I'm noticing a lot of SPF (and DK) lookups fail on our network (dbg: spf: lookup timed out after 5 seconds) due to New Zealand being in the wrong galaxy: Quite often, DNS TXT records appear to like taking >5 sec to respond.
Now I see in SpamAssassin/Plugin/SPF.pm the following line: my $timeout = 5; Shouldn't that be using the DNS timeout set aside for all RBL queries? i.e. do the "do the DNS lookups ASAP and wait until the end to check the responses"? (i.e. more like 15 seconds)? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1