Re: [OT] frequent TRY_AGAINs and 10s timeouts, but *only* with b.barracudacentral.org
On Sun, 2012-06-03 at 00:03:06 +0100, Ned Slider wrote: On 02/06/12 17:44, Sahil Tandon wrote: ... I've separately engaged our DNS admins in case they could offer some insight, but it would be interesting to learn if others are experiencing the same issue /only/ with barracuda. I see similar in my bind logs on a server running SpamAssassin. The barracuda RBL is queried by default in SpamAssassin so I suspect the volume of queries they receive is pretty high. I assume it's a load issue at their end. I've been seeing such entries in my logs for months but it does seen to have got worse since around April of this year. ... Thanks to you and everyone else who replied on and off-list. I'll try to get someone's attention at barracuda. -- Sahil Tandon
[OT] frequent TRY_AGAINs and 10s timeouts, but *only* with b.barracudacentral.org
I am seeing hundreds (on higher volume days, over a thousand) of lines like: Jun 2 10:04:30 mx1 postfix/dnsblog[58868]: warning: dnsblog_query: lookup error for DNS query 23.124.167.115.b.barracudacentral.org: Host or domain name not found. Name service error for name=23.124.167.115.b.barracudacentral.org type=A: Host not found, try again Jun 2 10:04:33 mx1 postfix/smtpd[89019]: warning: 17.204.24.8.b.barracudacentral.org: RBL lookup error: Host or domain name not found. Name service error for name=17.204.24.8.b.barracudacentral.org type=A: Host not found, try again Jun 2 10:04:37 mx1 postfix/postscreen[55753]: warning: dnsblog reply timeout 10s for b.barracudacentral.org These lines are interspersed among others that indicate more normal activity with b.barracudacentral.org, e.g.: Jun 2 10:04:10 mx1 postfix/dnsblog[55985]: addr 199.30.50.35 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 2 10:04:47 mx1 postfix/dnsblog[66369]: addr 157.56.112.23 listed by domain b.barracudacentral.org as 127.0.0.2 I know this is not an issue with Postfix (which dutifully reports the TRY_AGAIN it receives from the system library), but I wonder if anyone else is seeing this from barracuda? Based on a week's worth of logs, I do not see even a single instance of this problem with any other RBL (and we query several). I've separately engaged our DNS admins in case they could offer some insight, but it would be interesting to learn if others are experiencing the same issue /only/ with barracuda. -- Sahil Tandon
Re: [OT] frequent TRY_AGAINs and 10s timeouts, but *only* with b.barracudacentral.org
Yes, I've seen that this week as well. On 6/2/2012 12:44 PM, Sahil Tandon wrote: I am seeing hundreds (on higher volume days, over a thousand) of lines like: Jun 2 10:04:30 mx1 postfix/dnsblog[58868]: warning: dnsblog_query: lookup error for DNS query 23.124.167.115.b.barracudacentral.org: Host or domain name not found. Name service error for name=23.124.167.115.b.barracudacentral.org type=A: Host not found, try again Jun 2 10:04:33 mx1 postfix/smtpd[89019]: warning: 17.204.24.8.b.barracudacentral.org: RBL lookup error: Host or domain name not found. Name service error for name=17.204.24.8.b.barracudacentral.org type=A: Host not found, try again Jun 2 10:04:37 mx1 postfix/postscreen[55753]: warning: dnsblog reply timeout 10s for b.barracudacentral.org These lines are interspersed among others that indicate more normal activity with b.barracudacentral.org, e.g.: Jun 2 10:04:10 mx1 postfix/dnsblog[55985]: addr 199.30.50.35 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 2 10:04:47 mx1 postfix/dnsblog[66369]: addr 157.56.112.23 listed by domain b.barracudacentral.org as 127.0.0.2 I know this is not an issue with Postfix (which dutifully reports the TRY_AGAIN it receives from the system library), but I wonder if anyone else is seeing this from barracuda? Based on a week's worth of logs, I do not see even a single instance of this problem with any other RBL (and we query several). I've separately engaged our DNS admins in case they could offer some insight, but it would be interesting to learn if others are experiencing the same issue /only/ with barracuda.
Re: [OT] frequent TRY_AGAINs and 10s timeouts, but *only* with b.barracudacentral.org
Sahil Tandon sahil+post...@tandon.net wrote: I am seeing hundreds (on higher volume days, over a thousand) of lines like: Jun 2 10:04:30 mx1 postfix/dnsblog[58868]: warning: dnsblog_query: lookup error for DNS query 23.124.167.115.b.barracudacentral.org: Host or domain name not found. Name service error for name=23.124.167.115.b.barracudacentral.org type=A: Host not found, try again Yes, a few to dozens on my fairly low volume servers for the last couple weeks. Only barracuda, never any of the other popular lists. So far I just ignore it. -- Noel Jones Sent from my mobile. Sorry.
