The times of the two first DNS resolvers are UNACEPTABLE

I tried doing telnet mail.wnx.com 25 and the first time take 15 seconds to
show me the helo message

I tried again and taked 1 second to show me the helo message.

First: 


How busy is your box? Doing a "top" will show you some statistics

How much bandwith it sucks?

Second:


Try puting this on resolv.conf (216.31.146.10 is another box, doesn't it?)


search webeasy.com
nameserver 216.31.146.10


If this improves performance the problem is certainly with your DNS conf on
your box :-S



-----Mensaje original-----
De: Michael Amster [mailto:[EMAIL PROTECTED] 
Enviado el: jueves, 02 de noviembre de 2006 1:57
Para: [email protected]
Asunto: Re: [qmailtoaster] Still looking at slow smtp response

[EMAIL PROTECTED] wrote:

>BTW:
>
> Which is the output of this commands?
>
>dig txt surbl-org-permanent-test-point.com.sc.surbl.org
>  
>
[EMAIL PROTECTED] spamassassin]# dig txt
surbl-org-permanent-test-point.com.sc.surbl.org

; <<>> DiG 9.3.2 <<>> txt surbl-org-permanent-test-point.com.sc.surbl.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50196 ;; flags: qr rd
ra; QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 0

;; QUESTION SECTION:
;surbl-org-permanent-test-point.com.sc.surbl.org. IN TXT

;; ANSWER SECTION:
surbl-org-permanent-test-point.com.sc.surbl.org. 2100 IN TXT "sc.surbl.org
permanent test point"

;; AUTHORITY SECTION:
sc.surbl.org.           900     IN      NS      a.surbl.org.
sc.surbl.org.           900     IN      NS      b.surbl.org.
sc.surbl.org.           900     IN      NS      c.surbl.org.
sc.surbl.org.           900     IN      NS      d.surbl.org.
sc.surbl.org.           900     IN      NS      e.surbl.org.
sc.surbl.org.           900     IN      NS      f.surbl.org.
sc.surbl.org.           900     IN      NS      g.surbl.org.
sc.surbl.org.           900     IN      NS      h.surbl.org.
sc.surbl.org.           900     IN      NS      i.surbl.org.
sc.surbl.org.           900     IN      NS      j.surbl.org.
sc.surbl.org.           900     IN      NS      k.surbl.org.
sc.surbl.org.           900     IN      NS      l.surbl.org.
sc.surbl.org.           900     IN      NS      m.surbl.org.
sc.surbl.org.           900     IN      NS      n.surbl.org.

;; Query time: 218 msec
;; SERVER: 216.31.146.10#53(216.31.146.10) ;; WHEN: Wed Nov  1 16:44:35 2006
;; MSG SIZE  rcvd: 335

[EMAIL PROTECTED] spamassassin]#

>dig txt surbl-org-permanent-test-point.com.sc.surbl.org @127.0.0.1
>
>  
>
[EMAIL PROTECTED] spamassassin]# dig txt
surbl-org-permanent-test-point.com.sc.surbl.org @127.0.0.1

; <<>> DiG 9.3.2 <<>> txt
surbl-org-permanent-test-point.com.sc.surbl.org @127.0.0.1 ; (1 server
found) ;; global options:  printcmd ;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 268 ;; flags: qr rd ra;
QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;surbl-org-permanent-test-point.com.sc.surbl.org. IN TXT

;; ANSWER SECTION:
surbl-org-permanent-test-point.com.sc.surbl.org. 2100 IN TXT "sc.surbl.org
permanent test point"

;; Query time: 202 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Nov  1 16:45:09 2006
;; MSG SIZE  rcvd: 111

[EMAIL PROTECTED] spamassassin]#

>dig txt surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.9
>  
>
Doh. the service was not running on that machine after I did a restart.  
I will chkconfig it on.  After a restart:
[EMAIL PROTECTED] spamassassin]# dig txt
surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.9

; <<>> DiG 9.3.2 <<>> txt
surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.9 ; (1 server
found) ;; global options:  printcmd ;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6713 ;; flags: qr rd ra;
QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 0

;; QUESTION SECTION:
;surbl-org-permanent-test-point.com.sc.surbl.org. IN TXT

;; ANSWER SECTION:
surbl-org-permanent-test-point.com.sc.surbl.org. 2100 IN TXT "sc.surbl.org
permanent test point"

