Yesterday spamassassin started getting DNS timeouts from the DOB (Day
Old Bread) server at a.support-intelligence.net:

dbg: dns: timeout for URIBL_RHS_DOB, URI-DNSBL, 
DNSBL:dob.sibl.support-intelligence.net:akoucq.com after 3 seconds
dbg: dns: timeout for dob, DNSBL-A, 
dns:A:80.109.50.74.dob.sibl.support-intelligence.net. after 3 seconds
dbg: dns: timeout for dob, DNS_FROM_DOB, DNSBL-A, 
dns:A:akoucq.com.dob.sibl.support-intelligence.net. after 3 seconds
dbg: async: aborting remaining lookups

At about the same time, my name server started logging copious TCP reset
errors:

named: dispatch 309a6f0: shutting down due to TCP receive error: connection 
reset

It turns out the DOB name server at a.support-intelligence.net is 
sending us a premature TCP reset on every DNS query we make.

I wonder why we are using TCP?  Is that normal?

More importantly, are DOB lookups failing for anyone else?
Perhaps we have exceeded some threshold query rate and have
been blacklisted by the service?

Thanks
Fletcher

Reply via email to