You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Yasir Assam <ma...@endlessvoid.com> on 2014/10/04 06:37:47 UTC

Help needed with possible DNS problems

I'm new to SpamAssassin so not sure whether my logs indicate a problem.

I can't be sure, but it looks like all attempts at checking DNS
blacklists are failing.

Running Debian Wheezy SpamAssassin package (v 3.2.2)

spamd is invoked with the following options:

--create-prefs --max-children 5 --username=vmail --nouser-config
--virtual-config-dir=/var/spamassassin --helper-home-dir

When I start spamd I get the following log:

Oct  4 13:37:26 buildoneforme spamd[25172]: error creating a DNS
resolver socket: Invalid argument at
/usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 235.
Oct  4 13:37:27 buildoneforme spamd[25172]: plugin: eval failed: error
closing socket: Bad file descriptor at
/usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 568.

Here's what happens when spamd checks email (run from exim4)

Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: rules: failed to run
NO_DNS_FOR_FROM RBL test, skipping:
Oct  4 13:38:47 buildoneforme spamd[25173]:  (oops, no id at
/usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line 173, <GEN8> line 46.)
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN8> line 46.
Oct  4 13:38:47 buildoneforme spamd[25173]: plugin: eval failed: error
closing socket: Bad file descriptor at
/usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 568.

I turned on debugging output with -D and here's a short extract from
when spamd checks an email:

Oct  4 14:00:08 buildoneforme spamd[25218]: dns: checking RBL
bl.score.senderscore.com., set rnbl-lastexternal
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: IPs found:
full-external: 209.85.215.48 untrusted: 209.85.215.48 originating:
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: only inspecting the
following IPs: 209.85.215.48
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: launching DNS A query
for 48.215.85.209.bl.score.senderscore.com. in background
Oct  4 14:00:08 buildoneforme spamd[25218]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN12> line 46.
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: checking RBL
zen.spamhaus.org., set zen-lastexternal
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: IPs found:
full-external: 209.85.215.48 untrusted: 209.85.215.48 originating:
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: only inspecting the
following IPs: 209.85.215.48
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: launching DNS A query
for 48.215.85.209.zen.spamhaus.org. in background
Oct  4 14:00:08 buildoneforme spamd[25218]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN12> line 46.
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: checking RBL
psbl.surriel.com., set psbl-lastexternal
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: IPs found:
full-external: 209.85.215.48 untrusted: 209.85.215.48 originating:
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: only inspecting the
following IPs: 209.85.215.48
Oct  4 14:00:08 buildoneforme spamd[25218]: dns: launching DNS A query
for 48.215.85.209.psbl.surriel.com. in background
Oct  4 14:00:08 buildoneforme spamd[25218]: Use of uninitialized value
in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
173, <GEN12> line 46.

Here's /etc/resolv.conf:

search your-server.de
nameserver 213.133.98.98
nameserver 213.133.99.99
nameserver 213.133.100.100
nameserver 2a01:4f8:0:a0a1::add:1010
nameserver 2a01:4f8:0:a102::add:9999
nameserver 2a01:4f8:0:a111::add:9898

These are the correct IP addresses for my provider (Hetzner). I tried
commenting out the first line, commenting out the IPv6 lines and using
the --ipv4 option, and none of those things made a difference.

I've tried googling for an answer and can't figure out what's going on.
Any help troubleshooting this would be greatly appreciated.

Thanks,
Yasir




Re: Help needed with possible DNS problems

Posted by Reindl Harald <h....@thelounge.net>.
Am 04.10.2014 um 22:38 schrieb Yasir Assam:
> Thanks Reindl.
>
> I haven't investigated ipv6 properly, but looking at my Hosting
> provider's wiki and a few of my config files, it seems ipv6 is available
> (I have been assigned an ipv6 subnet). I have something like this:
> http://wiki.hetzner.de/index.php/Netzkonfiguration_Debian/en#Dedicated_Servers_3

well, even if you need to configure the server also properly
or make sure your provider does - in dfoubt for now stay at
ipv4

> I'd rather not turn ipv6 off, but I'll need to investigate further to
> see why it isn't working (with bind9 at least).

until you are sure ipv6 works in all directions disable it
and as long you are about investigate to avoid troubles

in fact you need proper ipv6 configuration in DNS (including
SPF) and on the complete software stack - if that is not
100% sure you are better suited with ipv4 only

> Thanks for the tip about unbound.

no problem

for "real" nameservers i use also bind everywhere for prouction setups 
as well as for private play around - but depending on the task there are 
often optimized tools

