RBLs stop working after upgrade

[Chris <ch...@ic-2000.com>]

I posted this Friday, but didn't see any responses.  Any help would be
appreciated:


I just upgraded to the current version from 2.5x.  My rbl checks are no
longer working and neither is razor2.  This is the output from debug.  I
don't know if this looks right or not...  I
included the sections that seemed most relevant only.  Any suggestions?

Thanks

Chris


debug: checking RBL dnsbl.njabl.org., set njabl-notfirsthop
debug: checking RBL sa-trusted.bondedsender.org., set bsp-firsttrusted
debug: checking RBL dnsbl.njabl.org., set njabl
debug: checking RBL dnsbl.sorbs.net., set sorbs
debug: checking RBL sa-other.bondedsender.org., set bsp-untrusted
debug: checking RBL sbl.spamhaus.org., set sbl
debug: all '*From' addrs: aiuxwdzamgwg@168.com
debug: rbl: launching DNS A query for 168.com.dsn.rfc-ignorant.org. in
backgroun
d
debug: checking RBL ipwhois.rfc-ignorant.org., set rfci
debug: checking RBL opm.blitzed.org., set opm
debug: checking RBL list.dsbl.org., set dsbl
debug: checking RBL bl.spamcop.net., set spamcop
debug: checking RBL dnsbl.sorbs.net., set sorbs-notfirsthop
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=0.285
debug: Razor2 is available
debug: entering helper-app run mode
Razor-Log: Computed razorhome from env: /root/.razor
Razor-Log: Found razorhome: /root/.razor
Razor-Log: No /root/.razor/razor-agent.conf found, skipping.
Razor-Log: read_file: 16 items read from /etc/razor/razor-agent.conf
May 21 11:28:29.152792 check[7559]: [ 1] [bootup] Logging initiated
LogDebugLeve
l=9 to stdout
May 21 11:28:29.153247 check[7559]: [ 5] computed razorhome=/root/.razor,
conf=/
etc/razor/razor-agent.conf, ident=/root/.razor/identity
May 21 11:28:29.153542 check[7559]: [ 8] Client supported_engines: 1 2 3 4
May 21 11:28:29.154726 check[7559]: [ 8]  prep_mail done: mail 1
headers=1836, m
ime0=226
May 21 11:28:29.155642 check[7559]: [ 5] read_file: 1 items read from
/root/.raz
or/servers.discovery.lst
May 21 11:28:29.167706 check[7559]: [ 5] read_file: 3 items read from
/root/.raz
or/servers.nomination.lst
May 21 11:28:29.168427 check[7559]: [ 5] read_file: 1 items read from
/root/.raz
or/servers.catalogue.lst
May 21 11:28:29.168880 check[7559]: [ 9] Assigning defaults to
joy.cloudmark.com
May 21 11:28:29.169114 check[7559]: [ 9] Assigning defaults to
hubris.cloudmark.
com
May 21 11:28:29.169343 check[7559]: [ 9] Assigning defaults to
conceit.cloudmark
.com
May 21 11:28:29.169578 check[7559]: [ 9] Assigning defaults to
truth.cloudmark.c
om
May 21 11:28:29.170915 check[7559]: [ 5] read_file: 11 items read from
/root/.ra
zor/server.truth.cloudmark.com.conf
May 21 11:28:29.172238 check[7559]: [ 5] read_file: 12 items read from
/root/.ra
zor/server.shock.cloudmark.com.conf
May 21 11:28:29.172596 check[7559]: [ 5] server discovery overdue by
30926901 se
conds
May 21 11:28:29.172744 check[7559]: [ 8] already have 1 discovery servers
May 21 11:28:29.172862 check[7559]: [ 8] Checking with Razor Discovery
Server 21
6.52.3.2
May 21 11:28:29.173005 check[7559]: [ 6] No port specified, using 2703
May 21 11:28:29.173097 check[7559]: [ 5] Connecting to 216.52.3.2 ...
debug: razor2 check timed out after 10 secs.
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0  highest cf score: 0
debug: running raw-body-text per-line regexp tests; score so far=0.285
debug: running uri tests; score so far=0.285
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=1.069
debug: Razor2 is available

Re: RBLs stop working after upgrade

[us...@ic-2000.com]

No, these definately are not working.  The razor2 checks show something to 
the effect of "illegal seek, insecure dependency" in the system logs.  I 
found some info on this however and I think I can fix that, but I don't 
understand what's going on with the RBL's.  As far as I can tell, they are 
set up right, but just don't work.  No messages hit on them, and I know at 
least a few should. 

Matt Kettler writes: 

> At 07:22 PM 5/23/04 -0400, Chris wrote:
>> I posted this Friday, but didn't see any responses.  Any help would be
>> appreciated: 
>> 
>> 
>> I just upgraded to the current version from 2.5x.  My rbl checks are no
>> longer working and neither is razor2.  This is the output from debug.  I
>> don't know if this looks right or not...  I
>> included the sections that seemed most relevant only.
> 
> First things first: 
> 
> Run plain razor-check over an email. How long does it take? 
> 
> Razor's servers have been known to be slow to respond at times. If it's 
> more than 10 seconds, SA's gonna kill it. 
> 
> Next: are you sure DNSBLs aren't working? I don't see anything in your 
> debug output that indicates problems with them. 
> 
> Is there a reason the test message you ran through SA that generated that 
> debug output should hit one of the RBLs? 
> 
> Have you tried a test query using a local resolver (host, nslookup, dig, 
> etc) 
> 
> Have you tried something like using nelson-sbl-test@crynwr.com?
> (see: http://www.spamhaus.org/sbl/howtouse.html for details. It sends you 
> a test email that should match SBL.) 
> 
>  
> 
 

Re: RBLs stop working after upgrade

[Matt Kettler <mk...@comcast.net>]

At 07:22 PM 5/23/04 -0400, Chris wrote:
>I posted this Friday, but didn't see any responses.  Any help would be
>appreciated:
>
>
>I just upgraded to the current version from 2.5x.  My rbl checks are no
>longer working and neither is razor2.  This is the output from debug.  I
>don't know if this looks right or not...  I
>included the sections that seemed most relevant only.

First things first:

Run plain razor-check over an email. How long does it take?

Razor's servers have been known to be slow to respond at times. If it's 
more than 10 seconds, SA's gonna kill it.

Next: are you sure DNSBLs aren't working? I don't see anything in your 
debug output that indicates problems with them.

Is there a reason the test message you ran through SA that generated that 
debug output should hit one of the RBLs?

Have you tried a test query using a local resolver (host, nslookup, dig, etc)

Have you tried something like using nelson-sbl-test@crynwr.com?
(see: http://www.spamhaus.org/sbl/howtouse.html for details. It sends you a 
test email that should match SBL.)