Re: [OT] frequent TRY_AGAINs and 10s timeouts, but *only* with b.barracudacentral.org
On 02/06/12 17:44, Sahil Tandon wrote: I am seeing hundreds (on higher volume days, over a thousand) of lines like: Jun 2 10:04:30 mx1 postfix/dnsblog[58868]: warning: dnsblog_query: lookup error for DNS query 23.124.167.115.b.barracudacentral.org: Host or domain name not found. Name service error for name=23.124.167.115.b.barracudacentral.org type=A: Host not found, try again Jun 2 10:04:33 mx1 postfix/smtpd[89019]: warning: 17.204.24.8.b.barracudacentral.org: RBL lookup error: Host or domain name not found. Name service error for name=17.204.24.8.b.barracudacentral.org type=A: Host not found, try again Jun 2 10:04:37 mx1 postfix/postscreen[55753]: warning: dnsblog reply timeout 10s for b.barracudacentral.org These lines are interspersed among others that indicate more normal activity with b.barracudacentral.org, e.g.: Jun 2 10:04:10 mx1 postfix/dnsblog[55985]: addr 199.30.50.35 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 2 10:04:47 mx1 postfix/dnsblog[66369]: addr 157.56.112.23 listed by domain b.barracudacentral.org as 127.0.0.2 I know this is not an issue with Postfix (which dutifully reports the TRY_AGAIN it receives from the system library), but I wonder if anyone else is seeing this from barracuda? Based on a week's worth of logs, I do not see even a single instance of this problem with any other RBL (and we query several). I've separately engaged our DNS admins in case they could offer some insight, but it would be interesting to learn if others are experiencing the same issue /only/ with barracuda. I see similar in my bind logs on a server running SpamAssassin. The barracuda RBL is queried by default in SpamAssassin so I suspect the volume of queries they receive is pretty high. I assume it's a load issue at their end. I've been seeing such entries in my logs for months but it does seen to have got worse since around April of this year. I see similar log entries for sa-accredit.habeas.com which is also queried by SpamAssassin. Those are the only two that stand out in my logs from the multitude of RBLs queried.
Re: [OT] frequent TRY_AGAINs and 10s timeouts, but *only* with b.barracudacentral.org
On 6/2/2012 11:44 AM, Sahil Tandon wrote: Jun 2 10:04:30 mx1 postfix/dnsblog[58868]: warning: dnsblog_query: lookup error for DNS query 23.124.167.115.b.barracudacentral.org: Host or domain name not found. Name service error for name=23.124.167.115.b.barracudacentral.org type=A: Host not found, try again I know this is not an issue with Postfix (which dutifully reports the TRY_AGAIN it receives from the system library), but I wonder if anyone else is seeing this from barracuda? ~$ grep b.barracudacentral.org /var/log/mail.warn May 30 01:35:14 greer postfix/smtpd[343]: warning: 62.214.85.209.b.barracudacentral.org: RBL lookup error: Host or domain name not found. Name service error for name=62.214.85.209.b.barracudacentral.org type=A: Host not found, try again May 31 08:05:14 greer postfix/smtpd[30807]: warning: 45.162.165.188.b.barracudacentral.org: RBL lookup error: Host or domain name not found. Name service error for name=45.162.165.188.b.barracudacentral.org type=A: Host not found, try again May 31 12:32:49 greer postfix/smtpd[26129]: warning: 107.3.19.23.b.barracudacentral.org: RBL lookup error: Host or domain name not found. Name service error for name=107.3.19.23.b.barracudacentral.org type=A: Host not found, try again May 31 14:04:48 greer postfix/smtpd[3633]: warning: 54.11.138.188.b.barracudacentral.org: RBL lookup error: Host or domain name not found. Name service error for name=54.11.138.188.b.barracudacentral.org type=A: Host not found, try again This seems to be par for the course with BRBL. I first configured it when it was all a buzz some years ago, and every query resulted in these errors, so I ditched it. I enabled it again some year(s) later, and for the most part queries are answered. My MX runs only 500-1000 connects per day, and a few failures a day isn't a show stopper. It still stops a decent amount of spam. I'd guess they have some sort of (perennial) load balancing issues with their servers, or simply need to add more (geographically dispersed) servers. The problem isn't on your end Sahil. -- Stan
