On 01/11/2018 09:02 AM, RW wrote:
On Wed, 10 Jan 2018 14:06:52 -0600
David Jones wrote:
On 01/10/2018 12:40 PM, Alex wrote:
Hi,
On Wed, Jan 10, 2018 at 12:21 PM, Kevin A. McGrail
<kevin.mcgr...@mcgrail.com> wrote:
On 1/10/2018 11:23 AM, David Jones wrote:
I need to see the debug verbose output of one that fails to
troubleshoot further.
Agreed. We need someone to run with -D and log it and IDEALLY run
a few right after to see if it resolves. I'm guessing one mirror
is blocking or something.
I've updated my sa-cron script to loop to try again should it fail
due to this error, as well as provide the debugging info on every
run.
I received some detailed information from one of the mirror hosters
that made me think I need to put back in a delay of the TXT update
used by sa-update to give the mirrors time to pull the new ruleset
files.
I have put a 10 minute delay in place on the DNS TXT updates
Is 10 minutes long enough? The link below recommends that the mirrors
should sync every 10 minutes. If that's still correct then 10 minutes
still leaves a race.
https://wiki.apache.org/spamassassin/SaUpdateMirrorSetup
There will be a 30 second to a few minutes delay for the DNS updates to
propagate even for DNS caches that don't have the TXT record in their cache.
I bet most mirrors have a cron entry like "*/10" so they should pull the
files at 8:40 AM UTC -- a few minutes before the DNS updates at 8:42 AM UTC.
If we still see problems I can extend the delay some more.
--
David Jones