* bind for authoritative servers
* unbound for cacheing only
* rbldnsd for DNSBL/DNSWL
* well, unbound combind with rbldnsd on the same machine
   since unbound can forward subdomains to 127.0.0.1:specialport
* dnsmasq on hosts with Apache Traffiserver to reach goals like
   point with the public DNS to the origin or "load-balancer" and
   feed the dnsmasq hosts-file automated instead be forced to
   deal with complete dns zones

with that 4 tools you can cover anything in context of DNS and just use 
the right tool on the dependeing server saves ressources and headache

> On 4/10/2014 7:13 PM, Reindl Harald wrote:
>> Am 04.10.2014 um 08:12 schrieb Yasir Assam:
>>> I took the advice on
>>> https://wiki.apache.org/spamassassin/CachingNameserver and set up a
>>> caching name server.
>>>
>>> spamd isn't reporting errors now, but named is:
>> if you don't have ipv6 i would disable it on the OS level
>> i have the following settings on a lot of machines for years
>> after add them to "sysctl.conf" ifconfig now longer should
>> show any ipv6 link local address
>>
>> net.ipv6.conf.all.disable_ipv6=1
>> net.ipv6.conf.all.accept_redirects=0
>> net.ipv6.conf.all.accept_source_route=0
>> net.ipv6.conf.default.disable_ipv6=1
>> net.ipv6.conf.default.accept_redirects=0
>> net.ipv6.conf.default.accept_source_route=0
>>
>> BTW:
>> for a caching-only server i would recommend unbound
>> instead bind - less fatures but more power
>>
>>> Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: connection from
>>> localhost [127.0.0.1] at port 37690
>>> Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: using default config
>>> for nobody: /var/spamassassin/user_prefs
>>> Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: checking message
>>> <CA...@mail.gmail.com> for
>>> nobody:1001
>>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>>> resolving '181.217.85.209.zen.spamhaus.org/A/IN': 2001:500:48::1#53
>>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>>> resolving '181.217.85.209.bl.spamcop.net/TXT/IN': 2600:1401:2::5a#53
>>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>>> resolving 'a.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
>>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>>> resolving 'c.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
>>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>>> resolving 'b.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
>>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>>> resolving 'a.auth-ns.sonic.net/AAAA/IN': 2607:f0d0:1102:f::2#53
>>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>>> resolving 'a.auth-ns.sonic.net/A/IN': 2001:5a8:0:3::1#53


Re: Help needed with possible DNS problems

Posted by Bowie Bailey <Bo...@BUC.com>.
On 10/4/2014 4:38 PM, Yasir Assam wrote:
> Thanks Reindl.
>
> I haven't investigated ipv6 properly, but looking at my Hosting
> provider's wiki and a few of my config files, it seems ipv6 is available
> (I have been assigned an ipv6 subnet). I have something like this:
> http://wiki.hetzner.de/index.php/Netzkonfiguration_Debian/en#Dedicated_Servers_3
>
> I'd rather not turn ipv6 off, but I'll need to investigate further to
> see why it isn't working (with bind9 at least).
>
> Thanks for the tip about unbound.

If you don't want to disable ipv6 completely, you can disable it for 
bind by adding the "-4" option to the /etc/sysconfig/named file and 
restarting named.

OPTIONS="-4"

This tells bind to only talk on the ipv4 network.

-- 
Bowie

Re: Help needed with possible DNS problems

Posted by Yasir Assam <ma...@endlessvoid.com>.
Thanks Reindl.

I haven't investigated ipv6 properly, but looking at my Hosting
provider's wiki and a few of my config files, it seems ipv6 is available
(I have been assigned an ipv6 subnet). I have something like this:
http://wiki.hetzner.de/index.php/Netzkonfiguration_Debian/en#Dedicated_Servers_3

I'd rather not turn ipv6 off, but I'll need to investigate further to
see why it isn't working (with bind9 at least).

Thanks for the tip about unbound.

