You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris <cp...@embarqmail.com> on 2014/10/20 20:06:58 UTC

dns: bad dns reply: Connection refused

The complete error shown in my syslog is:

Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53
failed: Connection refused, no more alternatives
Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection
refused

Up until this time I saw no issues. Running SA 3.4.0 on Ubuntu 14.04.1
LTS

Anyone have any suggestions?

Chris

-- 
Chris
KeyID 0xE372A7DA98E6705C
31.11°N 97.89°W (Elev. 1092 ft)
13:04:42 up 1:24, 3 users, load average: 0.26, 0.20, 0.23
Ubuntu 14.04.1 LTS, kernel 3.13.0-38-generic


Re: dns: bad dns reply: Connection refused

Posted by Chris <cp...@embarqmail.com>.
On Tue, 2014-10-21 at 00:14 +0200, Mark Martinec wrote:
> 2014-10-20 20:11, Reindl Harald wrote:
> > [...]
> > 
> > sorry, no, but what i face repeatly are messages like below
> > in fact only if the machine has more than 1 dns in resolv.conf
> > configure it to just use 127.0.0.1 and that won't happen
> > 
> > Oct 19 09:04:42 caladan spamd[20546]: dns: no callback for id
> > 40563/IN/A/uwc.org.dbl.spamhaus.org, ignored; packet: ;; Answer
> > received from 10.0.0.6 (53 bytes)
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; HEADER SECTION
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; id = 40563
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; qr = 1 aa = 0 tc =
> > 0 rd = 1 opcode = QUERY
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; ra = 1 z = 0 ad =
> > 0 cd = 0 rcode = SERVFAIL
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; qdcount = 1
> > ancount = 0 nscount = 0 arcount = 1
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; do = 0
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; EDNS version 0
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; flags: 0000
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; rcode: NOERROR
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; size: 1024
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; option:
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; QUESTION SECTION (1 
> > record)
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;;
> > uwc.org.dbl.spamhaus.org. IN A
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; ANSWER SECTION (0 
> > records)
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; AUTHORITY SECTION
> > (0 records)
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; ADDITIONAL SECTION
> > (1 record)
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; EDNS version 0
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; flags: 0000
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; rcode: NOERROR
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; size: 1024
> > Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; option:
> > Oct 19 09:04:42 caladan spamd[20546]: dns: no likely matching queries
> > for id 40563
> 
> This happens when a DNS response comes late and ALARM signal
> interrupts its decoding. They call it a 'design feature',
> I call it bug:
> 
>    https://rt.cpan.org/Ticket/Display.html?id=83451
> 
> Mark

This seems possibly somehow related to an update to the kernel. This
morning there was an update to kernel 3.13.0-39-generic and right after
the required restart I started seeing:

localhost spamd[2195]: dns: sendto() to [127.0.0.1]:53 failed:
Connection refused, no more alternatives
localhost spamd[2195]: dns: bad dns reply: Connection refused

My /etc/resolvconf shows:

nameserver 127.0.1.1
search PK5001Z

I don't seem to be getting any replies on the Ubuntu list, maybe it's
because it seems related to spamd, I don't know. I do know that scan
times are ridiculous

scantime=201.2

Any more ideas or should I just 'wait and see' if it suddenly corrects
itself as before?

Chris
 

-- 
Chris
KeyID 0xE372A7DA98E6705C
31.11°N 97.89°W (Elev. 1092 ft)
17:02:28 up 9:14, 2 users, load average: 0.22, 0.14, 0.14
Ubuntu 14.04.1 LTS, kernel 3.13.0-39-generic


Re: dns: bad dns reply: Connection refused

Posted by Chris <cp...@embarqmail.com>.
On Tue, 2014-10-21 at 00:14 +0200, Mark Martinec wrote:
> 2014-10-20 20:11, Reindl Harald wrote:
> > [...]
> > 
> > sorry, no, but what i face repeatly are messages like below
> > in fact only if the machine has more than 1 dns in resolv.conf
> > configure it to just use 127.0.0.1 and that won't happen
> > 
Oddly enough shortly after 6am this morning the issue corrected itself
and all is well now it seems.

-- 
Chris
KeyID 0xE372A7DA98E6705C
31.11°N 97.89°W (Elev. 1092 ft)
19:26:50 up 23:59, 2 users, load average: 0.15, 0.16, 0.20
Ubuntu 14.04.1 LTS, kernel 3.13.0-38-generic


Re: dns: bad dns reply: Connection refused

Posted by Mark Martinec <Ma...@ijs.si>.
2014-10-20 20:11, Reindl Harald wrote:
> [...]
> 
> sorry, no, but what i face repeatly are messages like below
> in fact only if the machine has more than 1 dns in resolv.conf
> configure it to just use 127.0.0.1 and that won't happen
> 
> Oct 19 09:04:42 caladan spamd[20546]: dns: no callback for id
> 40563/IN/A/uwc.org.dbl.spamhaus.org, ignored; packet: ;; Answer
> received from 10.0.0.6 (53 bytes)
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; HEADER SECTION
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; id = 40563
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; qr = 1 aa = 0 tc =
> 0 rd = 1 opcode = QUERY
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; ra = 1 z = 0 ad =
> 0 cd = 0 rcode = SERVFAIL
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; qdcount = 1
> ancount = 0 nscount = 0 arcount = 1
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; do = 0
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; EDNS version 0
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; flags: 0000
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; rcode: NOERROR
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; size: 1024
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; option:
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; QUESTION SECTION (1 
> record)
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;;
> uwc.org.dbl.spamhaus.org. IN A
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; ANSWER SECTION (0 
> records)
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; AUTHORITY SECTION
> (0 records)
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; ADDITIONAL SECTION
> (1 record)
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; EDNS version 0
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; flags: 0000
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; rcode: NOERROR
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; size: 1024
> Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; option:
> Oct 19 09:04:42 caladan spamd[20546]: dns: no likely matching queries
> for id 40563

