query regarding SPF and DK DNS timeouts

[Jason Haar <Ja...@trimble.co.nz>]

I'm noticing a lot of SPF (and DK) lookups fail on our network (dbg:
spf: lookup timed out after 5 seconds) due to New Zealand being in the
wrong galaxy: Quite often, DNS TXT records appear to like taking >5 sec
to respond.

Now I see in SpamAssassin/Plugin/SPF.pm the following line:

my $timeout = 5;

Shouldn't that be using the DNS timeout set aside for all RBL queries?
i.e. do the "do the DNS lookups ASAP and wait until the end to check the
responses"? (i.e. more like 15 seconds)?

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

Re: query regarding SPF and DK DNS timeouts

["Daryl C. W. O'Shea" <sp...@dostech.ca>]

On 02/02/2006 10:50 PM, Jason Haar wrote:
> I'm noticing a lot of SPF (and DK) lookups fail on our network (dbg:
> spf: lookup timed out after 5 seconds) due to New Zealand being in the
> wrong galaxy: Quite often, DNS TXT records appear to like taking >5 sec
> to respond.
> 
> Now I see in SpamAssassin/Plugin/SPF.pm the following line:
> 
> my $timeout = 5;
> 
> Shouldn't that be using the DNS timeout set aside for all RBL queries?
> i.e. do the "do the DNS lookups ASAP and wait until the end to check the
> responses"? (i.e. more like 15 seconds)?

Should it be configurable?  Probably.  It has to be a different timeout 
setting than the rest though as it's a timeout on the call to 
Mail::SPF::Query which could do multiple DNS lookups if necessary 
(SpamAssassin itself doesn't handle the DNS queries for the SPF txt 
records).

Feel free to open a bug.


Daryl