;; AUTHORITY SECTION:
sc.surbl.org.           86400   IN      NS      n.surbl.org.
sc.surbl.org.           86400   IN      NS      a.surbl.org.
sc.surbl.org.           86400   IN      NS      b.surbl.org.
sc.surbl.org.           86400   IN      NS      c.surbl.org.
sc.surbl.org.           86400   IN      NS      d.surbl.org.
sc.surbl.org.           86400   IN      NS      e.surbl.org.
sc.surbl.org.           86400   IN      NS      f.surbl.org.
sc.surbl.org.           86400   IN      NS      g.surbl.org.
sc.surbl.org.           86400   IN      NS      h.surbl.org.
sc.surbl.org.           86400   IN      NS      i.surbl.org.
sc.surbl.org.           86400   IN      NS      j.surbl.org.
sc.surbl.org.           86400   IN      NS      k.surbl.org.
sc.surbl.org.           86400   IN      NS      l.surbl.org.
sc.surbl.org.           86400   IN      NS      m.surbl.org.

;; Query time: 2162 msec
;; SERVER: 216.31.146.9#53(216.31.146.9) ;; WHEN: Wed Nov  1 16:46:47 2006
;; MSG SIZE  rcvd: 335


>dig txt surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.10 
>[EMAIL PROTECTED] spamassassin]# dig txt 
>surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.10
>
>; <<>> DiG 9.3.2 <<>> txt 
>surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.10 ; (1 
>server found) ;; global options:  printcmd ;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64360 ;; flags: qr 
>rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 0
>
>;; QUESTION SECTION:
>;surbl-org-permanent-test-point.com.sc.surbl.org. IN TXT
>
>;; ANSWER SECTION:
>surbl-org-permanent-test-point.com.sc.surbl.org. 1809 IN TXT "sc.surbl.org
permanent test point"
>
>;; AUTHORITY SECTION:
>sc.surbl.org.           609     IN      NS      n.surbl.org.
>sc.surbl.org.           609     IN      NS      a.surbl.org.
>sc.surbl.org.           609     IN      NS      b.surbl.org.
>sc.surbl.org.           609     IN      NS      c.surbl.org.
>sc.surbl.org.           609     IN      NS      d.surbl.org.
>sc.surbl.org.           609     IN      NS      e.surbl.org.
>sc.surbl.org.           609     IN      NS      f.surbl.org.
>sc.surbl.org.           609     IN      NS      g.surbl.org.
>sc.surbl.org.           609     IN      NS      h.surbl.org.
>sc.surbl.org.           609     IN      NS      i.surbl.org.
>sc.surbl.org.           609     IN      NS      j.surbl.org.
>sc.surbl.org.           609     IN      NS      k.surbl.org.
>sc.surbl.org.           609     IN      NS      l.surbl.org.
>sc.surbl.org.           609     IN      NS      m.surbl.org.
>
>;; Query time: 2 msec
>;; SERVER: 216.31.146.10#53(216.31.146.10) ;; WHEN: Wed Nov  1 16:49:26 
>2006 ;; MSG SIZE  rcvd: 335
>
>
>  
>
The service is still pretty slow - you can try doing a telnet mail.wnx.com
25 and see.  Even after restarting named.  Let me keep this running a while
and get back to you on what I see.  This has been useful.

