We see the following hammering on one of our DNS servers (log copy below). 204.188.100.4 is an IP assigned to the NIC on the mail server (although it is not assigned to any mail domain or web site) and 206.168.216.6 is one of the DNS servers. We are seeing this behavior sporadically and it is hammering the DNS server when it happens. Shouldn't declude be querying the relays.osirusoft.com directly?
This is normal. DNS works the way that SMTP used to, back in the days where an organization running a mailserver would have their mail sent to a "smart host" that would actually deliver the E-mail. With DNS, a DNS client connects to a DNS server, which handles the actual lookup. For example, IMail, Declude, and Winsock will all connect to a local DNS server to make the requests. That's how caching works -- otherwise, Declude wouldn't be able to access information cached by IMail and vice versa.
Also why is it doing it so many time for the same host?
That's because when Declude was first created, there was never a reason to have more than one lookup per host. There is now -- and so the latest beta will prevent duplicate lookups.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