Yasir


On 4/10/2014 7:13 PM, Reindl Harald wrote:
> Am 04.10.2014 um 08:12 schrieb Yasir Assam:
>> I took the advice on
>> https://wiki.apache.org/spamassassin/CachingNameserver and set up a
>> caching name server.
>>
>> spamd isn't reporting errors now, but named is:
> if you don't have ipv6 i would disable it on the OS level
> i have the following settings on a lot of machines for years
> after add them to "sysctl.conf" ifconfig now longer should
> show any ipv6 link local address
>
> net.ipv6.conf.all.disable_ipv6=1
> net.ipv6.conf.all.accept_redirects=0
> net.ipv6.conf.all.accept_source_route=0
> net.ipv6.conf.default.disable_ipv6=1
> net.ipv6.conf.default.accept_redirects=0
> net.ipv6.conf.default.accept_source_route=0
>
> BTW:
> for a caching-only server i would recommend unbound
> instead bind - less fatures but more power
>
>> Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: connection from
>> localhost [127.0.0.1] at port 37690
>> Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: using default config
>> for nobody: /var/spamassassin/user_prefs
>> Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: checking message
>> <CA...@mail.gmail.com> for
>> nobody:1001
>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>> resolving '181.217.85.209.zen.spamhaus.org/A/IN': 2001:500:48::1#53
>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>> resolving '181.217.85.209.bl.spamcop.net/TXT/IN': 2600:1401:2::5a#53
>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>> resolving 'a.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>> resolving 'c.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>> resolving 'b.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>> resolving 'a.auth-ns.sonic.net/AAAA/IN': 2607:f0d0:1102:f::2#53
>> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
>> resolving 'a.auth-ns.sonic.net/A/IN': 2001:5a8:0:3::1#53


Re: Help needed with possible DNS problems

Posted by Reindl Harald <h....@thelounge.net>.
Am 04.10.2014 um 08:12 schrieb Yasir Assam:
> I took the advice on
> https://wiki.apache.org/spamassassin/CachingNameserver and set up a
> caching name server.
> 
> spamd isn't reporting errors now, but named is:

if you don't have ipv6 i would disable it on the OS level
i have the following settings on a lot of machines for years
after add them to "sysctl.conf" ifconfig now longer should
show any ipv6 link local address

net.ipv6.conf.all.disable_ipv6=1
net.ipv6.conf.all.accept_redirects=0
net.ipv6.conf.all.accept_source_route=0
net.ipv6.conf.default.disable_ipv6=1
net.ipv6.conf.default.accept_redirects=0
net.ipv6.conf.default.accept_source_route=0

BTW:
for a caching-only server i would recommend unbound
instead bind - less fatures but more power

> Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: connection from
> localhost [127.0.0.1] at port 37690
> Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: using default config
> for nobody: /var/spamassassin/user_prefs
> Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: checking message
> <CA...@mail.gmail.com> for
> nobody:1001
> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
> resolving '181.217.85.209.zen.spamhaus.org/A/IN': 2001:500:48::1#53
> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
> resolving '181.217.85.209.bl.spamcop.net/TXT/IN': 2600:1401:2::5a#53
> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
> resolving 'a.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
> resolving 'c.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
> resolving 'b.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
> resolving 'a.auth-ns.sonic.net/AAAA/IN': 2607:f0d0:1102:f::2#53
> Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
> resolving 'a.auth-ns.sonic.net/A/IN': 2001:5a8:0:3::1#53


Re: Help needed with possible DNS problems

Posted by Yasir Assam <ma...@endlessvoid.com>.
I took the advice on
https://wiki.apache.org/spamassassin/CachingNameserver and set up a
caching name server.

spamd isn't reporting errors now, but named is:

Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: connection from
localhost [127.0.0.1] at port 37690
Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: using default config
for nobody: /var/spamassassin/user_prefs
Oct  4 15:23:10 buildoneforme spamd[27020]: spamd: checking message
<CA...@mail.gmail.com> for
nobody:1001
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving '181.217.85.209.zen.spamhaus.org/A/IN': 2001:500:48::1#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving '181.217.85.209.bl.spamcop.net/TXT/IN': 2600:1401:2::5a#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'a.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'c.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'b.auth-ns.sonic.net/A/IN': 2607:f0d0:1102:f::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'a.auth-ns.sonic.net/AAAA/IN': 2607:f0d0:1102:f::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'a.auth-ns.sonic.net/A/IN': 2001:5a8:0:3::1#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'c.auth-ns.sonic.net/AAAA/IN': 2001:5a8:0:3::1#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'b.auth-ns.sonic.net/AAAA/IN': 2001:5a8:0:3::1#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'a.auth-ns.sonic.net/AAAA/IN': 2001:5a8:0:3::1#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'c.auth-ns.sonic.net/A/IN': 2001:5a8:0:3::1#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'c.auth-ns.sonic.net/AAAA/IN': 2001:48c8:1:1::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'b.auth-ns.sonic.net/A/IN': 2001:5a8:0:3::1#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'a.auth-ns.sonic.net/A/IN': 2001:48c8:1:1::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'c.auth-ns.sonic.net/A/IN': 2001:48c8:1:1::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'b.auth-ns.sonic.net/AAAA/IN': 2001:48c8:1:1::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'a.auth-ns.sonic.net/AAAA/IN': 2001:48c8:1:1::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'b.auth-ns.sonic.net/A/IN': 2001:48c8:1:1::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving '181.217.85.209.psbl.surriel.com/A/IN':
2002:4a5c:3b41:1:216:3eff:fe57:7f4#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns20.ja.net/A/IN': 2001:630:0:8::14#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns-1743.awsdns-25.co.uk/A/IN': 2a01:40:1001:35::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns20.ja.net/AAAA/IN': 2001:630:0:8::14#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns20.ja.net/A/IN': 2001:630:0:44::e2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns-1743.awsdns-25.co.uk/AAAA/IN': 2a01:40:1001:35::2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns20.ja.net/AAAA/IN': 2001:630:0:44::e2#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns20.ja.net/A/IN': 2001:630:0:47::42#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns20.ja.net/AAAA/IN': 2001:630:0:47::42#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving '181.217.85.209.list.dnswl.org/A/IN': 2a01:4f8:131:3e1::64#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving '181.217.85.209.list.dnswl.org/A/IN':
2600:3c01::f03c:91ff:fedf:9d08#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns4.mydyndns.org/A/IN': 2001:500:94::100#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns3.mydyndns.org/A/IN': 2001:500:94::100#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns1.p23.dynect.net/AAAA/IN': 2001:500:90::100#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns5.mydyndns.org/AAAA/IN': 2001:500:90::100#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns1.p23.dynect.net/AAAA/IN': 2001:500:94::100#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns5.mydyndns.org/AAAA/IN': 2001:500:94::100#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving '181.217.85.209.bb.barracudacentral.org/A/IN':
2001:500:90:1::23#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'dnswl.org/DS/IN': 2001:500:e::1#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'nsb00-aws-eu1.rpdns.net/A/IN': 2600:1401:2::dc#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'nsb00-rac-ord.rpdns.net/A/IN': 2600:1401:2::dc#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'nsb00-aws-eu1.rpdns.net/AAAA/IN': 2600:1401:2::dc#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'nsb00-rac-ord.rpdns.net/AAAA/IN': 2600:1401:2::dc#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'nsb00-aws-use1.rpdns.net/A/IN': 2600:1401:2::dc#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'nsb00-aws-usw1.rpdns.net/A/IN': 2600:1401:2::dc#53
Oct  4 15:23:10 buildoneforme named[26974]: error (network unreachable)
resolving 'ns1.zurich.surf.net/AAAA/IN': 2001:610:3:200a:192:87:36:2#53
Oct  4 15:23:13 buildoneforme named[26974]: error (network unreachable)
resolving 'org/DNSKEY/IN': 2001:500:f::1#53
Oct  4 15:23:13 buildoneforme named[26974]: error (network unreachable)
resolving 'org/DNSKEY/IN': 2001:500:40::1#53
Oct  4 15:23:13 buildoneforme named[26974]: error (network unreachable)
resolving '181.217.85.209.zen.spamhaus.org/A/IN': 2001:7b8:3:1f:0:2:53:2#53
Oct  4 15:23:13 buildoneforme named[26974]: error (network unreachable)
resolving 'spamhaus.org/DS/IN': 2001:500:b::1#53
Oct  4 15:23:13 buildoneforme named[26974]: error (network unreachable)
resolving 'spamhaus.org/DS/IN': 2001:500:c::1#53
Oct  4 15:23:13 buildoneforme named[26974]: error (network unreachable)
resolving 'org/DNSKEY/IN': 2001:500:c::1#53
Oct  4 15:23:13 buildoneforme named[26974]: error (network unreachable)
resolving 'org/DNSKEY/IN': 2001:500:b::1#53
Oct  4 15:23:13 buildoneforme named[26974]: error (network unreachable)
resolving 'org/DNSKEY/IN': 2001:500:48::1#53
Oct  4 15:23:14 buildoneforme named[26974]: success resolving
'org/DNSKEY' (in 'org'?) after reducing the advertised EDNS UDP packet
size to 512 octets
Oct  4 15:23:14 buildoneforme named[26974]: success resolving
'181.217.85.209.zen.spamhaus.org/A' (in 'zen.spamhaus.org'?) after
reducing the advertised EDNS UDP packet size to 512 octets
Oct  4 15:23:14 buildoneforme spamd[27020]: spamd: clean message
(-2.6/5.0) for nobody:1001 in 4.4 seconds, 1796 bytes.
Oct  4 15:23:14 buildoneforme spamd[27020]: spamd: result: . -2 -
BAYES_00,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS,T_DKIM_INVALID
scantime=4.4,size=1796,user=nobody,uid=1001,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37690,mid=<CA...@mail.gmail.com>,bayes=0.000221,autolearn=ham
Oct  4 15:23:14 buildoneforme spamd[27019]: prefork: child states: II

