On Tue, Nov 14, 2006 at 01:50:24PM +0100, Urban Hillebrand wrote:
> Hello list,
>
> we have an intermittent problem here. We saw several times that postfix
> starts (temporarily) bouncing mails with "450 server configuration error".
> All we see in our logs is
>
> Nov 14 00:22:54 XXXX postfix/smtpd[5456]: connect from
> pool-68-237-243-52.ny325.east.verizon.net[68.237.243.52]
> Nov 14 00:24:37 XXXX postfix/smtpd[5456]: warning: timeout on
> 127.0.0.1:12525 while reading input attribute name
> Nov 14 00:24:37 XXXX postfix/smtpd[5456]: warning: problem talking to
> server 127.0.0.1:12525: Connection timed out
> Nov 14 00:26:18 XXXX postfix/smtpd[5456]: NOQUEUE: reject: RCPT from
> pool-68-237-243-52.ny325.east.verizon.net[68.237.243.52]:
> 450 Server configuration problem; from=<[EMAIL PROTECTED]>
> to=<[EMAIL PROTECTED]> proto=ESMTP helo=<friend>
>
> Until now, we suspected either linux limits (number of filehandles etc.),
> or a too small number of $MAX_PROC for policyd-weight - without having any
> evidence.
>
> This changed today. We experienced severe performance problems with the
> DNS server, which acts as forwarder for our caching only bind9 on our
> machine. One sideeffect of those performance problems was exactly the
> error described above - until those issues were resolved, all mails were
> bounced with the 450 error.
>
> It would be my understanding that in case of DNS errors policyd-weight
> should return DUNNO after $MAXDNSERR queries, right?
Right. Obviously the alarm call doesn't interrupt the recv() call appropriate.
> Any ideas on this? Anything we could do to debug this?
You could set $DEBUG = 1;
In your logs you should then see a line like:
warning: rbl_lookup: timeout: nask1.2.3.4 or similar
If my timeout implentation does not work on your box then this should
be the last line of that policyd-weight PID. It should then hang around
forever, without logging.
A quickfix would be to say $USE_NET_DNS = 1; in the config file.
--
Robert Felber (PGP: 896CF30B)
Munich, Germany
____________________________________________________________
Policyd-weight Mailinglist - http://www.policyd-weight.org/
