Greg Skouby wrote:
With SA-3.2.0 I seem to be getting sub 5 second scan times pretty
regularly but when I upgraded to SA-3.2.3 I was lucky to get sub 10
second. I flipped on debugging and see a bunch of these messages:
Thu Aug 16 15:22:53 2007 [9050] dbg: dns: timeout for whois,
__RCVD_IN_WHOIS, DNSBL-A,
dns:A:21.97.71.64.combined-HIB.dnsiplists.completewhois.com. after 7
seconds
(sorry for the nasty line wrap)
The DNS lookup seemed to be timing out quicker in 3.2.0 for whatever
reason and I wasn't noticing the delay for that release.
Does anybody know the status of completewhois? People on spam-l have
been commenting on how unreliable they have become and I was just
wondering if other people were seeing the same thing and if I/we should
just take this rule out for the time being. I like what completewhois
does but probably not at the expense of delayed scan times.
I'm seeing the same thing although it isn't as bad today for some
reason. I couldn't even load their website until last night.
I'm currently considering using a curl -R -s -z type of script to
download their bogons-cidr-all.txt et al and run a local rbldnsd mirror
of their data.
Rick
