What are your settings for:
UseLocalDNS
DNSServers (obfuscate if private)
DNSServerLimit
DNSretry
DNSretrans
Daniel
On 5/3/2019 8:19 AM, K Post wrote:
Hi Daniel,
We've only seen the problem with spopessentials2.com
<http://spopessentials2.com>. It's Silverpop systems, now IBM mailing
on behalf of American Airlines. The issue clearly stems from IBM having
this setup wrong, spopessentials2.com <http://spopessentials2.com> is
registered ( https://whois.icann.org/en/lookup?name=spopessentials2.com)
but most DNS servers on the registration seem to be unresponsive. I'd
expect an immediate NXDOMAIN because of this, and I get that when using
NSLOOKUP.
All 3 of our DNS servers are the native Windows DNS server (a mix of
Windows 2012 and 2016). When I look for any record in
spopessentials2.com <http://spopessentials2.com> using nslookup using
any of our 3 servers, I get an immediate NXDOMAIN. Great. BUT, it
seems that when ASSP does the lookup in perl, that it times out (now
after 2 seconds, instead of the 10 that was causing the problem before).
I don't see messages from them very often, so haven't tested after the
change from 10 to 2 seconds, but I suspect they'll just deliver now
without timing out.
The issue is why ASSP isn't getting an NXDomain from the DNS servers
instantly, it shouldn't take the full 2 seconds.. All other DNS queries
seem plenty fast, based on the speed of delivery. I don't know if it's
ASSP, a perl module, a misconfiguration on my end, or what.
On Wed, May 1, 2019 at 3:32 PM Daniel Miller via Assp-test
<assp-test@lists.sourceforge.net
<mailto:assp-test@lists.sourceforge.net>> wrote:
Even though I'm probably way off - can I ask you to clarify a couple
items?
Is the problem a specific domain, i.e. spopessentials2.com
<http://spopessentials2.com>? Because I
can't find that domain, or any of the hosts you've listed, via my own
lookups. Host/Dig/Nslookup return immediately (with no result).
What are you using for your DNS resolvers? I'm using PowerDNS 4.1.1 on
my Ubuntu 18.04 server as the sole resolver without issue.
Daniel
On 4/30/2019 7:11 PM, K Post wrote:
> Thanks for the gentle hint. I changed the dnstimeout setting
back to 2
> seconds. I set it to 10 so that if things got CRAZY slow, I
wouldn't run
> into issues. Obviously that was short sighted, and I'm sorry about
> that. HOWEVER, when i run a NSLOOKUP on a non-existent hostname,
all 3
> of our DNS servers respond instantly with non-existent domain.
Could
> there be something with the dns setup within Perl that I'm
missing? Can
> you think of any reason that ASSP/perl wouldn't receive an NXDOMAIN
> immediately?
>
> On Mon, Apr 29, 2019 at 10:14 AM Thomas Eckardt
> <thomas.ecka...@thockar.com <mailto:thomas.ecka...@thockar.com>
<mailto:thomas.ecka...@thockar.com
<mailto:thomas.ecka...@thockar.com>>> wrote:
>
> you've set DNSTimeout to 10 seconds (instead using the
default of 2
> seconds)
> you've not set any of noDKIMAddresses and noDKIMIP
> your DNS-Server is not answering with NXDOMAIN within 10 seconds
>
> And now you ask, how ASSP can workaround this??????
>
> Thanks for wasting my time. :(
>
>
> Thomas
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential,
> legally privileged and protected in law and are intended
solely for
> the use of the
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There
should be
> no known virus in this email!
> *******************************************************
>
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
<mailto:Assp-test@lists.sourceforge.net>
<mailto:Assp-test@lists.sourceforge.net
<mailto:Assp-test@lists.sourceforge.net>>
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
>
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
<mailto:Assp-test@lists.sourceforge.net>
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net <mailto:Assp-test@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/assp-test
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test