> > is the amavisd-new config. (Find below the relevant config lines).
> > 
> > One more note: the mail server is part of a private net behind a firewall
> > and its outgoing connections are masquaraded by the firewall.
> > 
> > Any suggestions on how to fix this will be greatly appreciated!
> > Thanks in advance.
> > 
> > Yassen
> > 
> > --
> > 
> > Yassen Damyanov
> > Troyer Information Systems
> > 
> > phone: +359-32-968-903
> > email: [EMAIL PROTECTED]
> > ICQ# : 169382108
> > web  : www.troyer-is.com

Reply via email to