Yesterday spamassassin started getting DNS timeouts from the DOB (Day Old Bread) server at a.support-intelligence.net:
dbg: dns: timeout for URIBL_RHS_DOB, URI-DNSBL, DNSBL:dob.sibl.support-intelligence.net:akoucq.com after 3 seconds dbg: dns: timeout for dob, DNSBL-A, dns:A:80.109.50.74.dob.sibl.support-intelligence.net. after 3 seconds dbg: dns: timeout for dob, DNS_FROM_DOB, DNSBL-A, dns:A:akoucq.com.dob.sibl.support-intelligence.net. after 3 seconds dbg: async: aborting remaining lookups At about the same time, my name server started logging copious TCP reset errors: named: dispatch 309a6f0: shutting down due to TCP receive error: connection reset It turns out the DOB name server at a.support-intelligence.net is sending us a premature TCP reset on every DNS query we make. I wonder why we are using TCP? Is that normal? More importantly, are DOB lookups failing for anyone else? Perhaps we have exceeded some threshold query rate and have been blacklisted by the service? Thanks Fletcher