You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Prentice Bisbal <pr...@rcsb.rutgers.edu> on 2004/04/26 19:29:53 UTC

Amavis SA TIMED OUT errors - Dns.pm

I keep getting the following SpamAssassin errors from amavisd-new:

amavis[30065]: (30065-05-2) SA TIMED OUT, backtrace: at 
/usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/Dns.pm line 
143\n\teval {...} called at 
/usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/Dns.pm line 
143\n\tMail::SpamAssassin::PerMsgStatus::do_rbl_lookup('Mail::SpamAssassin::PerMsgStatus=HASH(0x9833504)','relay','74.85.205.128.orbs.dorkslayers.com.',128.205.85.74,0,'undef',1) 
called at 
/usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/EvalTests.pm line 
1182\n\teval {...} called at 
/usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/EvalTests.pm line 
1143\n\tMail::SpamAssassin::PerMsgStatus::check_rbl('Mail::SpamAssassin::PerMsgStatus=HASH(0x9833504)','relay','orbs.dorkslayers.com.',1) 
called at 
/usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 
2129\n\teval {...} called at 
/usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 
2128\n\tMail::SpamAssassin::PerMsgStatus::run_rbl_...



  I know this is related to RBLs, and I ger timeout errors trying to 
resolve orbs.dorkslayers.com:

# dig orbs.dorkslayers.com
;; reply from unexpected source: 128.6.216.19#53, expected 128.6.224.114#53
;; Warning: ID mismatch: expected ID 26674, got 13112

; <<>> DiG 9.2.2 <<>> orbs.dorkslayers.com
;; global options:  printcmd
;; connection timed out; no servers could be reached


Any ideas how to fix this? I imagine I can just remove 
orbs.dorkslayers.com from my rbl list, but is that the best thing to do? 
  And how dow I remove that RBL from my list?

Prentice

Re: Amavis SA TIMED OUT errors - Dns.pm

Posted by Kris Deugau <kd...@webhart.net>.
Prentice Bisbal wrote:
> I'm using 2.55, as provided by Red Hat Enterprise Linux 3 Advanced
> Server. Should I just comment out the lines in the .cf files that
> refer to RBLs?

If you want to stick with the "official" RedHat .rpm, yes;  poke back
through the list archives for a complete listing of the RBLs that are no
longer online.  There are 4 or 5 IIRC.  :(  Start with ORBS (as you've
found out) and Osirusoft:

score RCVD_IN_OSIRUSOFT_COM 0
score X_OSIRU_DUL 0
score X_OSIRU_DUL_FH 0
score X_OSIRU_OPEN_RELAY 0
score X_OSIRU_SPAMWARE_SITE 0
score X_OSIRU_SPAM_SRC 0

Just set the score for the disabled RBLs to 0 in local.cf (or any other
.cf file in /etc/mail/spamassassin).

If you don't mind updating, I've just posted RHEL3-compatible packages
at ftp://ftp.deepnet.cx/pub/devel/WBEL.  They were built on White Box
3.0, which is supposed to be completely package-interchangeable with
RHEL3.  My packages include support for SURBL as well.

-kgd
-- 
"Sendmail administration is not black magic.  There are legitimate
technical reasons why it requires the sacrificing of a live chicken."
   - Unknown

Re: Amavis SA TIMED OUT errors - Dns.pm

Posted by Matthias Fuhrmann <Ma...@stud.uni-hannover.de>.
On Mon, 26 Apr 2004, Prentice Bisbal wrote:

> I'm using 2.55, as provided by Red Hat Enterprise Linux 3 Advanced
> Server. Should I just comment out the lines in the .cf files that refer
> to RBLs?

upgrading to 2.63 would be a good point. wont disable all RBSs, only those
refering to orbs. but updating is better since the RBL where updated.

regards,
Matthias

Re: Amavis SA TIMED OUT errors - Dns.pm

Posted by Prentice Bisbal <pr...@rcsb.rutgers.edu>.
I'm using 2.55, as provided by Red Hat Enterprise Linux 3 Advanced 
Server. Should I just comment out the lines in the .cf files that refer 
to RBLs?

