The times of the two first DNS resolvers are UNACEPTABLE
I tried doing telnet mail.wnx.com 25 and the first time take 15 seconds to
show me the helo message
I tried again and taked 1 second to show me the helo message.
First:
How busy is your box? Doing a "top" will show you some statistics
How much bandwith it sucks?
Second:
Try puting this on resolv.conf (216.31.146.10 is another box, doesn't it?)
search webeasy.com
nameserver 216.31.146.10
If this improves performance the problem is certainly with your DNS conf on
your box :-S
-----Mensaje original-----
De: Michael Amster [mailto:[EMAIL PROTECTED]
Enviado el: jueves, 02 de noviembre de 2006 1:57
Para: [email protected]
Asunto: Re: [qmailtoaster] Still looking at slow smtp response
[EMAIL PROTECTED] wrote:
BTW:
Which is the output of this commands?
dig txt surbl-org-permanent-test-point.com.sc.surbl.org
[EMAIL PROTECTED] spamassassin]# dig txt
surbl-org-permanent-test-point.com.sc.surbl.org
; <<>> DiG 9.3.2 <<>> txt surbl-org-permanent-test-point.com.sc.surbl.org
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50196 ;; flags: qr rd
ra; QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 0
;; QUESTION SECTION:
;surbl-org-permanent-test-point.com.sc.surbl.org. IN TXT
;; ANSWER SECTION:
surbl-org-permanent-test-point.com.sc.surbl.org. 2100 IN TXT "sc.surbl.org
permanent test point"
;; AUTHORITY SECTION:
sc.surbl.org. 900 IN NS a.surbl.org.
sc.surbl.org. 900 IN NS b.surbl.org.
sc.surbl.org. 900 IN NS c.surbl.org.
sc.surbl.org. 900 IN NS d.surbl.org.
sc.surbl.org. 900 IN NS e.surbl.org.
sc.surbl.org. 900 IN NS f.surbl.org.
sc.surbl.org. 900 IN NS g.surbl.org.
sc.surbl.org. 900 IN NS h.surbl.org.
sc.surbl.org. 900 IN NS i.surbl.org.
sc.surbl.org. 900 IN NS j.surbl.org.
sc.surbl.org. 900 IN NS k.surbl.org.
sc.surbl.org. 900 IN NS l.surbl.org.
sc.surbl.org. 900 IN NS m.surbl.org.
sc.surbl.org. 900 IN NS n.surbl.org.
;; Query time: 218 msec
;; SERVER: 216.31.146.10#53(216.31.146.10) ;; WHEN: Wed Nov 1 16:44:35 2006
;; MSG SIZE rcvd: 335
[EMAIL PROTECTED] spamassassin]#
dig txt surbl-org-permanent-test-point.com.sc.surbl.org @127.0.0.1
[EMAIL PROTECTED] spamassassin]# dig txt
surbl-org-permanent-test-point.com.sc.surbl.org @127.0.0.1
; <<>> DiG 9.3.2 <<>> txt
surbl-org-permanent-test-point.com.sc.surbl.org @127.0.0.1 ; (1 server
found) ;; global options: printcmd ;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 268 ;; flags: qr rd ra;
QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;surbl-org-permanent-test-point.com.sc.surbl.org. IN TXT
;; ANSWER SECTION:
surbl-org-permanent-test-point.com.sc.surbl.org. 2100 IN TXT "sc.surbl.org
permanent test point"
;; Query time: 202 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Nov 1 16:45:09 2006
;; MSG SIZE rcvd: 111
[EMAIL PROTECTED] spamassassin]#
dig txt surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.9
Doh. the service was not running on that machine after I did a restart.
I will chkconfig it on. After a restart:
[EMAIL PROTECTED] spamassassin]# dig txt
surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.9
; <<>> DiG 9.3.2 <<>> txt
surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.9 ; (1 server
found) ;; global options: printcmd ;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6713 ;; flags: qr rd ra;
QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 0
;; QUESTION SECTION:
;surbl-org-permanent-test-point.com.sc.surbl.org. IN TXT
;; ANSWER SECTION:
surbl-org-permanent-test-point.com.sc.surbl.org. 2100 IN TXT "sc.surbl.org
permanent test point"
;; AUTHORITY SECTION:
sc.surbl.org. 86400 IN NS n.surbl.org.
sc.surbl.org. 86400 IN NS a.surbl.org.
sc.surbl.org. 86400 IN NS b.surbl.org.
sc.surbl.org. 86400 IN NS c.surbl.org.
sc.surbl.org. 86400 IN NS d.surbl.org.
sc.surbl.org. 86400 IN NS e.surbl.org.
sc.surbl.org. 86400 IN NS f.surbl.org.
sc.surbl.org. 86400 IN NS g.surbl.org.
sc.surbl.org. 86400 IN NS h.surbl.org.
sc.surbl.org. 86400 IN NS i.surbl.org.
sc.surbl.org. 86400 IN NS j.surbl.org.
sc.surbl.org. 86400 IN NS k.surbl.org.
sc.surbl.org. 86400 IN NS l.surbl.org.
sc.surbl.org. 86400 IN NS m.surbl.org.
