RE: [vchkpw] problems with rbls?

2003-01-07 Thread Tom Walsh
Just so all are aware, SPEWS DNS blew up for some unkown reason.

I believe this effected relays.osirusoft.com and all dsbl.org lists. Neither
of these resolve and the IP addresses do not respond to direct DNS queries.
So something is certainly afoot.

Details are still sketchy, but judging from my MRTG graphs, my SMTP
concurrency started to tick above the daily moving average (~70-80
conccurrent smtp connections up to 512) at approximately 10:00am CST
(GMT -6).

Tom Walsh
Network Administrator
http://www.ala.net/



::-Original Message-
::From: Brendan McAlpine [mailto:[EMAIL PROTECTED]]
::Sent: Monday, January 06, 2003 5:43 PM
::To: [EMAIL PROTECTED]
::Subject: [vchkpw] problems with rbls?
::
::
::Does anyone know if any of the following rbls are slow or
::non-functional?
::
::Starting at about 2PM EST, my smtp concurrency shot through the roof,
::which is usually a sign that one of the rbls i am using isn't working
::properly.  anyone know of any problems with the following rbls:
::
::korea.services.net
::relays.ordb.org
::relays.osirusoft.com
::sbl.spamhaus.org
::spews.relays.osirusoft.com
::
::If nothing is wrong, any reason why my smtp concurrency would shoot up
::to its maximum?  I am watching the smtp log roll by and it doesn't seem
::to be an attack from any one address..
::
::TIA
::
::Brendan
::
::
::






Re: [vchkpw] problems with rbls?

2003-01-06 Thread Paul Theodoropoulos

thanks. that entry was from a two year old rc script from an ISP i no 
longer run. i haven't used the timeout in so long i had to email my protege 
and ask him to send me that line from the old servers. i'll let him know.

At 11:26 PM 01-06-2003, David Phillips wrote:
Paul Theodoropoulos writes:
> -rrelays.visi.com

FYI:  http://relays.visi.com/

--
David Phillips <[EMAIL PROTECTED]>
http://david.acz.org/


Paul Theodoropoulos
http://www.anastrophe.com
http://folding.stanford.edu
The Nicest Misanthrope on the Net 





Re: [vchkpw] problems with rbls?

2003-01-06 Thread David Phillips
Paul Theodoropoulos writes:
> -rrelays.visi.com

FYI:  http://relays.visi.com/

-- 
David Phillips <[EMAIL PROTECTED]>
http://david.acz.org/





Re: [vchkpw] problems with rbls?

2003-01-06 Thread Bill Shupp
On Monday, January 6, 2003, at 07:51  PM, Paul Theodoropoulos wrote:




I got paged at 3 am because sbl.spamhaus.org was not responding, 
causing the smtp to stall.  The frustrating part is that the -t 
option (timeout) for rblsmtpd doesn't appear to work.  Anyone taken a 
stab at fixing this?  I'd prefer that rblsmtpd default to allow the 
connection if the rbl cannot be reached in x seconds.

the -t option has to go at the _end_ of the declarations, rather than 
at the beginning where most options go. not sure why. but works for > me:

-rorbs.dorkslayers.com -rrelays.ordb.org -rrelays.visi.com -t15

will end the conversation at precisely fifteen seconds if it's not 
complete by then.

Excellent, thanks for the tip.  I'll try that.

Regards,

Bill Shupp





Re: [vchkpw] problems with rbls?

2003-01-06 Thread Paul Theodoropoulos


I got paged at 3 am because sbl.spamhaus.org was not responding, causing 
the smtp to stall.  The frustrating part is that the -t option (timeout) 
for rblsmtpd doesn't appear to work.  Anyone taken a stab at fixing 
this?  I'd prefer that rblsmtpd default to allow the connection if the rbl 
cannot be reached in x seconds.

the -t option has to go at the _end_ of the declarations, rather than at 
the beginning where most options go. not sure why. but works for me:

-rorbs.dorkslayers.com -rrelays.ordb.org -rrelays.visi.com -t15

will end the conversation at precisely fifteen seconds if it's not complete 
by then.