>Executed from the mail server? (The important is the time it takes)
>
>
>  
>
>>Ok, so the problem is that the connection takes 20 seconds to begin?
>>
>>
>>I mean, if you make a "telnet yourmailbox.com 25" from another hosts 
>>takes
>>25 seconds to do something?
>>
>>If this is the problem is related with DNS.
>>
>>I do use 7 lists myself, and the whole process takes 2 or 3 seconds 
>>when not cached.
>>
>>
>>If you use dnscache, and you have a somewhat busy server please see 
>>"Measuring the effect of the cache size" in 
>>http://cr.yp.to/djbdns/cachesize.html to improve effectiveness of your 
>>cache.
>>
>>
>>On the other hand:
>>
>>If this is not the problem it must not be a RBL problem.
>>
>>The problem should be with spamassassin.
>>
>>I do use razor2 and bayes (and SURBL), but not pyzor and DCC.
>>
>>Should you disable one that two (pyzor OR DCC) and see if there's any 
>>change?
>>
>>Then try with disabling the other.
>>
>>
>>
>>
>>
>>    
>>
>>>search webeasy.com
>>>nameserver 127.0.0.1
>>>nameserver 216.31.146.9
>>>nameserver 216.31.146.10
>>>
>>>The machine is 216.31.146.9 but I have djbdns bound to 127.0.0.1 and 
>>>BIND bound to 216.31.146.9
>>>
>>>[EMAIL PROTECTED] wrote:
>>>
>>>      
>>>
>>>>What is in your /etc/resolv.conf ?
>>>>
>>>>
>>>>
>>>>
>>>>        
>>>>
>>>>>My timings are still showing about 20s to respond on my server.  I 
>>>>>have the following in my blacklist file:
>>>>>
>>>>>-r relays.ordb.org -r dnsbl.antispam.or.id -r opm.blitzed.org -r 
>>>>>list.dsbl.org -r cbl.abuseat.org -r sbl-xbl.spamhaus.org
>>>>>
>>>>>My spamassissin local.cf looks like this:
>>>>>ok_locales all
>>>>>skip_rbl_checks 0
>>>>>report_safe 1
>>>>>lock_method flock
>>>>>rewrite_header Subject [SPAM]
>>>>>required_score 6.0
>>>>>bayes_file_mode 0666
>>>>>auto_whitelist_path /home/vpopmail/.spamassassin/auto-whitelist
>>>>>use_pyzor 1
>>>>>use_razor2 1
>>>>>use_dcc 1
>>>>>use_auto_whitelist 1
>>>>>use_bayes 1
>>>>>bayes_auto_learn 1
>>>>>use_bayes_rules 1
>>>>>bayes_auto_learn_threshold_spam 7.0 
>>>>>bayes_auto_learn_threshold_nonspam 0.1 bayes_auto_expire 0 
>>>>>bayes_path /home/vpopmail/.spamassassin/bayes
>>>>>razor_config /home/vpopmail/.razor/razor-agent.conf
>>>>>dcc_home /var/dcc
>>>>>
>>>>>Concurrency incoming is: 100
>>>>>
>>>>>I have taken the auto_expire off the spamassassin and move it into 
>>>>>a nightly cron.  I think this slow response time is a reason for 
>>>>>getting multiple messages from certain services that see this delay 
>>>>>as a timeout...Plus it just sucks from the client point of view.
>>>>>
>>>>>-MA
>>>>>
>>>>>---------------------------------------------------------------------
>>>>>    QmailToaster hosted by: VR Hosted <http://www.vr.org>
>>>>>-------------------------------------------------------------------
>>>>>-- To unsubscribe, e-mail: 
>>>>>[EMAIL PROTECTED]
>>>>>For additional commands, e-mail:
>>>>>[EMAIL PROTECTED]
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>          
>>>>>
>>>>
>>>>---------------------------------------------------------------------
>>>>    QmailToaster hosted by: VR Hosted <http://www.vr.org>
>>>>--------------------------------------------------------------------
>>>>- To unsubscribe, e-mail: 
>>>>[EMAIL PROTECTED]
>>>>For additional commands, e-mail: 
>>>>[EMAIL PROTECTED]
>>>>
>>>>
>>>>
>>>>        
>>>>
>>>---------------------------------------------------------------------
>>>     QmailToaster hosted by: VR Hosted <http://www.vr.org>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: 
>>>[EMAIL PROTECTED]
>>>For additional commands, e-mail: 
>>>[EMAIL PROTECTED]
>>>
>>>
>>>      
>>>
>>
>>---------------------------------------------------------------------
>>     QmailToaster hosted by: VR Hosted <http://www.vr.org>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: 
>>[EMAIL PROTECTED]
>>
>>
>>    
>>
>
>
>
>---------------------------------------------------------------------
>     QmailToaster hosted by: VR Hosted <http://www.vr.org>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: 
>[EMAIL PROTECTED]
>
>  
>


---------------------------------------------------------------------
     QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

BEGIN:VCARD
VERSION:2.1
N:Sánchez Martín;David
FN:[EMAIL PROTECTED] ([EMAIL PROTECTED])
ORG:E2000 Financial Investments, S.A.;Centro de Nuevas Tecnologías
TITLE:Administrador de Sistemas
TEL;WORK;VOICE:902196177
ADR;WORK;ENCODING=QUOTED-PRINTABLE:;;Agust=EDn Bravo 17 2=BA B=0D=0A33120 PRAVIA;Asturias;;;Espa=F1a
LABEL;WORK;ENCODING=QUOTED-PRINTABLE:Agust=EDn Bravo 17 2=BA B=0D=0A33120 PRAVIA=0D=0AAsturias=0D=0AEspa=F1a
URL;WORK:http://www.e2000.es
EMAIL;PREF;INTERNET:[EMAIL PROTECTED]
REV:20060705T152542Z
END:VCARD

---------------------------------------------------------------------
     QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to