> From: Fletcher Mattox <[EMAIL PROTECTED]> > Date: Fri, 4 Jan 2008 17:25:04 -0600 > To: <users@spamassassin.apache.org> > Subject: DOB timeouts? > > Yesterday spamassassin started getting DNS timeouts from the DOB (Day > Old Bread) server at a.support-intelligence.net: > > dbg: dns: timeout for URIBL_RHS_DOB, URI-DNSBL, > DNSBL:dob.sibl.support-intelligence.net:akoucq.com after 3 seconds > dbg: dns: timeout for dob, DNSBL-A, > dns:A:80.109.50.74.dob.sibl.support-intelligence.net. after 3 seconds > dbg: dns: timeout for dob, DNS_FROM_DOB, DNSBL-A, > dns:A:akoucq.com.dob.sibl.support-intelligence.net. after 3 seconds > dbg: async: aborting remaining lookups > > At about the same time, my name server started logging copious TCP reset > errors: > > named: dispatch 309a6f0: shutting down due to TCP receive error: connection > reset > > It turns out the DOB name server at a.support-intelligence.net is > sending us a premature TCP reset on every DNS query we make. > > I wonder why we are using TCP? Is that normal?
No. > > More importantly, are DOB lookups failing for anyone else? > Perhaps we have exceeded some threshold query rate and have > been blacklisted by the service? > Looks like it is happening here to us also. We originally through it was a DOS directed toward us (that is what our IPS said). Looks like its YABB (yet another Bogus Blacklist) what will go the way of others that have not been able to keep up with traffic. I am disableing the DOB tests till I hear different. I suggest a SA bugzilla entry as well since I suspect many people have same problem. -- Michael Scheidell, CTO >|SECNAP Network Security > Thanks > Fletcher > _________________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(tm). For Information please see http://www.spammertrap.com _________________________________________________________________________