;; Query time: 2162 msec
;; SERVER: 216.31.146.9#53(216.31.146.9) ;; WHEN: Wed Nov 1 16:46:47 2006
;; MSG SIZE rcvd: 335
dig txt surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.10
[EMAIL PROTECTED] spamassassin]# dig txt
surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.10
; <<>> DiG 9.3.2 <<>> txt
surbl-org-permanent-test-point.com.sc.surbl.org @216.31.146.10 ; (1
server found) ;; global options: printcmd ;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64360 ;; flags: qr
rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 0
;; QUESTION SECTION:
;surbl-org-permanent-test-point.com.sc.surbl.org. IN TXT
;; ANSWER SECTION:
surbl-org-permanent-test-point.com.sc.surbl.org. 1809 IN TXT "sc.surbl.org
permanent test point"
;; AUTHORITY SECTION:
sc.surbl.org. 609 IN NS n.surbl.org.
sc.surbl.org. 609 IN NS a.surbl.org.
sc.surbl.org. 609 IN NS b.surbl.org.
sc.surbl.org. 609 IN NS c.surbl.org.
sc.surbl.org. 609 IN NS d.surbl.org.
sc.surbl.org. 609 IN NS e.surbl.org.
sc.surbl.org. 609 IN NS f.surbl.org.
sc.surbl.org. 609 IN NS g.surbl.org.
sc.surbl.org. 609 IN NS h.surbl.org.
sc.surbl.org. 609 IN NS i.surbl.org.
sc.surbl.org. 609 IN NS j.surbl.org.
sc.surbl.org. 609 IN NS k.surbl.org.
sc.surbl.org. 609 IN NS l.surbl.org.
sc.surbl.org. 609 IN NS m.surbl.org.
;; Query time: 2 msec
;; SERVER: 216.31.146.10#53(216.31.146.10) ;; WHEN: Wed Nov 1 16:49:26
2006 ;; MSG SIZE rcvd: 335
The service is still pretty slow - you can try doing a telnet mail.wnx.com
25 and see. Even after restarting named. Let me keep this running a while
and get back to you on what I see. This has been useful.
Executed from the mail server? (The important is the time it takes)
Ok, so the problem is that the connection takes 20 seconds to begin?
I mean, if you make a "telnet yourmailbox.com 25" from another hosts
takes
25 seconds to do something?
If this is the problem is related with DNS.
I do use 7 lists myself, and the whole process takes 2 or 3 seconds
when not cached.
If you use dnscache, and you have a somewhat busy server please see
"Measuring the effect of the cache size" in
http://cr.yp.to/djbdns/cachesize.html to improve effectiveness of your
cache.
On the other hand:
If this is not the problem it must not be a RBL problem.
The problem should be with spamassassin.
I do use razor2 and bayes (and SURBL), but not pyzor and DCC.
Should you disable one that two (pyzor OR DCC) and see if there's any
change?
Then try with disabling the other.
search webeasy.com
nameserver 127.0.0.1
nameserver 216.31.146.9
nameserver 216.31.146.10
The machine is 216.31.146.9 but I have djbdns bound to 127.0.0.1 and
BIND bound to 216.31.146.9
[EMAIL PROTECTED] wrote:
What is in your /etc/resolv.conf ?
My timings are still showing about 20s to respond on my server. I
have the following in my blacklist file:
-r relays.ordb.org -r dnsbl.antispam.or.id -r opm.blitzed.org -r
list.dsbl.org -r cbl.abuseat.org -r sbl-xbl.spamhaus.org
My spamassissin local.cf looks like this:
ok_locales all
skip_rbl_checks 0
report_safe 1
lock_method flock
rewrite_header Subject [SPAM]
required_score 6.0
bayes_file_mode 0666
auto_whitelist_path /home/vpopmail/.spamassassin/auto-whitelist
use_pyzor 1
use_razor2 1
use_dcc 1
use_auto_whitelist 1
use_bayes 1
bayes_auto_learn 1
use_bayes_rules 1
bayes_auto_learn_threshold_spam 7.0
bayes_auto_learn_threshold_nonspam 0.1 bayes_auto_expire 0
bayes_path /home/vpopmail/.spamassassin/bayes
razor_config /home/vpopmail/.razor/razor-agent.conf
dcc_home /var/dcc
Concurrency incoming is: 100
I have taken the auto_expire off the spamassassin and move it into
a nightly cron. I think this slow response time is a reason for
getting multiple messages from certain services that see this delay
as a timeout...Plus it just sucks from the client point of view.
-MA
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
-------------------------------------------------------------------
-- To unsubscribe, e-mail:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
--------------------------------------------------------------------
- To unsubscribe, e-mail:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
