https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6075
--- Comment #11 from Mark Martinec <[email protected]> 2009-03-02 04:24:39 PST --- > I am attaching a zipped file with results of command "tcpdump -i bond0 -s 0 -w > 0.txt port 53" and then retrieved with "tcpdump -r 0.txt" You left out the 'or icmp' part. A comfortable way to view such capture in detail is through wireshark. > Is there any way I could tell SA to query just "one" dnsbl list? This way > I could reproduce a single "host" query, which outside SA, works o.k. This comes close (but there may still be a difference): perl -le 'use Net::DNS; $r=Net::DNS::Resolver->new(nameservers=> ["80.58.0.33"]); $q=$r->query("213.21.195.128.dnsbl.sorbs.net","A"); if ($q) { ($q->answer)[0]->print } else { print $r->errorstring }' or set scores for unwanted lookups to 0 (probably too much work to find them all). >> Looks like you need to do some network troubleshooting, like >> looking at a DNS server's log file, trying the same capture >> on the DNS host, checking firewall, network, ... > > Well, I am trying all the tests I can perfom at my side (disabling firewalls > -computer and router ones- disabling any filters that could be blocking > packets and so on). > Once the packets leave my router I don't have any control. > I am using my ISP dns servers. With multi giga links and several hosts in the network, along with inability to have any control over provider's DNS server (their UDP rate limits, firewall, NAT, looking into their DNS log, doing a packet capture at a DNS host), I really believe you should set up your own DNS resolving server, at least temporarily to troubleshoot this issue. I see no good reason to depend on third party DNS resolver and its potential quirks with anything beyond a trivial home network. Installing a 'bind' (or other server) in caching-only mode should be out-of-the-box. Just don't set any forwarders, otherwise you are likely back to the same issue. -- Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug.
