You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Nick Gilbert <ni...@nickgilbert.com> on 2004/03/30 23:08:21 UTC
RBL tests all failing
Hi,
After having got SA and Razor working, I've noticed a problem in the
output of a spamassassin test:
If I run:
spamassassin -t -D < spam.txt
I get the following in the debug output:
debug: DNS MX records found: 4
debug: RBL: success for 0 of 9 queries
debug: RBL: timeout for opm after 15 seconds
debug: RBL: timeout for njabl after 15 seconds
debug: RBL: timeout for rfci-dsn after 15 seconds
debug: RBL: timeout for sorbs after 15 seconds
debug: RBL: timeout for spamcop after 15 seconds
debug: RBL: timeout for bsp-firsttrusted after 15 seconds
debug: RBL: timeout for rfci after 15 seconds
debug: RBL: timeout for dsbl after 15 seconds
debug: RBL: timeout for sbl after 15 seconds
Why are all the RBL checks failing?
Net::DNS::Resolver is installed and working (as I can see from further
up the debug output). As far as I can tell, the RBL hosts are working at
the moment.
How do I debug this problem?
What program does SA use to do the RBL checks? (and how can I run it
manually?)
Thanks,
Nick...
Re: RBL tests all failing - FIXED
Posted by Nick Gilbert <ni...@nickgilbert.com>.
>> Why are all the RBL checks failing?
> Something is wrong with the local machine's DNS resolution capability
Well I can do this:
[root@red /root]# host -t txt 178.3.155.200.bl.spamcop.net
178.3.155.200.bl.spamcop.net. text "Blocked - see
http://www.spamcop.net/bl.shtml?200.155.3.178"
So it appears to be working at the OS level. I have no problems with DNS
on the machine as far as I know.
> One thing I'd do is carefuly check your /etc/resolv.conf. Is the first
> listed DNS server working? try:
>
> dig @1.1.1.1 www.spamassassin.org
> where 1.1.1.1 is the first DNS server listed in resolv.conf.
Aha! Thank you!
My /etc/resolv.conf was very wrong! It had 127.0.0.1 as the first
nameserver (my machine doesn't seem to be running a DNS server
anymore?!) and the second entry was outdated. The third entry worked,
but obviously Net::DNS doesn't try all of them before giving up.
I presume that the host command works a different way to whatever it is
that spamassassin uses (Net::DNS?).
I shouldn't have assumed it was correct just because host and dig were
working.
Thanks for your help!
Nick...
Re: RBL tests all failing
Posted by Matt Kettler <mk...@evi-inc.com>.
At 04:08 PM 3/30/2004, Nick Gilbert wrote:
>Why are all the RBL checks failing?
Something is wrong with the local machine's DNS resolution capability
>Net::DNS::Resolver is installed and working (as I can see from further up
>the debug output). As far as I can tell, the RBL hosts are working at the
>moment.
>
>How do I debug this problem?
>What program does SA use to do the RBL checks? (and how can I run it
>manually?)
SA doesn't use a program, DNS resolution is an OS provided system call that
any program (including SA) can use directly.
However, you can use the command line tools that do DNS resolution to test
things:
dig is probably best if you have it.
nslookup or host will work too.
One thing I'd do is carefuly check your /etc/resolv.conf. Is the first
listed DNS server working? try:
dig @1.1.1.1 www.spamassassin.org
where 1.1.1.1 is the first DNS server listed in resolv.conf.
Re: RBL tests all failing
Posted by Adam Gent <A....@cs.cardiff.ac.uk>.
> >>Why are all the RBL checks failing?
> > DNS servers are unavailable? firewall? misconfigured DNS? etc?
>
> DNS server seems to work (localhost) as do the backup DNS servers. The
> firewall doesn't block any outbound traffic.
>
> > do some queries via "host" or "nslookup" or "dig" or something, make
> > sure that you can query the rbls from that box.
>
> I can run nslookup and do normal lookups, but I'm not sure how RBL works
> so I don't know how to test an RBL server manually.
>
> > If the above debugging works, I'd make sure you had the latest Net::DNS
> > installed.
>
> I've just installed it earlier today - so it should be up to date :)
>
I also seem to be having the same problems and can not come up for a reason
why.
Adam
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.647 / Virus Database: 414 - Release Date: 29/03/2004
Re: RBL tests all failing
Posted by Theo Van Dinter <fe...@kluge.net>.
On Tue, Mar 30, 2004 at 10:32:02PM +0100, Nick Gilbert wrote:
> I can run nslookup and do normal lookups, but I'm not sure how RBL works
> so I don't know how to test an RBL server manually.
Ah. Basically you verse the IP address, and tack on the RBL domain. ie:
SORBS is dnsbl.sorbs.net, my IP is 66.92.69.221. So do a lookup for:
221.69.92.66.dnsbl.sorbs.net.
$ host 221.69.92.66.dnsbl.sorbs.net.
Host 221.69.92.66.dnsbl.sorbs.net not found: 3(NXDOMAIN)
you should get a response with an A record for some 127.0.0.0/8 host if
it is actually listed.
--
Randomly Generated Tagline:
"Problem solving under linux has never been the circus that it is under
AIX."
(By Pete Ehlke in comp.unix.aix)
Re: RBL tests all failing
Posted by Nick Gilbert <ni...@nickgilbert.com>.
>>Why are all the RBL checks failing?
> DNS servers are unavailable? firewall? misconfigured DNS? etc?
DNS server seems to work (localhost) as do the backup DNS servers. The
firewall doesn't block any outbound traffic.
> do some queries via "host" or "nslookup" or "dig" or something, make
> sure that you can query the rbls from that box.
I can run nslookup and do normal lookups, but I'm not sure how RBL works
so I don't know how to test an RBL server manually.
> If the above debugging works, I'd make sure you had the latest Net::DNS
> installed.
I've just installed it earlier today - so it should be up to date :)
Nick...
Re: RBL tests all failing
Posted by Peter Lemieux <ph...@cyways.com>.
Theo Van Dinter <felicity <at> kluge.net> writes:
> Heh. SA uses Net::DNS directly.
>
> If the above debugging works, I'd make sure you had the latest Net::DNS
> installed.
I had the problem of no DNSBL checks as well. A "spamassassin -D" showed that I
didn't have Net::DNS installed. This is on a stock RedHat 7.3 machine with all
the latest rpm updates installed, as well as spamassassin-2.63-1.i386.rpm and
friends (built from SRPM) and MailScanner-4.28.6-1, which rebuilds its perl
modules during installation. I'm a bit puzzled why neither of these complained
about the absence of Net::DNS during the dependency checks. I would have
thought name resolution would be a necessary part of either of these packages.
Peter
Re: RBL tests all failing
Posted by Theo Van Dinter <fe...@kluge.net>.
On Tue, Mar 30, 2004 at 10:08:21PM +0100, Nick Gilbert wrote:
> Why are all the RBL checks failing?
DNS servers are unavailable? firewall? misconfigured DNS? etc?
> How do I debug this problem?
do some queries via "host" or "nslookup" or "dig" or something, make
sure that you can query the rbls from that box.
> What program does SA use to do the RBL checks? (and how can I run it
> manually?)
Heh. SA uses Net::DNS directly.
If the above debugging works, I'd make sure you had the latest Net::DNS
installed.
--
Randomly Generated Tagline:
"I don't know what's wrong with my television set. I was getting C-Span
and the Home Shopping Network on the same station. I actually bought a
congressman." - Bruce Baum