What are your settings for:

UseLocalDNS
DNSServers (obfuscate if private)
DNSServerLimit
DNSretry
DNSretrans

Daniel

On 5/3/2019 8:19 AM, K Post wrote:
Hi Daniel,

We've only seen the problem with spopessentials2.com <http://spopessentials2.com>.  It's Silverpop systems, now IBM mailing on behalf of American Airlines.  The issue clearly stems from IBM having this setup wrong, spopessentials2.com <http://spopessentials2.com> is registered ( https://whois.icann.org/en/lookup?name=spopessentials2.com) but most DNS servers on the registration seem to be unresponsive.  I'd expect an immediate NXDOMAIN because of this, and I get that when using NSLOOKUP.

All 3 of our DNS servers are the native Windows DNS server (a mix of Windows 2012 and 2016).  When I look for any record in spopessentials2.com <http://spopessentials2.com> using nslookup using any of our 3 servers, I get an immediate NXDOMAIN.  Great.  BUT, it seems that when ASSP does the lookup in perl, that it times out (now after 2 seconds, instead of the 10 that was causing the problem before).

I don't see messages from them very often, so haven't tested after the change from 10 to 2 seconds, but I suspect they'll just deliver now without timing out.

The issue is why ASSP isn't getting an NXDomain from the DNS servers instantly, it shouldn't take the full 2 seconds..  All other DNS queries seem plenty fast, based on the speed of delivery.  I don't know if it's ASSP, a perl module, a misconfiguration on my end, or what.



On Wed, May 1, 2019 at 3:32 PM Daniel Miller via Assp-test <assp-test@lists.sourceforge.net <mailto:assp-test@lists.sourceforge.net>> wrote:

    Even though I'm probably way off - can I ask you to clarify a couple
    items?

    Is the problem a specific domain, i.e. spopessentials2.com
    <http://spopessentials2.com>?  Because I
    can't find that domain, or any of the hosts you've listed, via my own
    lookups.  Host/Dig/Nslookup return immediately (with no result).

    What are you using for your DNS resolvers? I'm using PowerDNS 4.1.1 on
    my Ubuntu 18.04 server as the sole resolver without issue.

    Daniel

    On 4/30/2019 7:11 PM, K Post wrote:
     > Thanks for the gentle hint.  I changed the dnstimeout setting
    back to 2
     > seconds. I set it to 10 so that if things got CRAZY slow, I
    wouldn't run
     > into issues.  Obviously that was short sighted, and I'm sorry about
     > that. HOWEVER, when i run a NSLOOKUP on a non-existent hostname,
    all 3
> of our DNS servers respond instantly with non-existent domain. Could
     > there be something with the dns setup within Perl that I'm
    missing?  Can
     > you think of any reason that ASSP/perl wouldn't receive an NXDOMAIN
     > immediately?
     >
     > On Mon, Apr 29, 2019 at 10:14 AM Thomas Eckardt
     > <thomas.ecka...@thockar.com <mailto:thomas.ecka...@thockar.com>
    <mailto:thomas.ecka...@thockar.com
    <mailto:thomas.ecka...@thockar.com>>> wrote:
     >
     >     you've set DNSTimeout to 10 seconds (instead using the
    default of 2
     >     seconds)
     >     you've not set any of noDKIMAddresses and noDKIMIP
     >     your DNS-Server is not answering with NXDOMAIN within 10 seconds
     >
     >     And now you ask, how ASSP can workaround this??????
     >
     >     Thanks for wasting my time. :(
     >
     >
     >     Thomas
     >
     >
     >     DISCLAIMER:
     >     *******************************************************
     >     This email and any files transmitted with it may be confidential,
     >     legally privileged and protected in law and are intended
    solely for
     >     the use of the
     >     individual to whom it is addressed.
     >     This email was multiple times scanned for viruses. There
    should be
     >     no known virus in this email!
     >     *******************************************************
     >
     >     _______________________________________________
     >     Assp-test mailing list
     > Assp-test@lists.sourceforge.net
    <mailto:Assp-test@lists.sourceforge.net>
    <mailto:Assp-test@lists.sourceforge.net
    <mailto:Assp-test@lists.sourceforge.net>>
     > https://lists.sourceforge.net/lists/listinfo/assp-test
     >
     >
     >
     > _______________________________________________
     > Assp-test mailing list
     > Assp-test@lists.sourceforge.net
    <mailto:Assp-test@lists.sourceforge.net>
     > https://lists.sourceforge.net/lists/listinfo/assp-test
     >


    _______________________________________________
    Assp-test mailing list
    Assp-test@lists.sourceforge.net <mailto:Assp-test@lists.sourceforge.net>
    https://lists.sourceforge.net/lists/listinfo/assp-test



_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test



_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to