On Tuesday, February 22, 2005, 10:25:36 PM, Jay Levitt wrote: > Kelson wrote:
>> Jay Levitt wrote: >> >>> I have SA 3.01 running under mimedefang 2.43 with sendmail 8.13.1. >>> At some point, SA seems to stop doing lookups on the DNSBLs; spam >>> gets through that is listed in multiple BLs; if I check manually with >>> spamassassin -t, it detects the BL entry, even if I run it moments >>> after the spam was received. >>> I don't see anything obvious in the logs. What can I do to >>> troubleshoot this? >> >> >> Make sure MIMEDefang hasn't created a new /etc/mail/sa-mimedefang.cf >> on an upgrade. >> >> That happened to my server a while back -- We were just using >> /etc/mail/spamassassin/local.cf, and upgraded MD, and MD saw there was >> no sa-mimedefang.cf, so it created it with the defaults -- and the >> defaults disable DNSBLs. >> > Nope, that's not it. I've been throwing debug code in bit by bit. > (More accurately, I've been re-copying the dbg statements as "warns", > because while there's plenty of useful output, there are just too many > un-categorized dbg statements to leave debug enabled... sigh.) Looks > like every once in a while, the lookup_ns sanity-checks that SA does on > well-known domains are returning with zero NS records. Still not sure > why that happens yet, or exactly what is going on, but that does > understandably lead SA to disable DNSBL processing for a while. Hmm, that sounds like something that may deserve a bugzilla. Can anyone else replicate that behavior? Is your Net::DNS completely current and happy? Have you checked all of your: /etc/resolv.conf $HOME/.resolv.conf ./.resolv.conf for the user mimedefang or SA runs as to make sure they're all correct and all the name servers on them resolve the RBLs correctly? Also when you say "At some point, SA seems to stop doing lookups on the DNSBLs" what is the time scale? Does "At some point" mean at some times of day, after several months of operation and all the time now, for a few hours at a time, for every 6th message, etc.? Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