This happens when a DNS response comes late and ALARM signal
interrupts its decoding. They call it a 'design feature',
I call it bug:

   https://rt.cpan.org/Ticket/Display.html?id=83451

Mark

Re: dns: bad dns reply: Connection refused

Posted by Reindl Harald <h....@thelounge.net>.
Am 20.10.2014 um 20:06 schrieb Chris:
> The complete error shown in my syslog is:
>
> Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53
> failed: Connection refused, no more alternatives
> Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection
> refused

looks like overload of your local resolver

> Up until this time I saw no issues. Running SA 3.4.0 on Ubuntu 14.04.1
> LTS
>
> Anyone have any suggestions?

sorry, no, but what i face repeatly are messages like below
in fact only if the machine has more than 1 dns in resolv.conf
configure it to just use 127.0.0.1 and that won't happen

Oct 19 09:04:42 caladan spamd[20546]: dns: no callback for id 
40563/IN/A/uwc.org.dbl.spamhaus.org, ignored; packet: ;; Answer received 
from 10.0.0.6 (53 bytes)
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; HEADER SECTION
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; id = 40563
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; qr = 1 aa = 0 tc = 0 
rd = 1 opcode = QUERY
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; ra = 1 z = 0 ad = 0 
cd = 0 rcode = SERVFAIL
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; qdcount = 1 ancount 
= 0 nscount = 0 arcount = 1
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; do = 0
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; EDNS version 0
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; flags: 0000
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; rcode: NOERROR
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; size: 1024
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; option:
Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; QUESTION SECTION (1 
record)
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; 
uwc.org.dbl.spamhaus.org. IN A
Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; ANSWER SECTION (0 
records)
Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; AUTHORITY SECTION (0 
records)
Oct 19 09:04:42 caladan spamd[20546]: dns: [...]
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; ADDITIONAL SECTION 
(1 record)
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; EDNS version 0
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; flags: 0000
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; rcode: NOERROR
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; size: 1024
Oct 19 09:04:42 caladan spamd[20546]: dns: [...] ;; option:
Oct 19 09:04:42 caladan spamd[20546]: dns: no likely matching queries 
for id 40563


Re: dns: bad dns reply: Connection refused

Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
On 10/20/2014 2:06 PM, Chris wrote:
> The complete error shown in my syslog is:
>
> Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53
> failed: Connection refused, no more alternatives
> Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection
> refused
>
> Up until this time I saw no issues. Running SA 3.4.0 on Ubuntu 14.04.1
> LTS
>
> Anyone have any suggestions?
Is your DNS server running on the localhost?

Is it blocked? Does it have enough threads?  Does your resolve.conf 
contain ONLY 127.0.0.1 (usually that's fine?)

This implies solely a DNS issue to me.

Regards,
KAM

Re: dns: bad dns reply: Connection refused

Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
On 10/20/2014 2:06 PM, Chris wrote:
> The complete error shown in my syslog is:
>
> Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53
> failed: Connection refused, no more alternatives
> Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection
> refused
>
> Up until this time I saw no issues. Running SA 3.4.0 on Ubuntu 14.04.1
> LTS
>
> Anyone have any suggestions?
Is your DNS server running on the localhost?

Is it blocked? Does it have enough threads?  Does your resolve.conf 
contain ONLY 127.0.0.1 (usually that's fine?)

This implies solely a DNS issue to me.

Regards,
KAM

Re: dns: bad dns reply: Connection refused

Posted by Chris <cp...@embarqmail.com>.
On Mon, 2014-10-20 at 13:06 -0500, Chris wrote:
> The complete error shown in my syslog is:
> 
> Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53
> failed: Connection refused, no more alternatives
> Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection
> refused
> 
> Up until this time I saw no issues. Running SA 3.4.0 on Ubuntu 14.04.1
> LTS
> 
> Anyone have any suggestions?
> 
> Chris
> 

I forgot to add that running this in a terminal:

chris@localhost:~$ host www.apache.org
www.apache.org has address 192.87.106.229
www.apache.org has address 140.211.11.131
www.apache.org has IPv6 address 2001:610:1:80bc:192:87:106:229
www.apache.org mail is handled by 10 minotaur.apache.org.

seems to show that dns is working or doesn't it?

-- 
Chris
KeyID 0xE372A7DA98E6705C
31.11°N 97.89°W (Elev. 1092 ft)
13:11:19 up 1:31, 3 users, load average: 0.24, 0.21, 0.23
Ubuntu 14.04.1 LTS, kernel 3.13.0-38-generic