Paul Theodoropoulos
http://www.anastrophe.com
http://folding.stanford.edu
The Nicest Misanthrope on the Net 





Re: [vchkpw] problems with rbls?

2003-01-06 Thread Bill Shupp

On Monday, January 6, 2003, at 03:42  PM, Brendan McAlpine wrote:


Does anyone know if any of the following rbls are slow or 
non-functional?

Starting at about 2PM EST, my smtp concurrency shot through the roof, 
which is usually a sign that one of the rbls i am using isn't working 
properly.  anyone know of any problems with the following rbls:

korea.services.net
relays.ordb.org
relays.osirusoft.com
sbl.spamhaus.org
spews.relays.osirusoft.com

If nothing is wrong, any reason why my smtp concurrency would shoot up 
to its maximum?  I am watching the smtp log roll by and it doesn't 
seem to be an attack from any one address..

I got paged at 3 am because sbl.spamhaus.org was not responding, 
causing the smtp to stall.  The frustrating part is that the -t option 
(timeout) for rblsmtpd doesn't appear to work.  Anyone taken a stab at 
fixing this?  I'd prefer that rblsmtpd default to allow the connection 
if the rbl cannot be reached in x seconds.

Regards,

Bill Shupp




Re: [vchkpw] problems with rbls?

2003-01-06 Thread Brendan McAlpine
Yeah, since I couldn't load osirusoft.com in my browser, I figured they 
were having a problem.

So, since removing those entries, my concurrency is back at normal 
levels, although spam is now higher.

argh

Brendan
On Monday, January 6, 2003, at 07:04 PM, Rick Macdougall wrote:

Hi,

I removed relays.osirusoft.com this morning because of timeouts.

Regards,

RIck

- Original Message -
From: "Brendan McAlpine" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 06, 2003 6:42 PM
Subject: [vchkpw] problems with rbls?


Does anyone know if any of the following rbls are slow or
non-functional?

Starting at about 2PM EST, my smtp concurrency shot through the roof,
which is usually a sign that one of the rbls i am using isn't working
properly.  anyone know of any problems with the following rbls:

korea.services.net
relays.ordb.org
relays.osirusoft.com
sbl.spamhaus.org
spews.relays.osirusoft.com

If nothing is wrong, any reason why my smtp concurrency would shoot up
to its maximum?  I am watching the smtp log roll by and it doesn't seem
to be an attack from any one address..

TIA

Brendan











Re: [vchkpw] problems with rbls?

2003-01-06 Thread Rick Macdougall
Hi,

I removed relays.osirusoft.com this morning because of timeouts.

Regards,

RIck

- Original Message - 
From: "Brendan McAlpine" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 06, 2003 6:42 PM
Subject: [vchkpw] problems with rbls?


Does anyone know if any of the following rbls are slow or 
non-functional?

Starting at about 2PM EST, my smtp concurrency shot through the roof, 
which is usually a sign that one of the rbls i am using isn't working 
properly.  anyone know of any problems with the following rbls:

korea.services.net
relays.ordb.org
relays.osirusoft.com
sbl.spamhaus.org
spews.relays.osirusoft.com

If nothing is wrong, any reason why my smtp concurrency would shoot up 
to its maximum?  I am watching the smtp log roll by and it doesn't seem 
to be an attack from any one address..

TIA

Brendan







[vchkpw] problems with rbls?

2003-01-06 Thread Brendan McAlpine
Does anyone know if any of the following rbls are slow or 
non-functional?

Starting at about 2PM EST, my smtp concurrency shot through the roof, 
which is usually a sign that one of the rbls i am using isn't working 
properly.  anyone know of any problems with the following rbls:

korea.services.net
relays.ordb.org
relays.osirusoft.com
sbl.spamhaus.org
spews.relays.osirusoft.com

If nothing is wrong, any reason why my smtp concurrency would shoot up 
to its maximum?  I am watching the smtp log roll by and it doesn't seem 
to be an attack from any one address..

TIA

Brendan