Hi, On Fri, Sep 14, 2018 at 1:51 PM Rob McEwen <r...@invaluement.com> wrote: > > On 9/14/2018 1:36 PM, Alex wrote: > > Hi, > > > > For the past few weeks I've been having problems with queries to many > > of the common RBLs, including barracuda, mailspike and unsubscore. My > > logs are filled with "Name service error", SERVFAIL and lame-server > > messages for RBLs I know to be valid. > > <SNIP> > > > Alex, > > Coincidentally, a recent new invaluement subscriber was initially having > at least similar problems that didn't make sense. I was stumped. It made > no sense that it wasn't working because everything looked correct. But > then he figured out that the following bug was the cause, and fixing > this bug enabled the queries to start working again: > > NOTICE: SpamAssassin installations affected by a bug, due to a change > Net::DNS made in an earlier version, here is the bug for reference: > https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7223 > > So you should definitely check to see if this is causing your problem?
I should have added that I'm aware of that Net::DNS bug, and I'm using a version long-since fixed. > I will also mention that if you are using a server such as 8.8.8.8, you MUST > change. I found > that if you use 8.8.8.8, you cannot even pass a test for spamassassin builds. > They are doing some > interesting things likely anti-abuse that just screw with things. I wish it were that easy. /etc/resolv.conf is set up to use 127.0.0.1, which is bind configured as a my local caching resolver. It also fails for one out of every thousand queries of the PCCC RBL for no clear reason. 14-Sep-2018 15:16:39.333 query-errors: info: client @0x7ff797169d70 68.195.193.45#34244 (hungryhowies.com.wild.pccc.com): query failed (SERVFAIL) for hungryhowies.com.wild.pccc.com/IN/A at ../../../bin/named/query.c:8580 14-Sep-2018 15:16:39.333 query-errors: debug 2: fetch completed at ../../../lib/dns/resolver.c:3927 for hungryhowies.com.wild.pccc.com/A in 30.000163: timed out/success [domain:wild.pccc.com,referral:0,restart:7,qrysent:7,timeout:6,lame:0,quota:0,neterr:0,badresp:0,adberr:0,findfail:0,valfail:0] The check for hungryhowies.com succeeded at that time for a dozen other RBLs, but later checks could fail for even one of those.