It looks like named is having problems with IPv6 addresses, even though
IPv6 seems to be available on my server.

I turned off IPv6 using the -4 switch on named (in /etc/default/bind9)
and spamd and named seem to be running ok now.

Thanks,
Yasir

On 4/10/2014 2:37 PM, Yasir Assam wrote:
> I'm new to SpamAssassin so not sure whether my logs indicate a problem.
>
> I can't be sure, but it looks like all attempts at checking DNS
> blacklists are failing.
>
> Running Debian Wheezy SpamAssassin package (v 3.2.2)
>
> spamd is invoked with the following options:
>
> --create-prefs --max-children 5 --username=vmail --nouser-config
> --virtual-config-dir=/var/spamassassin --helper-home-dir
>
> When I start spamd I get the following log:
>
> Oct  4 13:37:26 buildoneforme spamd[25172]: error creating a DNS
> resolver socket: Invalid argument at
> /usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 235.
> Oct  4 13:37:27 buildoneforme spamd[25172]: plugin: eval failed: error
> closing socket: Bad file descriptor at
> /usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 568.
>
> Here's what happens when spamd checks email (run from exim4)
>
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: rules: failed to run
> NO_DNS_FOR_FROM RBL test, skipping:
> Oct  4 13:38:47 buildoneforme spamd[25173]:  (oops, no id at
> /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line 173, <GEN8> line 46.)
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN8> line 46.
> Oct  4 13:38:47 buildoneforme spamd[25173]: plugin: eval failed: error
> closing socket: Bad file descriptor at
> /usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 568.
>
> I turned on debugging output with -D and here's a short extract from
> when spamd checks an email:
>
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: checking RBL
> bl.score.senderscore.com., set rnbl-lastexternal
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: IPs found:
> full-external: 209.85.215.48 untrusted: 209.85.215.48 originating:
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: only inspecting the
> following IPs: 209.85.215.48
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: launching DNS A query
> for 48.215.85.209.bl.score.senderscore.com. in background
> Oct  4 14:00:08 buildoneforme spamd[25218]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN12> line 46.
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: checking RBL
> zen.spamhaus.org., set zen-lastexternal
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: IPs found:
> full-external: 209.85.215.48 untrusted: 209.85.215.48 originating:
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: only inspecting the
> following IPs: 209.85.215.48
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: launching DNS A query
> for 48.215.85.209.zen.spamhaus.org. in background
> Oct  4 14:00:08 buildoneforme spamd[25218]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN12> line 46.
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: checking RBL
> psbl.surriel.com., set psbl-lastexternal
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: IPs found:
> full-external: 209.85.215.48 untrusted: 209.85.215.48 originating:
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: only inspecting the
> following IPs: 209.85.215.48
> Oct  4 14:00:08 buildoneforme spamd[25218]: dns: launching DNS A query
> for 48.215.85.209.psbl.surriel.com. in background
> Oct  4 14:00:08 buildoneforme spamd[25218]: Use of uninitialized value
> in string ne at /usr/share/perl5/Mail/SpamAssassin/AsyncLoop.pm line
> 173, <GEN12> line 46.
>
> Here's /etc/resolv.conf:
>
> search your-server.de
> nameserver 213.133.98.98
> nameserver 213.133.99.99
> nameserver 213.133.100.100
> nameserver 2a01:4f8:0:a0a1::add:1010
> nameserver 2a01:4f8:0:a102::add:9999
> nameserver 2a01:4f8:0:a111::add:9898
>
> These are the correct IP addresses for my provider (Hetzner). I tried
> commenting out the first line, commenting out the IPv6 lines and using
> the --ipv4 option, and none of those things made a difference.
>
> I've tried googling for an answer and can't figure out what's going on.
> Any help troubleshooting this would be greatly appreciated.
>
> Thanks,
> Yasir
>
>
>