Prentice

Matthias Fuhrmann wrote:
> On Mon, 26 Apr 2004, Prentice Bisbal wrote:
> 
> 
> [...]
> 
>>resolve orbs.dorkslayers.com:
>>
>># dig orbs.dorkslayers.com
>>;; reply from unexpected source: 128.6.216.19#53, expected 128.6.224.114#53
>>;; Warning: ID mismatch: expected ID 26674, got 13112
>>
>>; <<>> DiG 9.2.2 <<>> orbs.dorkslayers.com
>>;; global options:  printcmd
>>;; connection timed out; no servers could be reached
>>
>>
>>Any ideas how to fix this? I imagine I can just remove
>>orbs.dorkslayers.com from my rbl list, but is that the best thing to do?
>>  And how dow I remove that RBL from my list?
> 
> 
> what version of SA are you using? maybe 2.63 but with old *.cf files?
> IIRC (i did this yesterday too...) there is no ORBS rbl check anymore.
> so i guess your SA version is way too old, or you have mixed those
> default *.cf files.
> just an idea.
> 
> regards,
> Matthias


Re: Amavis SA TIMED OUT errors - Dns.pm

Posted by Matthias Fuhrmann <Ma...@stud.uni-hannover.de>.
On Mon, 26 Apr 2004, Prentice Bisbal wrote:


[...]
> resolve orbs.dorkslayers.com:
>
> # dig orbs.dorkslayers.com
> ;; reply from unexpected source: 128.6.216.19#53, expected 128.6.224.114#53
> ;; Warning: ID mismatch: expected ID 26674, got 13112
>
> ; <<>> DiG 9.2.2 <<>> orbs.dorkslayers.com
> ;; global options:  printcmd
> ;; connection timed out; no servers could be reached
>
>
> Any ideas how to fix this? I imagine I can just remove
> orbs.dorkslayers.com from my rbl list, but is that the best thing to do?
>   And how dow I remove that RBL from my list?

what version of SA are you using? maybe 2.63 but with old *.cf files?
IIRC (i did this yesterday too...) there is no ORBS rbl check anymore.
so i guess your SA version is way too old, or you have mixed those
default *.cf files.
just an idea.

regards,
Matthias

Re: Amavis SA TIMED OUT errors - Dns.pm

Posted by David B Funk <db...@engineering.uiowa.edu>.
On Mon, 26 Apr 2004, Prentice Bisbal wrote:

> I keep getting the following SpamAssassin errors from amavisd-new:
>
> amavis[30065]: (30065-05-2) SA TIMED OUT, backtrace: at
> /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/Dns.pm line
> 143\n\teval {...} called at
> /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/Dns.pm line
> 143\n\tMail::SpamAssassin::PerMsgStatus::do_rbl_lookup('Mail::SpamAssassin::PerMsgStatus=HASH(0x9833504)','relay','74.85.205.128.orbs.dorkslayers.com.',128.205.85.74,0,'undef',1)
> called at
[snip..]
>   I know this is related to RBLs, and I ger timeout errors trying to
> resolve orbs.dorkslayers.com:
>
> # dig orbs.dorkslayers.com
> ;; reply from unexpected source: 128.6.216.19#53, expected 128.6.224.114#53
> ;; Warning: ID mismatch: expected ID 26674, got 13112
>
> ; <<>> DiG 9.2.2 <<>> orbs.dorkslayers.com
> ;; global options:  printcmd
> ;; connection timed out; no servers could be reached
>
>
> Any ideas how to fix this? I imagine I can just remove
> orbs.dorkslayers.com from my rbl list, but is that the best thing to do?
>   And how dow I remove that RBL from my list?

orbs.dorkslayers.com died last year under a DDOS attack.

What version of SA are you using? That RBL may have been used in an old
version of SA, but isn't in any 2.6.* release.

Maybe you have a mix of old rules or have that RBL in a custom rule.

Find it and delete it or at least set its score to zero. (that will
effectively prevent it from running).


-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{